. Introduction

1.1 We are committed to safeguarding the privacy of our website visitors and customers; in this Privacy Policy we explain how we will handle your personal data.

1.2 This policy applies where we are acting as a data controller with respect to your personal data; in other words, where we determine the purposes and means of the processing of that personal data.

1.3 We use cookies on our website. Insofar as those cookies are not strictly necessary for the provision of our website and services, we will ask you to consent to our use of cookies when you first visit our website.

1.4 In this policy, “we”, “us” and “our” refer to NADGO Limited. For more information about us, see Section 17.

2. The personal data that we collect

2.1 In this Section 2 we have set out the general categories of personal data that we process and, in the case of personal data that we did not obtain directly from you, information about the source and specific categories of that data.

2.2 We may process data enabling us to get in touch with you (“contact data”). The contact data may include your name, email address, telephone number, and postal address.

2.3 We may process information relating to transactions, including purchases of goods and/or services, that you enter into with us and/or through our website (“transaction data”). The transaction data may include your name, contact details, payment card details (or other payment details), and transaction details. The source of the transaction data is you and/or our payment services provider.

2.4 We may process information contained in or relating to any communication that you send to us or that we send to you (“communication data”). The communication data may include the communication content and metadata associated with the communication. Our website will generate the metadata associated with communications made using the website contact forms.

2.5 We may process data about your use of our website and services (“usage data”). The usage data may include your IP address, geographical location, browser type and version, operating system, referral source, length of visit, page views, website navigation paths, and information about the timing, frequency, and pattern of your service use. The source of the usage data is our analytics tracking system.

3. Purposes of processing and legal bases

3.1 In this Section 3, we have set out the purposes for which we may process personal data and the legal bases of the processing.

3.2 Operations – We may process your personal data for operating our website, processing and fulfilling orders, providing our services, supplying goods, generating invoices, bills, and other payment-related documentation, and credit control. The legal basis for this processing is our legitimate interests, namely the proper administration of our website, services, and business, and the performance of a contract between you and us.

3.3 Relationships and communications – We may process contact data, transaction data, and/or communication data to manage relationships, communicate with you (excluding direct marketing), provide support services, and handle complaints. Legal basis: legitimate interests in maintaining relationships and properly administering our services and business.

3.4 Direct marketing – We may process contact data, account data, customer relationship data, and/or transaction data to create, target, and send direct marketing communications via email, SMS, post, and/or telephone. Legal basis: legitimate interests in promoting our business and communicating marketing messages.

3.5 Research and analysis – We may process usage and transaction data to research and analyse the use of our website and services and other interactions with our business. Legal basis: legitimate interests in monitoring, supporting, improving, and securing our website, services, and business.

3.6 Record keeping – We may process personal data to create and maintain databases, backups, and business records. Legal basis: legitimate interests in efficient business operations.

3.7 Security – We may process personal data for security and prevention of fraud and other criminal activity. Legal basis: legitimate interests in protecting our website, services, and business.

3.8 Insurance and risk management – We may process personal data for obtaining or maintaining insurance coverage, managing risks, and obtaining professional advice. Legal basis: legitimate interests in protecting our business.

3.11 Legal claims – We may process personal data to establish, exercise, or defend legal claims. Legal basis: legitimate interests in protecting our legal rights, your rights, and those of others.

3.12 Legal compliance and vital interests – We may process personal data where necessary to comply with a legal obligation or protect vital interests of a natural person.

4. Providing your personal data to others

4.1 We may disclose your personal data to members of our group of companies where reasonably necessary for the purposes set out in this policy.

4.2 We may disclose your personal data to our insurers and/or professional advisers as reasonably necessary for insurance, risk management, and professional advice.

4.3 Personal data held in our website database will be stored on secure servers of our hosting service providers.

4.4 Financial transactions are handled by payment service providers (Stripe, PayPal, Clearpay). Transaction data will only be shared as necessary to process payments, refunds, or resolve complaints.

4.5 We may also disclose personal data where required for legal compliance, vital interests, or the establishment, exercise, or defence of legal claims.

5. Retaining and deleting personal data

5.1 Personal data will not be retained longer than necessary for the purpose(s) for which it was collected.

5.2 Retention periods:

• Contact data: 6 months minimum, 6 years maximum
  
• Customer relationship data: 1 year minimum, 6 years maximum
  
• Transaction data: 6 years minimum and maximum
  
• Communication data: 1 year minimum, 6 years maximum
  
• Usage data: 2 years
  
  5.3 Data may be retained longer where necessary for legal obligations or to protect vital interests.
  

6. Security of personal data

6.1 We will take appropriate technical and organisational precautions to secure personal data.

6.2 Personal data will be stored on secure servers, devices, and manual record systems.

6.3 Sensitive data, such as contact details, passwords, and cardholder data, will be stored encrypted.

6.4 Communications between your browser and our web server are encrypted.

6.5 Transmission of unencrypted data over the internet is inherently insecure; we cannot guarantee complete security.

6.6 You are responsible for keeping passwords confidential.

7. Your rights

7.1 Your rights under data protection law include: access, rectification, erasure, restriction of processing, objection, data portability, complaints to a supervisory authority, and withdrawal of consent.

7.2 To exercise your rights, contact us using the details in Section 17.

8. Third-party websites

8.1 Our website may include links to third-party websites.

8.2 We are not responsible for the privacy practices or policies of third parties.

9. Personal data of children

9.1 Our website and services are for persons over 18.

9.2 Personal data of anyone under 18 will be deleted if identified.

10. Updating information

10.1 Please notify us if your personal information needs to be corrected or updated.

11. About cookies

11.1 A cookie is a file containing an identifier sent by a web server to a browser and stored there.

11.2 Cookies may be persistent or session-based.

11.3 Cookies themselves do not contain personal data, but stored data may link to personal information.

12. Cookies that we use

12.1 We use cookies for authentication, shopping cart, personalisation, security, analysis, and cookie consent management.

13. Cookies used by our service providers

13.1 Service providers may place cookies on your device.

13.2 We use Google Analytics for usage reporting (see https://policies.google.com/privacy).

13.3 We use a Facebook pixel to personalise ads and analyse website usage (see https://www.facebook.com/policies/cookies/).

14. Managing cookies

14.1 You can refuse or delete cookies via your browser settings. Methods vary by browser (Chrome, Firefox, Safari, Edge, Opera, IE).

14.2 Blocking cookies may reduce website functionality.

14.3 Blocking cookies may prevent use of some website features.

15. Cookie preferences

15.1 Manage your cookie preferences here: https://www.nadgo.co.uk/cookies

16. Amendments

16.1 We may update this policy at any time by posting a new version on our website.

16.2 Check this page occasionally to stay informed.

17. Our details

17.1 This website is owned and operated by NADGO Limited.

17.2 Registered in the United Kingdom.

17.3 Registered office and principal place of business: 25 New Quebec Street, London, England, W1H 7SF.

17.4 Contact us:

• By post: 25 New Quebec Street, London, England, W1H 7SF
  
• By website contact form
  
• By email: hello@nadgo.co.uk