Privacy notice.Plainly explained.

Who we are

Nirox Labs Ltd (“Nirox”, “we”, “us”) is a company registered in England and Wales, company number 16986979, based in Hull. We are the controller of the personal information described here. Contact us about privacy at hello@niroxai.com.

What we collect

• Contact form: your name and email address, and anything you choose to add: company, website, budget and your message.
• Free guides: your email address and, if you give it, your first name; whether you ticked the box to receive marketing emails, with the date and the wording you agreed to; and how you reached the page (for example a campaign link from Instagram, or the referring website).
• Call bookings: the name, email address and any notes you give when booking through our calendar, and the time of the call.
• Email and calls: what you send us and what we discuss while talking about a potential project.
• Website use: information about how the site is used, such as pages visited, approximate location, device and browser, collected by Google Analytics using cookies.
• Spam protection: Cloudflare Turnstile checks the browser submitting the contact form to confirm it isn’t automated.

Please don’t send us sensitive personal information, or confidential business data, through the contact form. If a project involves that kind of information, we’ll agree how to handle it first.

How we use it, and our lawful basis

• Responding to enquiries and bookings, and discussing a potential project. Lawful basis: taking steps at your request before entering a contract, or our legitimate interest in responding to business enquiries.
• Keeping a record of enquiries and client relationships in our CRM. Lawful basis: legitimate interests.
• Sending you a guide you’ve requested, and keeping a record of the request. Lawful basis: taking steps at your request, and our legitimate interest in knowing who has asked for our guides.
• Sending occasional marketing emails, only if you ticked the box to receive them. Lawful basis: consent. Every email includes an unsubscribe link, and you can also ask us at any time.
• Protecting the website from spam and abuse. Lawful basis: legitimate interests.
• Understanding how the website is used so we can improve it. Lawful basis: consent, given through the cookie banner.
• Meeting legal and accounting obligations if you become a client. Lawful basis: legal obligation.

We don’t sell your information, and we don’t use it for automated decisions that have legal or similarly significant effects on you. We won’t add you to a marketing mailing list without your permission.

Who we share it with

We use trusted service providers to run the website and our business. They process information on our behalf, under contract, and only for the purposes described here.

Cloudflare

Hosts this website, processes contact-form submissions and guide requests, provides Turnstile spam protection, and briefly holds any enquiry or guide request that can’t be recorded straight away until it reaches us.

Attio

Our customer relationship management (CRM) system, where enquiries and guide requests are stored.

Resend

Sends us an email notification for each contact-form submission, emails you a guide you’ve requested, and holds our mailing list if you’ve chosen to join it.

Cal.com

Runs the booking calendar and stores the details you give when you book a call.

Google Analytics

Measures how the website is used.

Our email provider

Stores email correspondence with you.

We may also share information with professional advisers, or where the law requires it.

International transfers

Some of these providers process information outside the UK, including in the United States. Where they do, we rely on appropriate safeguards recognised under UK data protection law, such as the UK–US data bridge or the UK’s international data transfer agreement and addendum.

How long we keep it

• Enquiries and booking details that don’t lead to work: up to two years after our last contact, so we have context if you get in touch again.
• Enquiries held temporarily because of a delivery problem: deleted as soon as they’ve been delivered, and after 14 days at most.
• Client records: for as long as we work together and for up to six years afterwards, to meet legal, accounting and contractual obligations.
• Guide requests: up to two years after the request, unless you become a client or get in touch again.
• Mailing list: until you unsubscribe or ask us to remove you. We keep a record of your consent and of any unsubscribe, so we don’t email you again by mistake.
• Analytics data: according to the retention setting in Google Analytics, a maximum of 14 months.

You can ask us to delete your information sooner, subject to any legal obligation to keep it.

Cookies

We only use analytics cookies if you agree to them. When you first visit, a banner asks whether to allow them, and Google Analytics doesn’t load unless you accept. You can change your choice at any time using “Cookie settings” in the footer of every page.

• Analytics (optional): Google Analytics sets _ga and _ga_* cookies to distinguish visitors and measure how the site is used. They’re removed if you withdraw consent.
• Strictly necessary: a cc_cookie cookie remembers your cookie choice. Cloudflare’s spam protection on the contact and guide forms, and the Cal.com booking calendar, may set cookies needed for them to work. These don’t require consent.

Your rights

Under UK data protection law you have the right to:

• access the personal information we hold about you
• have inaccurate information corrected
• have your information deleted
• restrict or object to how we use it, including where we rely on legitimate interests
• receive your information in a portable format
• withdraw consent at any time, where we rely on consent

To use any of these rights, email hello@niroxai.com. We’ll respond within one month.

Complaints

If you’re unhappy with how we’ve handled your information, please tell us first so we can put it right. You also have the right to complain to the Information Commissioner’s Office (ICO) at ico.org.uk.

Changes to this notice

We’ll update this notice when how we handle personal information changes. The date at the top shows when it was last revised.