Privacy Policy

1. Who we are

NestWise is operated by Catalyst Marketing Agency Limited (Companies House No. 07413227), registered at Seven Stars House, 1 Wheler Road, Coventry, CV3 4LB. We are the data controller for any personal data you provide through this website.

Contact for privacy matters: hello@sitelightning.com | +44 121 296 5275

This policy is written in accordance with the UK General Data Protection Regulation (UK GDPR), the Data Protection Act 2018, the Privacy and Electronic Communications Regulations 2003 (PECR), and the Data (Use and Access) Act 2025 (in force from 5 February 2026).

2. What data we collect and why

Data	Purpose	Legal basis (UK GDPR)
Name, email, phone number	Connect you with an FCA-registered financial adviser	Art. 6(1)(a) — Consent
Savings amount, age range, savings location	Help the adviser understand your situation before they call	Art. 6(1)(a) — Consent
Site usage data (cookies, pages visited)	Improve site performance and measure effectiveness	Art. 6(1)(f) — Legitimate interests / Consent

3. Who we share your data with

Your contact details and quiz answers are shared only with our partner FCA-registered independent financial advisers for the purpose of following up on your review request. We do not sell your data to third parties or share it for marketing purposes.

We use Vercel Inc. (San Francisco, CA, USA) as our website hosting provider. Vercel may process IP addresses and server log data as part of standard hosting operations. Transfer to the USA is based on Standard Contractual Clauses (EU Commission decision 2021/914).

4. Cookies and tracking

We use only essential functional cookies (stored in localStorage) to remember your cookie consent preference. We do not use advertising or analytics cookies without your explicit consent. See our Cookie Policy for full details.

5. How long we keep your data

• Lead enquiry data (name, email, phone, quiz answers): up to 12 months, or until you request deletion
• Cookie consent preference: until cleared by browser or you reset your choice
• Server access logs (Vercel): 30 days

6. Your rights under UK GDPR

You have the right to:

• Access a copy of the personal data we hold about you (Art. 15)
• Rectification of inaccurate data (Art. 16)
• Erasure ("right to be forgotten") (Art. 17)
• Restriction of processing (Art. 18)
• Data portability (Art. 20)
• Object to processing based on legitimate interests (Art. 21)
• Withdraw consent at any time, without affecting the lawfulness of prior processing

To exercise any right, contact us at hello@sitelightning.com. We will respond within one calendar month.

If you are unsatisfied with how we handle your data, you have the right to lodge a complaint with the UK data protection supervisory authority.

7. Automated decision-making

We do not use your personal data for automated decision-making or profiling that produces legal or similarly significant effects.

8. No data protection officer

As a small business, we are not required under UK GDPR to appoint a Data Protection Officer. All privacy requests are handled directly by our team at hello@sitelightning.com.

9. International data transfers

Where we transfer data outside the UK (e.g. to Vercel's servers in the USA), we rely on Standard Contractual Clauses (UK Addendum to EU Standard Contractual Clauses) or adequacy decisions to ensure appropriate safeguards are in place.

10. Changes to this policy

We may update this policy from time to time. Changes will be posted on this page with an updated date. Continued use of the site after changes constitutes acceptance.