Privacy Policy

NSKAA LTD ("we", "us" or "our") respects your privacy and is committed to protecting your personal data. This Privacy Policy explains what information we collect, how we use it, who we share it with, and the rights you have, when you visit nskaa.ltd (the "Site") or contact us. It should be read together with our Terms of Service.

1. Introduction

This Site is designed to be lightweight and privacy-respecting. We do not sell your personal data, we do not use advertising or cross-site tracking, and we keep the information we collect to the minimum needed to operate the Site and respond to you. This policy applies to personal data we handle as a data controller.

2. Who we are (data controller)

NSKAA LTD is the data controller responsible for your personal data in connection with this Site. NSKAA LTD is a company registered in the United Kingdom. If you have any questions about this policy or how we handle your data, you can reach us at [email protected].

3. Information we collect

We collect and process the following categories of personal data:

• Information you give us. When you contact us by email or through our contact form, we receive your name, email address and the contents of your message, together with any other information you choose to include.
• Technical and usage data. Our hosting provider may automatically collect standard server log data such as your IP address, browser type and version, device information, referring pages, and the date and time of requests, for security, diagnostics and reliability purposes.
• Correspondence. If you communicate with us, we keep a record of that correspondence to help us respond and to maintain our business records.

We do not intentionally collect special categories of personal data (such as data about health, race or religion) through this Site. Please do not send us such information unless strictly necessary.

4. How we use your information

We use the personal data we collect to:

• respond to your enquiries and provide information or services you request;
• operate, maintain, secure and improve the Site;
• detect, prevent and address technical issues, fraud or abuse;
• keep business records and manage our relationship with you;
• comply with our legal and regulatory obligations.

5. Legal bases for processing

Where the UK GDPR and EU GDPR apply, we rely on the following legal bases:

• Consent — where you voluntarily contact us or submit information to us.
• Legitimate interests — to run, secure and improve our Site and to respond to enquiries, provided those interests are not overridden by your rights.
• Performance of a contract — where processing is necessary to take steps at your request before entering into, or to perform, a contract with you.
• Legal obligation — where we must process data to comply with the law.

6. Cookies

This Site does not use advertising, analytics or cross-site tracking cookies. Any strictly necessary cookies or similar technologies that may be set by our hosting provider exist only to deliver the Site securely and reliably, and do not require consent under applicable law. You can control or delete cookies through your browser settings.

7. Sharing and third parties

We do not sell or rent your personal data. We may share limited personal data with:

• Service providers (processors) who help us operate the Site, such as our hosting provider, acting on our instructions;
• Professional advisers such as lawyers or accountants, where necessary;
• Authorities or other parties where required by law, regulation or legal process, or to protect our rights, property or safety.

8. Hosting & processors

This Site is hosted on Google Firebase Hosting, provided by Google. In delivering the Site, Google may process technical data (such as IP addresses) as described above and under its own terms and privacy notices. We select processors that provide appropriate safeguards for personal data and, where required, put data processing agreements in place.

9. International transfers

Some of our service providers may process personal data outside the United Kingdom or European Economic Area. Where personal data is transferred internationally, we take steps to ensure it is protected by appropriate safeguards, such as adequacy decisions or standard contractual clauses, consistent with applicable data protection law.

10. Data retention

We keep personal data only for as long as necessary to fulfil the purposes set out in this policy, including to meet any legal, accounting, tax or reporting requirements. Enquiry correspondence is generally retained for as long as needed to handle your request and for a reasonable period afterwards, after which it is deleted or anonymised. Server logs are retained for a limited period for security and diagnostic purposes.

11. Your rights

Subject to applicable law, you have the right to:

• request access to the personal data we hold about you;
• request correction of inaccurate or incomplete data;
• request erasure of your data ("right to be forgotten");
• object to, or request restriction of, our processing;
• request portability of data you provided to us;
• withdraw consent at any time, where processing is based on consent.

To exercise any of these rights, email us at [email protected]. We will respond within the timeframes required by law. Exercising your rights is free of charge in most cases.

12. Security

We take reasonable technical and organisational measures to protect personal data against unauthorised access, loss, misuse or alteration. The Site is served exclusively over encrypted HTTPS connections. However, no method of transmission over the internet or method of storage is completely secure, and we cannot guarantee absolute security.

13. Children's privacy

This Site is not directed at children under the age of 16, and we do not knowingly collect personal data from children. If you believe a child has provided us with personal data, please contact us and we will take steps to delete it.

14. Our mobile apps

This policy covers this website only. Any mobile applications we publish will have their own privacy information, presented in the relevant app store listing and within the app, describing what data that app collects and how it is used. Where we build apps for clients, the client is typically the data controller for that app's data.

15. Changes to this policy

We may update this Privacy Policy from time to time. The latest version will always be posted on this page, and the "Last updated" date above will reflect the most recent change. We encourage you to review this page periodically.

16. Contact & complaints

If you have any questions, concerns or requests regarding this Privacy Policy or how we handle your data, please email [email protected]. If you are not satisfied with our response, you have the right to lodge a complaint with your local data protection authority. In the United Kingdom, this is the Information Commissioner's Office (ICO) at ico.org.uk.