We advise other organisations on data protection, so it would be poor form to be vague about our own. This notice says what we collect, why we are allowed to, how long we keep it and how to make us stop.<\/p>\n\n\n\n
Nygon Technologies Ltd is the controller for the personal data described in this notice. We are registered in England and Wales.<\/p>\n\n\n\n
Nygon Technologies LtdFor anything in this notice, write to hello@nygontech.com<\/a>. A person reads that address.<\/p>\n\n\n\n This covers personal data we handle as a controller: enquiries through this website, correspondence with prospective and current clients, and the administration of our own business.<\/p>\n\n\n\n It does not cover personal data we handle on a client behalf during an engagement. In that work we act as a processor, and the client own privacy notice applies. Our roles and instructions are set out in the contract for each piece of work.<\/p>\n\n\n\n We collect only what a conversation needs.<\/p>\n\n\n\n We do not buy contact lists, and we do not enrich what you send us with data from third-party sources.<\/p>\n\n\n\n We rely on the following bases under Article 6 of the UK GDPR.<\/p>\n\n\n\n Where we rely on legitimate interests we have weighed our interest against your rights and recorded that assessment. Ask and we will share it.<\/p>\n\n\n\n We do not send marketing email. There is no mailing list to be added to and nothing to unsubscribe from.<\/p>\n<\/blockquote>\n\n\n\n These are ceilings, not targets. If we no longer need something we delete it earlier.<\/p>\n\n\n\n We keep the list of suppliers short on purpose. At present your data may be handled by our email and file storage provider, our website host, and our accountant. Each is bound by a written contract meeting Article 28, and none of them may use your data for their own purposes.<\/p>\n\n\n\n We will also disclose data where the law requires it, such as a valid request from a regulator or a court order.<\/p>\n\n\n\n We do not sell personal data. There is no arrangement under which anyone pays us for it.<\/p>\n\n\n\n Some of our suppliers process data outside the United Kingdom. Where that happens we rely on UK adequacy regulations, or on the International Data Transfer Agreement or the UK Addendum to the EU standard contractual clauses, together with an assessment of the destination country.<\/p>\n\n\n\n If you want to know where a particular piece of your data sits, ask and we will tell you.<\/p>\n\n\n\n Under the UK GDPR you can ask us to:<\/p>\n\n\n\nWhat this notice covers<\/h2>\n\n\n\n
What we collect<\/h2>\n\n\n\n
\n\n
Why we use it, and our lawful basis<\/h2>\n\n\n\n
\n
Answering an enquiry<\/td> Legitimate interests. Responding to someone who has asked us a question is what they expect, and it carries no meaningful risk to them.<\/td><\/tr>\n Delivering work<\/td> Performance of a contract, or legitimate interests where the contract is with your employer rather than with you.<\/td><\/tr>\n Keeping business records<\/td> Legal obligation, for tax and company law, and legitimate interests for the rest.<\/td><\/tr>\n Defending a claim<\/td> Legitimate interests in keeping enough record to establish or defend a legal claim.<\/td><\/tr>\n<\/tbody><\/table><\/figure>\n\n\n\n \n
How long we keep it<\/h2>\n\n\n\n
\n
Enquiries that go nowhere<\/td> 12 months from the last message, then deleted.<\/td><\/tr>\n Enquiries that become work<\/td> Folded into the client record.<\/td><\/tr>\n Client records<\/td> 6 years from the end of the engagement, which matches the limitation period for a contract claim.<\/td><\/tr>\n Accounting records<\/td> 6 years from the end of the relevant financial year, as required by law.<\/td><\/tr>\n<\/tbody><\/table><\/figure>\n\n\n\n Who else sees it<\/h2>\n\n\n\n
Sending data outside the UK<\/h2>\n\n\n\n
Your rights<\/h2>\n\n\n\n
\n\n