Privacy,
in plain English.

Last updated 9 November 2026

This page explains what happens to information when you visit nextmars.com or send us a brief. It is written to be read, not to protect us from you. If anything here is unclear, write to info@nextmars.com and we will answer in plain English.

1. Who is responsible for your data

NextMars Ltd, 71-75 Shelton Street, Covent Garden, London WC2H 9JQ, United Kingdom. We are the data controller for this website and for the briefs that arrive through it. Contact: info@nextmars.com.

2. What we collect, and when

When you send a brief. Your name, email address, studio or company name if you give one, project type, timeline, budget range and the brief itself — plus any reference link you paste. The form also attaches three pieces of context: the page you landed on, the site that referred you, and any campaign tags in the URL. That is how we know which channel produced an enquiry; it is not used to build a profile of you.

When you simply read the site. Our host records standard access logs (IP address, browser, page, time). We also count pageviews in our own database — one row per visit, no cookies, no cross-site identifiers, no advertising networks. There is no Google Analytics, no Meta pixel and no session recording on this site.

Never. We do not buy contact lists, and we do not add anyone who enquires to a newsletter. If you want to hear from us again, you have to write back.

3. Why we are allowed to hold it

• To answer your brief and quote a project — steps taken at your request before entering a contract (UK GDPR Article 6(1)(b)), and our legitimate interest in running the studio (6(1)(f)).
• To keep the site working and see what is read — legitimate interest (6(1)(f)). The counter holds no special-category data and is not used for advertising.
• To invoice and to keep accounting records — legal obligation (6(1)(c)).

We do not use your data for automated decision-making, and we do not sell it to anyone. Ever.

4. Who else touches it

Small studio, short list. Each of these is a processor acting on our instructions under a data processing agreement:

5. Sending data outside the UK

Some processors above are in the United States. Where that happens we rely on the UK International Data Transfer Addendum or the provider's UK-approved standard contractual clauses, and we keep the amount of data transferred to the minimum needed to do the job — for the contact form, that is the contents of your brief.

6. How long we keep it

• Enquiries that don't become projects — 24 months, then deleted.
• Project files and correspondence — for the life of the project plus six years, because UK tax law requires the invoices to be kept.
• Pageview counter — 12 months, then aggregated or deleted.
• Material under NDA — for the period the NDA sets, and deleted or returned when it ends.

7. Your rights

You can ask for a copy of what we hold about you, ask us to correct it, ask us to delete it, ask us to restrict what we do with it, object to our legitimate-interest processing, or ask for it in a portable format. Write to info@nextmars.com — we answer within one month, usually the same week, and we will not charge you. You also have the right to lodge a complaint with a supervisory authority.

8. Cookies and local storage

This site sets no tracking cookies. It stores two things in your browser, both of which stay on your device and are never sent to us as identifiers: your chosen colour theme (nm-theme), and a short-lived session key so a single visit is counted once rather than on every page. Clearing your browser storage removes both.

9. Confidential work

Around two thirds of what we make is under NDA and never appears on this site. Where a client allows the work to be shown, it is shown without their name. If you need an NDA before you send a brief, we will sign yours — just say so first and send it to the address above.

10. Changes

If this policy changes we update the date at the top of the page. We do not quietly widen what we do with data we already hold.