1. Who we are
Nitech ("we", "us") is a digital and technology business based in Northern Ireland. We are the controller of the personal data described in this policy. Contact us about anything in this policy at info@nitech.dev.
2. What we collect
- Enquiries: when you use our contact form or email us, we collect your name, email address, company, budget, the service you are interested in, and your message.
- Clients: contact details, billing details and payment records, project content and files, logins you share with us for the work, and our communications with you.
- Home tech customers: your contact details, and details of your device and the work done. We do not look through personal files on your device except where the job needs it, for example setting up your media library.
- Business outreach: publicly listed business contact details, such as a company email address from a business website.
- Website visits: our hosting provider automatically logs technical data such as IP address, browser and pages requested, to keep the site secure and running.
3. Why we use it and our lawful basis
- To reply to enquiries and give quotes: steps before a contract at your request.
- To deliver services, invoice and support you: performance of a contract.
- To keep accounting and tax records: legal obligation.
- To keep our website and systems secure, to improve our services, and to contact businesses about services that may help them: legitimate interests. We have balanced these against your rights.
- Marketing emails to individuals, sole traders and partnerships: only with your consent, or where you are an existing customer and have not opted out, as allowed by the Privacy and Electronic Communications Regulations (PECR).
Every marketing email we send includes an easy way to opt out. Reply "unsubscribe" or email us and we will stop straight away.
4. Who we share it with
We never sell your data. We share it only with trusted providers who help us run the business, and only as much as they need:
- Vercel: website hosting.
- Web3Forms: delivers contact form messages to our inbox.
- Namecheap PrivateEmail: our business email.
- Google Fonts: when you load our site, your browser requests fonts from Google, which receives your IP address.
- Our bank, payment providers and accountants, for payments and records.
- Hosting, domain and software providers we use to deliver your service, where relevant.
We may also share data where the law requires it, or to protect our legal rights.
5. International transfers
Some of these providers store or process data outside the UK, for example in the USA or the EU. Where they do, we rely on UK adequacy regulations or approved safeguards, such as the UK International Data Transfer Agreement or the UK Addendum to the EU Standard Contractual Clauses.
6. How long we keep it
- Enquiries that do not become work: up to 2 years, then deleted.
- Client and financial records: 6 years after our work together ends, as required for tax.
- Login details you share for a job: deleted or handed back when the job ends. We recommend you change shared passwords afterwards.
- Outreach contact details: until you opt out or they are no longer relevant, and reviewed at least yearly.
- Hosting logs: kept by our hosting provider for its standard short period.
7. Cookies and storage
Our public website does not use advertising, tracking or analytics cookies, so you will not see a cookie banner. Our site uses only what is needed for it to work. If we add analytics or other non-essential cookies in future, we will ask for your consent first and update this policy.
8. Data we handle for our clients
When we build or host a website or system for a client, the personal data of that client's customers (for example enquiries sent through their site) belongs to the client. In that case the client is the controller and we act as their processor, handling the data only on their instructions, as set out in our Terms.
9. Keeping it secure
We use reputable providers, encrypted connections, strong passwords and two-factor authentication where available. We limit access to the people who need it. If a breach affects your data and puts your rights at risk, we will tell you and the ICO as the law requires.
10. Your rights
Under UK data protection law you have the right to:
- access a copy of your data;
- correct data that is wrong;
- have your data deleted;
- restrict or object to how we use it, including objecting to direct marketing at any time;
- data portability;
- withdraw consent at any time, where we rely on consent.
Email info@nitech.dev to use any of these rights. We will respond within one month, free of charge in most cases.
11. Complaints
If you are unhappy with how we handle your data, please tell us first so we can put it right. You can also complain to the Information Commissioner's Office (ICO) at ico.org.uk or on 0303 123 1113.
12. Children
Our services are not aimed at children, and we do not knowingly collect data from children under 13.
13. Changes to this policy
We may update this policy from time to time. The latest version is always on this page, with the date it was last updated.