Privacy Policy

Who we are

This website is run by Niki Shu Designs (NSD), a technology company based in the United Kingdom. We are the controller of the personal information described in this policy, which means we decide how and why it is used.

• Legal name and entity type [Niki Shu Designs Ltd, private limited company, to be confirmed]
• Companies House number [company number]
• Registered address [registered office address]
• ICO registration number [ICO registration number, or a note that we are exempt from the data protection fee]
• Privacy contact [hello@nikishudesigns.com, to be confirmed]

We follow the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

What we collect

When you email us

The site has no contact form. If you choose to email us, we receive your name, your email address, the contents of your message and anything you attach. We also receive anything else you decide to share, such as your company or phone number.

When you visit the site

The site is built and hosted on Webflow, which delivers pages and files through its content delivery network. Like most web servers, these services record technical logs for each request. A log entry usually includes

• your IP address
• your browser and device type (the user agent)
• the page or file requested and the referring page
• the date and time of the request and whether it succeeded

We use these logs only to keep the site secure, to investigate faults or abuse and to understand basic performance. We do not use them to build profiles of visitors or to identify you, unless that is needed to deal with a security incident.

What we do not collect

This website does not use cookies or similar technologies. It has no analytics, no advertising, no social media widgets and no embedded content from other companies. Images, styles and other files are served by Webflow, our hosting provider. Webflow also loads its own scripts on every page, namely webflow.js and the jQuery library, which is delivered from a content delivery network. Our own scripts are small ones that open the mobile menu and show extra details on some pages, and they store nothing on your device. As a result we do not show a cookie banner, because there is nothing to consent to.

How we use it and our lawful basis

Data protection law requires a lawful basis for each use of personal information. Ours are set out below.

• Replying to your enquiry. We rely on our legitimate interest in responding to people who contact us. Where you are asking about working with us, we also rely on taking steps at your request before entering into a contract.
• Delivering work we agree with you. We rely on performing our contract with you or your organisation.
• Keeping business records. We rely on our legal obligations, for example tax and accounting rules, and on our legitimate interest in keeping proper records.
• Running and protecting the website. We rely on our legitimate interest in keeping the site secure, available and working well.

We never sell your personal information and we do not use it for marketing unless you have asked us to keep you informed. You can change your mind about that at any time.

How long we keep it

• Enquiry emails are kept for up to 24 months after our last contact, unless they lead to an engagement.
• Engagement records, including related correspondence, are kept for as long as the work lasts and then for up to 6 years, which is the usual period for UK contract, tax and accounting records.
• Website logs are kept for [e.g. 90 days, to be confirmed] and then deleted, unless we need them longer to investigate a specific security issue.

When information is no longer needed, we delete it or make it anonymous.

Who we share it with

We share personal information only with service providers that help us run the business. They act on our instructions under written contracts and are not allowed to use it for their own purposes.

• Webflow hosts this website and holds its technical logs.
• Our email provider [e.g. Google Workspace, to be confirmed] stores the emails you send us.
• Professional advisers such as our accountants may see business records where needed.

We may also disclose information if the law requires it, or to protect our rights, our users or the public.

International transfers

Our providers may process information outside the United Kingdom, including in the European Economic Area and the United States. When that happens we make sure the transfer is protected. This means relying on UK adequacy regulations, such as those covering the EEA and the UK Extension to the EU and US Data Privacy Framework for certified companies, or on the UK International Data Transfer Agreement or Addendum, which our providers include in their data processing terms. AWS also lets us choose where our website data is stored and applies its own security and contractual safeguards.

How we protect it

We use sensible technical and organisational measures to protect personal information. The site is served only over encrypted HTTPS connections, access to our hosting and email accounts is limited and protected with strong authentication, and we keep only what we need. No system is perfectly secure, but we will act quickly and tell you and the ICO where the law requires if something goes wrong.

Your rights

Under UK data protection law you have the right to

• access the personal information we hold about you
• have inaccurate information corrected
• have your information erased
• restrict how we use your information
• object to our use of your information where we rely on legitimate interests
• receive your information in a portable format and have it moved to someone else
• withdraw your consent at any time, where we rely on consent

To use any of these rights, email us at [hello@nikishudesigns.com, to be confirmed]. There is normally no charge and we will reply within one month. We may need to confirm your identity before acting on a request.

Complaints

If you are unhappy with how we have handled your information, please contact us first so we can try to put it right. You also have the right to complain to the Information Commissioner's Office (ICO), the UK data protection regulator, at ico.org.uk/make-a-complaint or by calling 0303 123 1113.

Links to other websites

Our site links to other websites, such as Bench to Sky, and may in future link to profiles such as LinkedIn. Those sites have their own privacy policies and we are not responsible for how they handle your information. Please read their policies when you visit them.

Children

This website is intended for businesses and professionals. It is not aimed at children and we do not knowingly collect information from anyone under 16.

Changes to this policy

We may update this policy when our website or our practices change. The date at the top shows when it was last updated. If we make a significant change, we will make that clear on this page.

Contact us

For any question about this policy or your personal information, email [hello@nikishudesigns.com, to be confirmed] or write to us at [registered office address].