Privacy Notice

1Who we are

NGBS is the shared brand of NGBS Private Limited and NGBS Global Limited, companies under common ownership.

This website is operated by NGBS Global Limited. NGBS Global Limited is the controller of personal information collected through this website and decides why and how that information is used.

NGBS Private Limited supports NGBS as its Pakistan-based engineering delivery centre and may process relevant personal information for NGBS Global Limited under appropriate data-protection arrangements.

If another NGBS entity is responsible for a particular activity, we will identify that entity when the information is collected.

NGBS Global Limited is registered in England and Wales under company number 14207192. Its registered office and postal address is:

NGBS Global Limited
71–75 Shelton Street, Covent Garden
London, United Kingdom, WC2H 9JQ

For privacy questions or requests, email iqbal@ngbs.co.uk.

2Information we collect

Information you provide

When you use the Contact form, you may provide:

• your full name;
• your work email address;
• brief context about your enquiry; and
• confirmation that you have read this Privacy Notice.

When you book a meeting through Calendly, you provide information directly through Calendly’s booking interface. This may include your name, email address, selected meeting time, time zone and any answers requested in the booking form.

If you communicate with us by email or during a meeting, we may retain the correspondence, meeting details and information you choose to provide.

Please do not submit confidential information, source code, passwords, credentials, sensitive personal information or sensitive technical details through the Contact form or booking interface.

Technical and security information

When you use the website, our hosting and security providers may process limited technical information such as:

• IP address;
• browser and device information;
• requested pages, timestamps and request headers;
• security and abuse-prevention signals; and
• referral or campaign parameters attached to a website or booking link.

3How we use your information

We use personal information to:

• respond to an enquiry and continue a conversation you requested;
• arrange, administer and follow up on a meeting;
• understand whether NGBS may be able to help with your engineering or delivery needs;
• protect the website, forms and booking routes from misuse, fraud and automated abuse;
• maintain necessary business, security and operational records; and
• comply with legal obligations or establish, exercise or defend legal claims.

A form submission or meeting booking does not automatically create a CRM record or commercial qualification. NGBS reviews enquiries separately. Information may later be entered into our CRM where there is an appropriate business relationship or legitimate need.

We do not use website enquiries to make solely automated decisions that produce legal or similarly significant effects.

4Our lawful bases

Depending on the circumstances, we rely on:

• Legitimate interests — responding to business enquiries, administering requested meetings, protecting the website and maintaining proportionate operational records.
• Steps before a contract or performance of a contract — considering or performing a service requested by you or your organisation.
• Legal obligation — complying with applicable law.
• Consent — where we specifically ask for consent for an optional activity. You may withdraw consent at any time.

The acknowledgement beside the Contact form confirms that you have read this notice. It is not used as consent for processing necessary to respond to your enquiry.

5How the Contact form works

The website uses a Cloudflare Pages Function to receive and validate Contact-form submissions. Cloudflare Turnstile helps determine whether a submission is likely to be genuine. Resend transmits the enquiry to the monitored NGBS mailbox.

The website does not store Contact-form submissions in a custom website database. Information is transmitted through the services involved and may remain in service logs, delivery records, the receiving mailbox, correspondence and backups according to applicable settings and retention practices.

6Meeting bookings

Calendly is a separate booking service. When its embedded calendar loads or you open its booking page, you interact with Calendly and its technologies. Calendly may process booking information, device or log information, cookies or local storage under its applicable terms and privacy notice.

After a booking, a conferencing provider may be used to create or host the meeting. A Calendly booking does not pass through the NGBS Contact Function or Resend.

7Who receives personal information

Personal information may be received or processed by:

• authorised NGBS personnel who need it to respond, schedule or administer the relationship;
• NGBS Global Limited and authorised personnel supporting it, including relevant personnel of NGBS Private Limited;
• Cloudflare for website delivery, security, request processing and Turnstile verification;
• Resend for Contact-form email delivery;
• Calendly for meeting scheduling;
• the relevant email, calendar or conferencing providers; and
• professional advisers, regulators, courts or authorities where reasonably necessary or legally required.

We do not sell personal information. Sanity manages published website content and is not used as the Contact-form enquiry database.

8Service providers and international processing

Website-enquiry and booking information is handled by authorised NGBS personnel to respond to enquiries, arrange meetings and manage relevant business relationships.

NGBS does not sell this information or disclose it to clients or unrelated third parties.

Limited information is processed by service providers necessary to operate and protect the website, deliver Contact-form emails and provide meeting-booking functionality. These currently include Cloudflare, Resend, Calendly and the relevant email, calendar and conferencing providers.

Some providers may process information outside the United Kingdom, including in the United States. Where UK data-protection law treats this as a restricted international transfer, we use an applicable UK adequacy regulation or an appropriate safeguard, such as the UK International Data Transfer Agreement or UK Addendum to the European Commission’s Standard Contractual Clauses. Where required, we also complete a transfer-risk assessment and apply supplementary safeguards.

We rely on a legal exception only where applicable law permits it.

9Retention

We keep website-enquiry and booking information only for as long as reasonably necessary to respond, arrange a meeting, manage an appropriate business relationship, protect the website and meet applicable legal or evidential requirements.

Cloudflare — Contact-form and security information is processed to deliver and protect the website. NGBS does not intentionally store Contact-form submissions in a custom website database. Cloudflare may retain operational and security records according to the service configuration and applicable terms.

Resend — Contact-form email content, metadata and delivery records may be retained by Resend for up to 30 days under its current standard service retention.

Calendly — Booking information remains in the NGBS Calendly account until it is deleted under NGBS’s retention process or the account is terminated, subject to necessary provider backups and legal records. Calendly’s outgoing-communications logs are normally retained for 90 days unless the account configuration provides otherwise.

Receiving mailbox — An enquiry that does not result in an ongoing relationship will normally be deleted or anonymised within 24 months of the last meaningful contact.

CRM — Relevant information may be added to our CRM when an enquiry becomes a genuine business opportunity or customer relationship. Inactive enquiry records will normally be deleted or anonymised within 24 months of the last meaningful contact.

Information may be retained longer where necessary to comply with law, resolve a dispute, establish or defend legal claims, prevent fraud or enforce an agreement.

When information is no longer required, NGBS deletes or anonymises the copies it controls and requests deletion from relevant systems where appropriate.

10Security

NGBS uses proportionate technical and organisational measures intended to protect personal information against unauthorised access, loss, misuse or alteration. These include controlled access, secure service configuration, validation and abuse-prevention controls.

No internet transmission or storage system can be guaranteed completely secure. Please use an appropriate secure channel if NGBS asks you to provide confidential or sensitive information after an initial conversation.

11Cookies and similar technologies

NGBS does not intentionally use first-party advertising or behavioural-analytics cookies.

The Contact form uses Cloudflare Turnstile for automated-abuse protection. Turnstile processes limited browser, device and network signals and may use technology strictly necessary to provide that protection.

The Contact and Meeting pages automatically load an embedded Calendly booking service. Calendly may use cookies, local storage and similar technologies to provide booking, prevent misuse and remember preferences. Subject to visitor choices, Calendly may also use optional analytics or other technologies.

Calendly provides Cookie Settings within its booking experience. You can also open the booking page directly to review or change those choices.

12Your rights

Depending on the law that applies to you and the circumstances of the processing, you may have rights to:

• request access to your personal information;
• ask us to correct inaccurate or incomplete information;
• ask us to delete information;
• ask us to restrict how information is used;
• object to processing based on legitimate interests;
• receive certain information in a portable format; and
• withdraw consent where processing is based on consent.

You have the right to object to processing based on our legitimate interests. We will stop that processing unless we have compelling legitimate grounds to continue or the information is needed for legal claims.

To exercise a right, email iqbal@ngbs.co.uk. We may need to verify your identity and clarify your request. We normally respond within one month where UK data-protection law applies, subject to any lawful extension.

You may also complain to the UK Information Commissioner’s Office at ico.org.uk if UK data-protection law applies to your concern. You may have the right to contact another supervisory authority in your country.

13Children

This is a business-to-business website and is not directed to children. We do not knowingly seek personal information from children. If you believe a child has submitted personal information, contact us so we can review and, where appropriate, delete it.

14Changes to this notice

We may update this notice when our website, suppliers, data practices or legal obligations change. The updated version will be published on this page with a revised date. If a change materially affects how we use information already collected, we will take reasonable steps to bring it to the attention of affected people where required.

15Contact us

Email: iqbal@ngbs.co.uk

UK registered-office correspondence:

NGBS Global Limited
Company number 14207192
71–75 Shelton Street, Covent Garden
London, United Kingdom, WC2H 9JQ