Privacy Policy

Last Updated: 05 June 2026

1. Who We Are

This website www.nibash.co.uk ("the Site") is operated by NEXBIX LIMITED, a company registered in England and Wales under company number 16178054.

Registered Office: 20 Abbey Road, London, E15 3LG
Email: nexbix.uk@gmail.com
Phone: 07466 440142

For the purposes of the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018, NEXBIX LIMITED is the data controller.

2. What Data We Collect

We may collect and process the following personal data:

2.1 Information You Provide

Identity Data: First name, last name, title
Contact Data: Email address, billing address, delivery address, telephone number
Financial Data: Payment card details (processed securely via our payment provider — we do not store full card details)
Transaction Data: Details of purchases, orders, and payments
Account Data: Username, password, preferences, feedback, and survey responses
Communications Data: Correspondence if you contact us via email, phone, or social media

2.2 Information Collected Automatically

Technical Data: IP address, browser type and version, time zone setting, operating system, device type
Usage Data: Pages visited, time spent on pages, page interaction data, and referring URLs
Cookie Data: See our Cookie Policy (Section 9) for full details

3. How We Use Your Data

We use your personal data for the following purposes and under the following lawful bases:

Purpose	Lawful Basis
To process and fulfil your orders	Performance of a contract
To manage your account	Performance of a contract
To send order updates and delivery notifications	Performance of a contract
To send marketing communications (with consent)	Consent
To improve our website and services	Legitimate interests
To comply with legal obligations (e.g. tax, fraud prevention)	Legal obligation

4. Who We Share Your Data With

We may share your personal data with the following third parties where necessary:

Fulfilment Partners: Including our product sourcing and logistics partners to process and deliver your orders
Payment Processors: Shopify Payments, PayPal, Stripe — to securely process transactions
Delivery Couriers: Royal Mail, DPD, Hermes/Evri, and other couriers used for shipping
Analytics Providers: Google Analytics (anonymised) for website improvement
Marketing Platforms: Email service providers for newsletters (only with your consent)
Legal/Regulatory Bodies: HMRC, law enforcement, or other authorities when required by law

We do not sell your personal data to any third party.

5. International Transfers

Some of our third-party service providers may be based outside the UK. Where we transfer your data outside the UK, we ensure appropriate safeguards are in place, including:

UK adequacy decisions
Standard Contractual Clauses approved by the ICO
International Data Transfer Agreements (IDTAs)

6. How Long We Keep Your Data

We retain your personal data only for as long as necessary:

Order data: 6 years from the date of the transaction (as required by HMRC)
Account data: Until you request deletion of your account
Marketing data: Until you unsubscribe or withdraw consent
Website analytics: Automatically anonymised after 26 months

7. Your Rights Under UK GDPR

Under the UK GDPR and Data Protection Act 2018, you have the following rights:

Right of Access: Request a copy of your personal data
Right to Rectification: Request correction of inaccurate data
Right to Erasure: Request deletion of your data ("right to be forgotten")
Right to Restrict Processing: Request limitation of how we use your data
Right to Data Portability: Request transfer of your data in a machine-readable format
Right to Object: Object to processing based on legitimate interests or direct marketing
Right to Withdraw Consent: Where we rely on consent, you may withdraw it at any time

To exercise any of these rights, contact us at nexbix.uk@gmail.com. We will respond within one calendar month.

8. Data Security

We take appropriate technical and organisational measures to protect your personal data, including:

SSL/TLS encryption on all pages
PCI DSS compliant payment processing
Restricted access to personal data on a need-to-know basis
Regular security reviews and updates

9. Cookies

Our website uses cookies and similar technologies. Cookies are small text files placed on your device that help us provide a better experience.

9.1 Essential Cookies

Required for the website to function (e.g. shopping cart, checkout, session management). These cannot be disabled.

9.2 Analytics Cookies

Help us understand how visitors use our site (e.g. Google Analytics). These are only set with your consent.

9.3 Marketing Cookies

Used to deliver relevant advertisements and track marketing campaign performance. These are only set with your consent.

You can manage your cookie preferences through your browser settings or our cookie consent banner. For more information, visit www.aboutcookies.org.

10. Children's Privacy

Our website is not intended for children under the age of 16. We do not knowingly collect personal data from children. If you believe we have collected data from a child, please contact us immediately.

11. Changes to This Policy

We may update this Privacy Policy from time to time. Any changes will be posted on this page with an updated "Last Updated" date. We encourage you to review this policy periodically.

12. How to Complain

If you are unhappy with how we have handled your personal data, you have the right to lodge a complaint with the Information Commissioner's Office (ICO):

Website: ico.org.uk/make-a-complaint
Helpline: 0303 123 1113

We would appreciate the opportunity to address your concerns before you approach the ICO, so please contact us first at nexbix.uk@gmail.com.