Privacy policy

This policy covers personal information collected through nes-agency.com and the forms on it. It does not cover work we perform for a client under a signed services agreement. In those engagements the client is the controller of their own data and the terms of the agreement and any data processing addendum govern instead.

We use the category names set out in the California Consumer Privacy Act so this list can be compared against the statute. A. Identifiers — name, work email address, company name, and, if you accept analytics cookies, your IP address and Google Analytics identifiers. B. Customer records — the name and employer you type into the contact form. D. Commercial information — the topic you select and the message you write about a possible engagement. F. Internet or network activity — pages viewed, referring URL, first landing page, and campaign parameters (utm_source, utm_medium, utm_campaign, utm_term, utm_content) plus advertising click identifiers (gclid, yclid) when you arrive from a campaign link. We do not collect Social Security numbers, driver's licence numbers, passport numbers, payment card numbers, precise geolocation, biometric data, health data, or account credentials through this site. We do not collect sensitive personal information as that term is defined in the CCPA, and therefore have nothing to which a right to limit its use would apply.

Directly from you, when you complete the contact form. Automatically from your browser: campaign parameters and the referring URL are read from the address of the page you land on and stored in your browser's local storage so that, if you later send us a message, we can tell which campaign or link brought you here. This happens on page load, before the cookie banner is answered, because it is necessary to attribute an enquiry you choose to send us — it is not analytics and it is not advertising. Nothing is transmitted to us unless and until you submit the form. From Google Analytics 4, but only after you accept analytics cookies.

— to reply to your enquiry and discuss a possible engagement — to record the enquiry in our customer-relationship management system so it is not lost and so we can follow up — to understand which campaigns and referrers bring enquiries, so we spend marketing budget sensibly — to measure how the site is used in aggregate, where you have accepted analytics cookies — to comply with legal obligations and to establish or defend legal claims We do not use your information for automated decision-making that produces legal or similarly significant effects, and we do not profile you.

We do not sell personal information, and we do not share it for cross-context behavioural advertising, as those terms are defined in the CCPA. We have not done so in the preceding twelve months. We do not disclose the personal information of anyone we know to be under 16. The categories of service providers that receive personal information on our behalf, under contract and only to perform services for us, are: — Customer-relationship management. Contact-form submissions, including your name, email, company, topic, the text of your message and the campaign parameters described above, are transmitted to our Bitrix24 CRM portal so the enquiry is tracked. This portal is hosted outside the United States, so submitting the form involves an international transfer of the information you provide. — Email delivery. A copy of each submission is emailed to our inbox through our email provider. — Hosting and infrastructure. Our servers and the database holding submissions. — Analytics. Google LLC, through Google Analytics 4, and only after you accept analytics cookies. We may also disclose personal information where we are legally compelled to, or to protect our rights, and to a successor entity in the event of a merger or acquisition.

Contact-form submissions, in our database and in the CRM: until the enquiry is resolved and for no more than 24 months after our last contact with you, after which they are deleted. Campaign parameters attached to a submission: for the life of that submission, as part of it. Campaign parameters in your own browser's local storage: until you clear your browser storage. They live on your device, not on our servers. Analytics data held by Google: Google Analytics 4's retention setting, currently 14 months from your last visit. Email correspondence: for as long as the business relationship or enquiry reasonably requires, and then deleted on the same 24-month basis.

Strictly necessary — a cookie recording your language preference, and your cookie choice itself, which we keep in local storage precisely so that recording your choice does not require setting a cookie. These are set without consent because the site cannot function correctly without them. Analytics — Google Analytics 4. It is not loaded at all until you press Accept. Pressing Decline means the Google script is never requested and no analytics cookie is written. You can change your mind at any time using the "Your privacy choices" link in the footer of every page. It reopens the banner and lets you make a new choice, which takes effect immediately and without reloading the page. Google's handling of analytics data is described at https://policies.google.com/privacy.

This site recognises the Global Privacy Control signal. If your browser or extension sends GPC, we treat it as a valid opt-out: analytics are not loaded and the cookie banner does not ask you to decide something you have already decided. You do not need to do anything else. If you later press Accept yourself, that later, affirmative choice is honoured, because it is a deliberate act on your part that postdates the signal. You can return to opting out at any time through the footer link.

Depending on where you live, you may have the right to: — know what personal information we hold about you, and obtain a copy of it — have it corrected if it is inaccurate — have it deleted — opt out of any sale or sharing of it (we do neither, and the Global Privacy Control signal is honoured regardless) — limit the use of sensitive personal information (we collect none) — not be discriminated against for exercising any of these rights. We do not offer financial incentives, and exercising a right will not affect the price or quality of anything we offer you. — appeal a refusal, if you are in a state that provides an appeal right. We will tell you how when we respond. If you are in the EU or UK, you may additionally have rights to restriction, portability and objection, and to withdraw consent at any time.

Email info@nes-agency.com with what you would like us to do. This site collects personal information only online, so email is the method we provide. We will acknowledge within 10 business days and respond substantively within 45 calendar days, which we may extend once by a further 45 days where the request is complex — we will tell you if we need to. To protect your information we must be able to verify that the request comes from you. We will normally do that by matching the email address in the request against the one in our records, and may ask you to confirm details of the enquiry you sent. If we cannot verify a request we will say so rather than release information. An authorised agent may submit a request on your behalf with written permission signed by you; we may still contact you directly to confirm.

Traffic to this site is encrypted with TLS and HSTS is enabled. Access to the database and to the CRM is limited to the people who need it, over authenticated connections. Infrastructure is patched on an ongoing basis and we review the providers we use. No method of transmission or storage is completely secure, and we do not claim otherwise. Please do not send confidential material through the contact form — tell us it exists and we will arrange a secure channel.

This site is aimed at businesses and is not directed at children. We do not knowingly collect personal information from anyone under 13, and we do not knowingly sell or share the personal information of anyone under 16. If you believe a child has provided us with information, email info@nes-agency.com and we will delete it.

We may update this policy. The current version always lives at this URL and the effective date at the top of the page tells you when it last changed. If we make a change that materially affects how we handle information already collected, we will take reasonable steps to tell you.

NES AGENCY LLC 1287 E Newport Center Dr, Ste 206, Deerfield Beach, FL 33442, United States info@nes-agency.com Write to us at that address or email if you have a question about this policy or about how we handle your information.