How we look after your information.

NEST INFLUENCE LTD, trading as NestInfluence, is the data controller responsible for the personal information described in this notice.

• Company number: 17551741, registered in England and Wales.
• Contact for privacy matters: Ahmed Arshe, hello@nestinfluence.com.

We collect and use the information needed to answer enquiries, assess potential partnerships and organise influencer marketing campaigns. This may include:

• Names, business contact details, job roles, company names and websites.
• Enquiries, campaign objectives, budgets and correspondence.
• Public creator profile links, relevant audience summaries, proposed fees and agreed deliverables.
• Campaign content, approvals and performance information.
• Contracts, invoices and payment records.

We receive information directly from you through the forms on this website or by email, from clients and creators involved in campaigns, and from publicly available business websites and social media profiles.

Providing information is generally voluntary. However, if you do not provide information needed to answer your enquiry or perform an agreed service, we may be unable to proceed. Required fields are identified on our forms.

Please do not submit sensitive personal information, individual follower lists or unnecessary identifying information about children.

As with any website, our hosting provider processes the technical information needed to serve pages, keep the site secure and deliver the forms. Enquiries you send are saved in our website database first, so they are not lost if a notification email fails.

When you tick “I have read the Privacy Notice” on a form, we record that acknowledgement, the date and the version of this notice you were shown. It is evidence that we gave you this information — it is not a consent basis and we do not treat it as one. Enquiries and creator applications are handled on the legitimate interests set out below.

To limit automated abuse of our forms, we keep a short-lived record of enquiry attempts with a 24-hour target. It holds the email address used and a truncated SHA-256 fingerprint of the connection used. That fingerprint is a derived identifier, not an anonymous one: it is not the raw network address, but it is a stable code for the connection, so we treat it as personal information and use it only to limit repeat submissions. Records older than 24 hours are eligible for removal; removal runs when the next enquiry is processed, so during quiet periods a record can remain longer. We also check for and remove any older records manually.

Optional analytics is the only optional storage on this site. It runs only if you accept it in the cookie banner; what it stores is described under “Cookies and similar technologies”.

We use personal information for the following purposes and lawful bases:

• Business enquiries: our legitimate interests in responding to relevant enquiries and communicating with brand representatives.
• Creator research and campaign coordination: our legitimate interests in identifying suitable partnerships, communicating with business contacts and delivering agreed campaigns.
• Contracts with individuals or sole traders: taking steps at your request before entering into a contract, or performing our contract with you, where the information is necessary for that purpose. This basis does not automatically apply to an employee merely because we have a contract with their employer.
• Required accounting and tax records: compliance with our legal obligations to maintain those records.
• Optional marketing where consent is required: your consent, which you can withdraw at any time by emailing hello@nestinfluence.com. Sending an enquiry does not automatically subscribe you to marketing.

Ticking “I have read the Privacy Notice” confirms we have given you this information; it is not a consent basis, and we do not rely on consent for answering enquiries or coordinating creators.

You can object to processing based on legitimate interests, and you can object to direct marketing at any time.

We use necessary browser storage to run this site and remember your cookie choice. Nothing optional is stored until you accept it in the cookie banner, and you can change your choice at any time using the “Cookie settings” link at the bottom of every page.

Strictly necessary

• nest_cookie_consent — remembers whether you accepted or declined optional analytics. Browser storage (localStorage), kept until you change your choice or clear site data.
• base44_access_token and token — only set if you sign in to this website, for example to manage it. Removed when you sign out or clear site data.

Optional analytics

These run only if you accept analytics, and stop if you later decline or withdraw.

• base44_analytics_session_id — a random identifier that groups your page views into one visit, so we can see which pages are popular. It is not linked to your name. Browser storage (localStorage), deleted when you decline or withdraw.
• Page-view records we send to our own analytics contain the page you visited and the website that referred you to us — never your name or email address.

Accepting analytics does not give permission for advertising storage, advertising user data or ad personalisation; those stay switched off whether you accept or decline. We do not use advertising or cross-site tracking cookies and we do not sell data. If your browser blocks storage, optional analytics stays switched off and we will ask again next time. For questions, email hello@nestinfluence.com.

We use the following service providers, who process relevant personal information on our instructions to provide their services:

• Base44 — website hosting, the enquiry and application forms, the database that stores the enquiries submitted through them, and delivery of the internal notification email to our inbox.
• Namecheap Private Email — our business email.
• Notion — organising enquiries and campaign records.
• Tide — business banking, together with the financial institutions involved in processing payments.

Before a client signs an agency agreement, we use unnamed creator examples, broad audience ranges and indicative budgets rather than identifiable shortlists. For an agreed campaign, we share a limited shortlist privately with the relevant client, including creator profile links, relevant audience summaries and campaign quotes. Before sharing non-public audience statistics or quotes, we agree with the creator what may be passed to the named brand. Once a creator agrees to participate, we share only the business contact and contracting details needed for the client and creator to work together.

We do not include home addresses, personal phone numbers, bank details, individual follower lists or unnecessary information about children in shortlists. Any information necessary for a direct client–creator contract or payment should be exchanged securely between those parties. We do not sell personal information.

Where necessary, we may disclose personal information to HMRC, regulators or other authorities to meet legal obligations. If we appoint an accountant or professional adviser who needs access to personal information, we will update this notice to reflect that sharing.

We serve UK clients, but some of our service providers may process personal information outside the United Kingdom, including in the European Economic Area, the United States and other countries used by their service partners.

Our website, forms, enquiry database and notification email are provided by Base44, which publishes a data processing agreement describing its processor role and the cross-border mechanisms it offers. That published agreement is available at base44.com/about-us/legal/dpa. Our other providers — Namecheap Private Email for business email and Notion for enquiry and campaign records — apply the safeguards set out in their terms for the regions they use.

We rely on those provider terms and the mechanisms they offer. We are confirming the current processing locations and account-level details for each provider and have not independently audited every one of their safeguards. If you would like information about the protection that applies to your information, or how to obtain a copy of the relevant terms where available, email hello@nestinfluence.com.

We retain personal information according to the following schedule:

• Unsuccessful enquiries and creator applications: 12 months after the last meaningful contact.
• Creator research that does not lead to a partnership: reviewed after 12 months and deleted unless it remains relevant for a documented business purpose.
• Routine campaign working files, drafts and detailed analytics: up to 24 months after campaign completion.
• Signed agreements, essential approvals and evidence of agreed services and delivery: six years after the engagement ends.
• Accounting and tax records: six years from the end of the last company financial year they relate to, or longer where legally required.
• Marketing objections: only the information needed to ensure we do not contact you again for marketing, for as long as that remains necessary.
• Short-lived abuse-prevention records of enquiry attempts: 24-hour target. Records older than 24 hours are eligible for removal, removal runs when the next enquiry is processed, and we check for and remove older records manually, so during quiet periods a record can remain longer.
• Acknowledgement and notification records (that you were shown this notice, and whether our internal notification email was accepted): kept with the related enquiry under the periods above.

Meaningful contact means a substantive exchange about an enquiry rather than an automated message. We may retain relevant information longer where necessary for an unresolved complaint, legal claim or legal obligation — we record the reason and review whether continued retention is necessary.

We use password protection for our business accounts and two-factor authentication for our Namecheap account, Private Email webmail and Notion workspace. Enquiries submitted through this website are stored in a database that only our administrators can read, and the notification email is generated on our server so provider details are never exposed to visitors.

No way of sending or storing information is completely secure. If you believe your information has been mishandled, contact us so we can look into it.

Depending on the circumstances and our lawful basis, you have the right to:

• Access your personal information.
• Correct inaccurate or incomplete information.
• Request deletion.
• Restrict how we use your information.
• Receive certain information in a portable format.
• Object to processing based on legitimate interests.

You can object to the use of your personal information for direct marketing at any time. Where we rely on consent, you can withdraw it at any time without affecting the lawfulness of processing carried out before withdrawal.

To exercise your rights or raise a privacy concern, email hello@nestinfluence.com. We may request information reasonably needed to confirm your identity. We respond within one month, and will tell you if we need to extend that period.

We do not make decisions based solely on automated processing that produce legal or similarly significant effects on individuals.

If you are unhappy with how we have handled your information, please contact us first so we can try to put it right. You can also complain directly to the Information Commissioner's Office at ico.org.uk/make-a-complaint. You do not have to contact us before doing so.

We may update this notice when our services, providers or use of personal information change. The latest version will always be available on this page, with its last-updated date shown at the top. Where required, we will bring significant changes to your attention.