Legal and data protection
Privacy Notice
Last updated: July 2026
This Privacy Notice explains how MeasureNest Ltd collects, uses, shares and protects personal information when you use this website, submit an enquiry, request a review or audit, become a client, or communicate with MeasureNest.
MeasureNest Ltd is the controller for personal information collected for its own website, enquiry, client-management and business-administration purposes. In some client engagements, MeasureNest may also process information within client-controlled analytics or reporting systems under the client’s instructions. The relevant role and access arrangements will be confirmed as part of the engagement.
1. Who MeasureNest is and how to contact it
MeasureNest Ltd is registered in England and Wales under company number 17235347. Its registered office is 71–75 Shelton Street, London, WC2H 9JQ.
MeasureNest is registered with the Information Commissioner’s Office under registration number ZC163078.
For questions or requests relating to personal information, email admin@measurenest.io with “Privacy request” in the subject line.
2. What this notice covers
This notice applies when you:
- use the MeasureNest website;
- submit a general enquiry;
- request a Free GA4 Tracking Confidence Review;
- request a GA4 Clarity Audit;
- discuss or enter into a client engagement;
- attend a meeting or training session;
- receive a recorded audit walkthrough or other agreed deliverable;
- communicate with MeasureNest by email or another agreed business channel;
- exercise a privacy right or make a complaint.
It covers personal information MeasureNest uses for its own website, enquiry, client-management, service-delivery and business-administration purposes.
Where MeasureNest accesses a client-controlled analytics, tag-management, reporting or website system, the client may remain the controller for information in that system and MeasureNest may act under the client’s instructions. The relevant roles and responsibilities depend on the engagement and should be confirmed in the agreed scope or terms.
3. Personal information collected
Depending on how you interact with MeasureNest, personal information may include:
- Name, work email address, organisation, role and contact details.
- Website address and information about your GA4, GTM, reporting or training requirement.
- Enquiry, form and email content.
- Project contacts, scope, instructions, correspondence and delivery records.
- Billing, invoice and payment-administration information.
- Information made available through client analytics, tag-management, reporting or website systems where access is required for an agreed service.
- Technical information about use of the MeasureNest website, including consent choices, device and browser information, page interactions, referral information, advertising click identifiers and successful enquiry or request events where collected.
- Meeting information and correspondence where Google Meet or another agreed client-selected meeting platform is used.
- Video, audio, screen content and related project information included in an agreed Loom walkthrough.
- Other information you choose to provide.
4. Purposes and lawful bases
MeasureNest uses personal information only where there is an identified purpose and lawful basis. The basis may differ according to the relationship, the information involved and whether the client is an individual or an organisation.
| Purpose | Typical information | Lawful basis |
|---|---|---|
| Respond to and assess enquiries, free-review requests and audit requests | Contact details, organisation, website, selected requirement, form content and correspondence. | Steps requested before entering into a contract. Legitimate interests may also apply when responding to relevant business enquiries or communicating with an organisation’s representative. |
| Deliver agreed services and manage the client relationship | Project contacts, agreed scope, client-system access, instructions, correspondence, meetings, deliverables and clarification records. | Contract where the individual is the client. Legitimate interests where the client is an organisation and the individual is its employee, contractor, agency or other business contact. |
| Create invoices, receive bank-transfer payments and maintain tax, accounting and business records | Billing contacts, invoice details, payment references, bank-transaction records, contracts and accounting records. | Contract, legal obligation and legitimate interests in administering and protecting the business. |
| Protect systems, prevent misuse, manage access and resolve disputes | Security logs, communications, client-access records, consent records, project files and relevant business records. | Legitimate interests in maintaining security, preventing misuse and establishing, exercising or defending legal claims. Legal obligation where applicable. |
| Measure and improve the MeasureNest website | Consent choice, device and browser information, page interaction, referral information and website-use data. | Consent where optional storage or access technologies are used. Associated personal-information processing is carried out only where an appropriate UK GDPR basis applies. |
| Measure conversions from MeasureNest advertising | Consent choices, advertising click or referral information, device and browser information, relevant website interaction and successful enquiry or request events. | Consent for optional advertising-storage and conversion-measurement technologies where consent is required. Associated personal-information processing is carried out only where an appropriate UK GDPR basis applies. |
| Provide meetings and recorded client deliverables | Contact details, meeting invitations, voice, screen content, project evidence and information included in the agreed recording. | Contract or steps requested before entering into a contract. Legitimate interests where the client is an organisation and the individual is its business contact. |
| Handle privacy requests, complaints and legal or regulatory requirements | Contact details, identity-verification information, request content, correspondence and relevant records. | Legal obligation and legitimate interests in handling complaints and protecting legal rights where appropriate. |
How MeasureNest uses legitimate interests
Where MeasureNest relies on legitimate interests, those interests may include responding to relevant business enquiries, administering relationships with organisational clients, maintaining service and security records, protecting systems, preventing misuse, improving business operations and establishing or defending legal claims.
MeasureNest must consider whether the use is necessary and whether the interests, rights and reasonable expectations of the people involved override the business interest. Legitimate interests are not used where another basis is more appropriate or where the impact would be unjustified.
5. Sources of information
Most personal information is provided directly by you through forms, email, meetings or client work.
MeasureNest may also receive business contact information from:
- Your organisation.
- An agency or consultant introducing the requirement.
- A developer, ecommerce specialist or other supplier involved in the work.
- A professional adviser.
- A publicly available business source.
- A client-controlled analytics, tag-management, reporting or website system to which access has been granted for an agreed service.
Where privacy information has not already been provided, MeasureNest will make it available at the appropriate time.
6. Service providers and recipients
MeasureNest uses selected providers to operate the website, receive enquiries, communicate, deliver work and maintain business records. Providers receive only the information reasonably required for the relevant purpose.
| Provider or recipient | Purpose | Information that may be involved |
|---|---|---|
| Framer | Website hosting, delivery, security and technical operation. | Technical request, device, browser, network and website-use information generated through operation of the site. |
| Tally | Collecting general enquiries, free-review requests and audit requests. | The form answers, contact details, website information and technical information associated with the form interaction and submission. |
| Google Workspace | Business email, documents, project files and client-delivery administration. | Contact details, correspondence, project records, deliverables and files shared for the agreed work. |
| Google Meet | MeasureNest’s primary platform for calls and online meetings. | Names, email addresses, meeting invitations and meeting content. A client-selected alternative platform may be used for a particular meeting and will be apparent from the invitation. |
| Google Analytics 4 and Google Tag Manager | Consent-dependent website analytics and management of website measurement tags. | Consent state, device and browser information, page interaction, referral information and related measurement data where the visitor has made the required choice. |
| Google Ads | Consent-dependent measurement of conversions arising from MeasureNest’s own advertising. | Advertising click or referral information, consent state, relevant website interaction and successful enquiry or request events. |
| Cookiebot CMP | Displaying and recording cookie choices, applying the configured consent categories and enabling visitors to change their preferences. | Consent choices and related technical information required to operate and evidence the consent mechanism. |
| FreeAgent | Invoicing, bookkeeping and accounting administration. | Client and billing contacts, invoices, payment status, transaction references and accounting records. |
| Starling Bank | Business banking and receipt of invoice payments by bank transfer. | Payer or account-holder details, payment references, amounts and banking transaction information. |
| Loom | Creating and sharing agreed recorded audit walkthroughs or other scoped video deliverables. | Voice, screen content, project evidence, client-system information visible in the recording and recipient details used to provide access. |
| Professional advisers and insurers | Accounting, legal, insurance, risk-management or claims support where necessary. | Relevant contact, contract, financial, project or dispute information limited to the professional purpose. |
| Authorities, regulators, courts and legal recipients | Meeting legal obligations or establishing, exercising or defending legal claims. | Information required by law or reasonably necessary for the relevant legal purpose. |
| Microsoft Advertising | Consent-controlled measurement of conversions arising from MeasureNest’s own Microsoft Advertising campaigns through Universal Event Tracking (UET). | Consent state, advertising click or referral information, online identifiers, device and browser information, relevant website interaction and successful enquiry or request events. Microsoft collects or receives information through UET to provide Microsoft Advertising and may use Microsoft Advertising user data for advertising delivery, reporting, performance analysis and service improvement in accordance with the Microsoft Privacy Statement. |
Some providers process information on MeasureNest’s behalf. Others, including banks, regulators, professional advisers or providers selected directly by a client, may act as independent controllers for their own purposes. Their own privacy information applies to that processing.
7. International transfers
Some service providers may process personal information outside the United Kingdom or make it accessible to group companies or subprocessors in other countries.
Where a restricted transfer takes place, MeasureNest will use an applicable UK adequacy regulation, the UK International Data Transfer Agreement, the UK Addendum to approved contractual clauses, or another lawful safeguard. Any transfer assessment or additional protection required for the arrangement should also be maintained.
The safeguard that applies depends on the provider, location and contractual arrangement. To request further information about the safeguards relevant to your personal information, email admin@measurenest.io with “Privacy request” in the subject line.
8. How long information is kept
MeasureNest keeps personal information only for as long as it is reasonably needed for the purpose for which it was collected and to meet legal, accounting, insurance or dispute-resolution requirements.
- Unsuccessful or inactive enquiry records are normally retained for up to 24 months after the last meaningful contact.
- Client, contract, invoice, tax and core business records may be retained for up to six years after the relevant relationship or accounting period.
- Project working files, exported evidence, Loom recordings and access-related records are removed or minimised when they are no longer needed for delivery, clarification, agreed follow-up or defensible business records.
- Client-system access should be removed when the work and any agreed follow-up are complete.
- Cookie and consent records are retained for the period configured in Cookiebot and reviewed for proportionality.
- Information may be retained for longer where necessary to establish, exercise or defend legal claims or comply with a legal requirement.
Retention periods are reviewed when MeasureNest changes a supplier, service process or legal requirement.
9. Client systems and project data
Where an agreed service requires access to a client’s GA4, GTM, Data Studio, website or another measurement-related system, MeasureNest uses the minimum appropriate platform-native access.
Passwords, login codes, recovery information and unrestricted credentials are not requested.
MeasureNest uses information in client systems only for the agreed service purpose and avoids exporting or retaining unnecessary user-level information. Access should be removed when the work and any agreed follow-up are complete.
The engagement terms or agreed scope should confirm whether MeasureNest acts as a processor, an independent controller, or both for different activities.
Where a downstream advertising platform is relevant only to measurement continuity or conversion validation, access is limited to that agreed measurement context. This does not turn the engagement into advertising-account management.
10. Security
MeasureNest uses proportionate technical and organisational measures intended to protect personal information from unauthorised access, loss, misuse, alteration or disclosure.
Measures may include:
- Minimum-access and least-privilege permissions.
- Platform-native access rather than password sharing.
- Access-controlled business accounts.
- Appropriate sharing restrictions.
- Supplier and configuration reviews.
- Removal of client-platform access after the agreed work.
- Limiting exported or retained client-system information.
- Appropriate business, insurance and incident records.
No internet service, transmission method or storage system can be guaranteed to be completely secure. Access and retention are therefore limited to what is reasonably needed.
11. Your rights and complaints
Depending on the circumstances and the lawful basis used, you may have rights to:
- Request access to your personal information.
- Ask for inaccurate or incomplete information to be corrected.
- Request erasure in circumstances where the right applies.
- Ask for processing to be restricted in circumstances where the right applies.
- Object to processing based on legitimate interests.
- Receive certain information in a portable format where the right applies.
- Withdraw consent where processing relies on consent, without affecting processing that was lawful before withdrawal.
To exercise a right or raise a complaint about how MeasureNest has handled personal information, email admin@measurenest.io with “Privacy request” in the subject line. MeasureNest may need to verify your identity before acting on a request.
You also have the right to complain to the Information Commissioner’s Office. The ICO recommends raising the matter with the organisation first so it has an opportunity to respond.
13. Changes to this notice
This notice may be updated when MeasureNest changes its website, services, suppliers, measurement configuration or processing practices.
The current version and review date will be published on this page. Where required, material new uses of personal information will be brought to affected people’s attention before the new processing begins.