Privacy Policy
Last updated: March 2025
1. Who We Are
naiah.tech (“we”, “us”, “our”) is a technology consultancy registered in England and Wales, headquartered at 3 Leavale Close, M38 0FA, Manchester, United Kingdom.
We are the data controller for personal data collected through this website. For data protection enquiries, contact us at sales@naiah.tech or +44 7551 659889.
2. What Data We Collect
We may collect the following categories of personal data:
- Contact information: name, email address, phone number, company name
- Enquiry data: the content of messages you send us via our contact form or AI chatbot
- Usage data: pages visited, time on site, referral source (only if analytics cookies are accepted)
- Technical data: IP address, browser type, device type — collected automatically for security purposes
- Communication data: emails and calls between you and naiah.tech
3. How We Use Your Data
We use your personal data to:
- Respond to your enquiries and provide our services
- Send you information you have requested about our services
- Improve and optimise our website (where you consent to analytics cookies)
- Comply with legal obligations
- Protect our legitimate business interests and prevent fraud
4. Legal Basis for Processing
Under UK GDPR, we process your data on the following legal bases:
- Contract performance: to deliver services you have engaged us for
- Legitimate interests: to respond to enquiries, improve our services, and for security
- Consent: for analytics and marketing cookies (you may withdraw consent at any time)
- Legal obligation: where required by law (e.g., financial records)
5. Data Sharing
We do not sell your personal data. We may share data with:
- Email service providers: for sending and receiving communications
- Analytics providers: only with your consent (anonymised data)
- Legal authorities: where required by law or to protect our rights
All third-party processors are subject to data processing agreements compliant with UK GDPR.
6. Data Retention
We retain your personal data only as long as necessary:
- Contact enquiries: 3 years from last contact
- Client data: 7 years (legal/financial compliance)
- Analytics data: 26 months
- Website security logs: 90 days
7. Your Rights Under UK GDPR
You have the right to:
- Access: request a copy of data we hold about you
- Rectification: correct inaccurate or incomplete data
- Erasure: request deletion of your data in certain circumstances
- Restriction: request we limit processing of your data
- Portability: receive your data in a structured, machine-readable format
- Object: object to processing based on legitimate interests
- Withdraw consent: at any time, without affecting prior lawful processing
To exercise any of these rights, email sales@naiah.tech. We will respond within 30 days.
8. Cookies
We use cookies as described in our Cookie Policy. You can manage your preferences at any time via the cookie banner.
9. International Transfers
We are based in the UK and primarily process data within the UK and EEA. Where data is transferred outside this region, we ensure appropriate safeguards are in place (e.g., Standard Contractual Clauses).
10. Security
We implement appropriate technical and organisational measures to protect your personal data against unauthorised access, alteration, disclosure, or destruction, including encryption, access controls, and regular security reviews.
11. Complaints
If you have concerns about how we handle your data, you have the right to lodge a complaint with the Information Commissioner's Office (ICO):
- Website: ico.org.uk
- Helpline: 0303 123 1113
12. Changes to This Policy
We may update this Privacy Policy from time to time. Material changes will be communicated via a notice on our website. Continued use of our services after changes constitutes acceptance of the updated policy.
