Privacy Policy

Last updated: August 2026

1. Introduction

This Privacy Policy applies to the processing of personal data related to the use of www.viginext.com (the "Website"). VIGINEXT LTD ("VIGINEXT", "we", "us" or "our") acts as the Data Controller and is committed to complying with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

This Privacy Policy explains how we collect, use, store, and protect personal data when you visit our website, interact with us as a client, consultant, contractor, or agency partner, or otherwise engage with our services.

2. Who We Are

We are VIGINEXT LTD, a company registered in England and Wales.

Registered office address: 3A Rosemary House, Lanwades Business Park, Kennett, Newmarket, CB8 7PN, United Kingdom

Company registration number: 16917128

Website: www.viginext.com

For the purposes of the UK GDPR, VIGINEXT LTD is the "data controller" of the personal data described in this Policy, unless stated otherwise.

3. Who this Privacy Policy applies to

This Privacy Policy applies to:

Visitors to our Website;
Individuals who contact us via email or contact forms;
Visitors to our company pages on social media platforms, including LinkedIn.

4. What Personal Data We Collect

Depending on how you interact with us, we may collect and process the following categories of personal data:

Identity data: full name, job title, company name
Contact data: email address, telephone number, postal/business address
Communication data: the content of enquiries, messages, or correspondence you send us via contact forms or email
Newsletter/Whitepapers/Marketing Communications: email address and preferences if you subscribe to our newsletters, download our whitepapers or marketing communications
Technical data: IP address, browser type and version, device information, operating system, and other technology on the devices you use to access our website
Usage/analytics data: information about how you use our website, such as pages visited, time spent, referral source, approximate location, and navigation paths, collected via cookies and Google Analytics
Business relationship data: information relating to our clients, consultants, contractors, and partner agencies, including company details, engagement terms, and communications relevant to that relationship
Financial data: billing details, invoicing information, and payment records processed via our accounting and payment platforms, e.g. bank details for payments/receipts processed through our bank, and financial records maintained in our financial management software.

We do not intentionally collect any "special category" data (such as health information, racial or ethnic origin, religious beliefs) through our website, and we do not knowingly collect data relating to children.

5. How we collect your data

We process personal data through the following channels:

Contact/enquiry forms: when you submit an enquiry or request information through a form on our website
Newsletter sign-up: when you voluntarily subscribe to receive our newsletter or marketing updates
Whitepapers: When you download our whitepapers
Cookies and similar technologies, including Google Analytics: automatically collected when you browse our website
Direct interactions: when you correspond with us by phone, email, or in person as a client, consultant, contractor, or partner agency
Third-party business tools: data may also be generated or processed through our accounting and financial platforms, as part of our normal business operations, such as invoicing and payments

6. How and Why, We Use Your Data

Under UK GDPR, we must have a valid legal basis to process your personal data. We rely on the following legal bases:

Responding to enquiries submitted via our contact form

Data: Identity, Contact, Communication data. Legal basis: Legitimate interests (to respond to enquiries) / Consent where required.

Sending newsletters and marketing emails

Data: Contact data. Legal basis: Consent (opt-in), or legitimate interests for existing clients under "soft opt-in" rules (PECR).

Managing relationships with clients, consultants, contractors, and partner agencies

Data: Identity, Contact, Business relationship, financial data. Legal basis: Performance of a contract / Legitimate interests.

Invoicing, payments, and financial record-keeping

Data: Financial data. Legal basis: Performance of a contract / Legal obligation (tax and accounting law).

Operating, monitoring, and improving our website, including analysing traffic via Google Analytics

Data: Technical, Usage/analytics data. Legal basis: Consent (for analytics cookies) / Legitimate interests.

Complying with legal and regulatory obligations

Data: Any of the above, as relevant. Legal basis: Legal obligation.

We will only use your personal data for the purpose(s) for which it was collected, unless we reasonably consider that we need to use it for another compatible reason, or where we are required to do so by law.

7. Cookies

Our website uses cookies and similar tracking technologies to improve your browsing experience, understand how visitors use our site, and support our marketing efforts.

Cookies are small text files placed on your device when you visit a website. They allow the site to recognise your device and remember certain information about your visit.

We may use the following types of cookies:

Strictly necessary cookies: required for the Website to function properly (e.g. security, load balancing). These do not require consent.
Analytics/performance cookies (Google Analytics): we use Google Analytics to collect information about how visitors use our website, such as pages visited, time on site, referral source, device/browser type, and possibly IP address. This helps us understand visitor behaviour and improve our website and services.
Functionality cookies: remember your preferences to enhance your experience
Marketing cookies: used to track visitors across websites for marketing purposes

8. Data sharing and international transfers

We do not sell or trade personal data to third parties. We may share your data with the following categories of third parties, strictly for the purposes described in this Policy:

Analytics providers: Google LLC / Google Ireland Limited, via Google Analytics, to help us understand and improve Website performance
Financial and payment service providers: Revolut (for banking and payment processing) and QuickBooks (for accounting and invoicing)
IT and cloud service providers: Microsoft 365, website hosting provider (Webflow) used for email, document storage, and website hosting
Professional advisers: lawyers, accountants, auditors, or insurers where necessary for our business operations
Regulatory and law enforcement bodies: where we are required to disclose personal data to comply with a legal obligation, court order, or governmental request
Business partners, consultants, contractors, and agencies: where relevant to the delivery of a shared project or engagement, and only to the extent necessary

All third parties are required to respect the security of your personal data and to treat it in accordance with the law. We do not allow our third-party service providers to use your personal data for their own purposes, and we only permit them to process your data for specified purposes and in accordance with our instructions.

9. Data Security

We have implemented appropriate technical and organisational measures to protect your personal data against accidental loss, unauthorised access, alteration, disclosure, or destruction. These measures include restricting access to personal data to employees, contractors, and other third parties who have a genuine business need to access it, and ensuring they are subject to a duty of confidentiality.

We have procedures in place to deal with any suspected personal data breach and will notify you and any applicable regulator (the ICO) of a breach where we are legally required to do so.

While we take reasonable steps to protect your data, please note that no method of transmission over the internet or electronic storage is 100% secure.

10. Your rights Under UK GDPR

Under UK data protection law, you have the following rights in relation to your personal data:

Right to be informed – to know how your data is being used, as set out in this Policy
Right of access – to request a copy of the personal data we hold about you
Right to rectification – to ask us to correct any inaccurate or incomplete data
Right to erasure – to ask us to delete your personal data in certain circumstances
Right to restrict processing – to ask us to limit how we use your data in certain circumstances
Right to data portability – to request that we transfer your data to another organisation, or to you, in a structured, commonly used, machine-readable format
Right to object – to object to our processing of your personal data, including for direct marketing purposes and analytics profiling such as Google Analytics
Rights related to automated decision-making – to not be subject to decisions based solely on automated processing, including profiling, which produce legal or similarly significant effects. We do not currently engage in this type of processing.
Right to withdraw consent – where we rely on consent to process your data, including analytics cookies, you can withdraw it at any time via our cookie settings tool or browser controls

If you wish to exercise any of these rights, please contact us using the details in Section 12. We will respond to your request within one month, in accordance with UK GDPR requirements. You will not usually need to pay a fee to exercise your rights, unless your request is clearly unfounded, repetitive, or excessive.

11. Changes to this Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, technologies, legal requirements, or other factors. Any changes will be posted on this page with an updated "Last updated" date. We encourage you to review this Policy periodically to stay informed about how we are protecting your personal data.

12. How to Contact Us

If you have any questions about this Privacy Policy, or wish to exercise any of your data protection rights, please contact us at:

VIGINEXT LTD, 3A Rosemary House, Lanwades Business Park, Kennett, Newmarket, CB8 7PN, United Kingdom

Email:

office@viginext.com

Your Right to Complain

If you have concerns about how we handle your personal data, we encourage you to contact us first so we can try to resolve the issue directly. However, you also have the right to lodge a complaint at any time with the UK's data protection regulator, the Information Commissioner's Office (ICO):

Information Commissioner's Office, Wycliffe House, Water Lane, Wilmslow, Cheshire, SK9 5AF. Helpline: 0303 123 1113. Website: