Privacy notice

Who we are

Nod & Co, 61 Bridge Street, Kington, HR5 3DJ, United Kingdom, is responsible for the personal information described here (the “controller” under UK data protection law). Contact us about anything in this notice at hello@nodandco.co.uk or by post at that address.

What we collect

When you send the enquiry form

What you need (website, logo and so on), your name, your business name if you give it, an email address or phone number, and the page you sent the form from. That's all the form asks for.

When you message us on WhatsApp or by email

Your name and number or email address, and whatever you choose to send us: messages, photos, voice notes and files. WhatsApp messages are handled by WhatsApp (Meta) under its own privacy policy as well as this one.

On a private request link

The answers you give, the files and photos you upload, the name you sign with when you approve a preview or agree a summary, and the date and time. We also record when a link is first opened, so we know it reached you. Answers you haven't sent yet stay on your own device until you press send.

When you become a client

Your contact details, your business details, notes of our conversations, what we've agreed, what you've paid and when, and the logins or access you give us to your domain, Google Business Profile and similar accounts. We never ask for or store card details: payments are made by bank transfer.

When you visit this website

We count visits with Vercel Web Analytics, which doesn't use cookies and doesn't identify you. See our cookie policy. Our hosting provider keeps short-lived technical logs to keep the site running and secure.

Why we use it, and the law that allows it

• To reply to your enquiry and prepare your free preview: our legitimate interest in answering people who ask us for work, and steps you've asked us to take before a contract.
• To do the work you've approved and to get paid for it: performing our contract with you.
• To keep accounting and tax records: our legal obligations.
• To keep the website and our systems secure: our legitimate interest in protecting them.

We don't sell your information, we don't use it for advertising, and we don't make decisions about you by automated means. We'll only send you marketing if you've asked for it, and you can say stop at any time.

Who else sees it

Only the companies we use to run our business, each bound to protect it and use it only for us:

• Vercel, which hosts this website and our client links.
• Supabase, which stores our client records and the files you upload, in the European Union (Ireland).
• Resend, which delivers the emails our system sends.
• WhatsApp (Meta), when you message us there.
• Our email provider, for messages to and from hello@nodandco.co.uk.
• An accountant, if we use one, for our financial records.

We'd also share information if the law required us to, for example with HMRC.

Outside the UK

Some of these companies are based in the United States or store data in the European Union. Where your information leaves the UK, it's protected by safeguards UK law recognises, such as the UK–US data bridge, the EU's adequacy status, or the international data transfer agreement and addendum issued by the ICO.

How long we keep it

• Enquiries that don't lead to work: up to 12 months after we last heard from you, then deleted.
• Client records, agreements, approvals and payments: for six years after the end of our last plan with you, because tax and accounting law requires it.
• Files and photos you upload: while we work together and for up to 12 months after, unless they form part of a record above.
• Website logs: a short period set by our hosting provider.

Your customers' data

When we run a website for you, enquiries your customers send through it belong to you. For those, you are the controller and we act as your processor: we only handle them to run the site for you, on your instructions, we keep them secure, and you can have a copy or ask us to delete them at any time. Our terms set this out.

Your rights

You can ask us to:

• give you a copy of the information we hold about you;
• correct anything that's wrong;
• delete it, where we don't need to keep it by law;
• stop or limit how we use it, or object to our using it;
• send it to you or another business in a usable format.

Email hello@nodandco.co.uk or message us on WhatsApp at +44 7851 504904. We'll reply within one month. If you're unhappy with how we've handled your information, please tell us first so we can put it right. You also have the right to complain to the Information Commissioner's Office at ico.org.uk or on 0303 123 1113.

Changes to this notice

If we change how we use personal information, we'll update this page and its date. If a change affects clients, we'll tell them directly.