Privacy Policy

This policy explains how Nextbridge AI ("we", "us") collects, uses, and protects personal data when you visit nextbridgeai.com or contact us. We are committed to handling your data in line with UK data protection law (the UK GDPR and the Data Protection Act 2018).

Who we are

Nextbridge AI Ltd ("we", "us") is the data controller responsible for your personal data. You can contact us at info@nextbridgeai.com or by post at 758 Great Cambridge Rd, London EN1 3PN.

What data we collect

This is a simple information website. We do not host forms, analytics, or tracking cookies on it. We only receive personal data that you choose to send us. For example, when you email us, you share your name, email address, and anything you include in your message.

The Diagnostic Review

Our Diagnostic Review is currently offered free. It can involve up to four stages, and each may process personal data:

• Diagnostic self-check: an optional short questionnaire hosted on Google Forms, with responses stored in Google Sheets. Google processes this information on our behalf.
• Booking a call: we use Calendly to schedule your Diagnostic Review call. When you book, Calendly collects your name, email address, and chosen time on our behalf.
• The Diagnostic Review call: the call takes place on Zoom or Google Meet. We process the information you share about your finance function, together with your name and contact details. The call may be recorded. Where we intend to record, we will ask for your consent at the start of the call, and you can decline.
• Your report: we use a business or enterprise tier AI tool to help prepare a first draft of your report. Wherever possible we use your own organisation's licensed tool and environment, for example your Microsoft 365 Copilot, so your information does not leave it. The AI tools we use operate under terms that do not allow your data to be used to train their models, and are covered by a data processing agreement. A member of our team reviews and finalises every report. We do not make decisions that produce legal or similarly significant effects about you by automated means alone.

You can contact us at any time to have your diagnostic information or report removed.

How we use it and our lawful basis

We use the information you send us to respond to your enquiry and, where relevant, to discuss and provide our services. Where you complete the diagnostic, book a call, or take part in a Diagnostic Review, we process your information to provide the service you have asked for. Our lawful basis is legitimate interests (providing and managing the services you request and related enquiries) and, where we enter into a paid engagement, performance of a contract.

Who we share it with

We do not sell your data. We use trusted service providers to run our business, who process data on our behalf under appropriate agreements. These include our website and email hosting providers; Google Forms and Google Sheets (the diagnostic self-check); Calendly (call scheduling); Zoom or Google Meet (video calls); and a business or enterprise tier AI tool used to help prepare your report, which is covered by a data processing agreement and does not use your data to train its models. Where we work inside your organisation's own licensed environment, your information stays within it. We may disclose data where required by law.

How long we keep it

We keep enquiry correspondence only for as long as needed to deal with your enquiry and for our legitimate business and legal record-keeping purposes, after which it is deleted.

International transfers

Some of the providers we use, for example Google, Calendly, and video-conferencing tools, may process your personal data outside the UK. Where an AI tool is used within your own organisation's licensed environment, your data is handled under your own arrangements. Where any provider processes data outside the UK, we rely on appropriate safeguards recognised under UK data protection law, such as the UK International Data Transfer Agreement or an adequacy decision, to keep your information protected.

Your rights

You have the right to access, correct, or erase your personal data, to restrict or object to processing, and to data portability. To exercise any of these, email us at info@nextbridgeai.com.

Complaints

If you have concerns about how we handle your data, please contact us first. You also have the right to complain to the ICO at ico.org.uk.

Changes to this policy

We may update this policy from time to time. The date at the top shows when it was last revised.