PRIVACY POLICY
Last updated: [INSERT DATE]

1. Who we are
Arviteni Ltd, trading as “Nannoux” (“Nannoux”, “Arviteni”, “we”, “our”, “us”) is a company registered in England & Wales (No. 123456781234567812345678).
Registered office: FulladdressFull addressFulladdress
Email (general): support@nannoux.com
Email (privacy): privacy@nannoux.com
Telephone: +44

For UK GDPR purposes Arviteni Ltd is the Data Controller for personal data collected through our public website (www.nannoux.com) and marketing channels, and the Data Processor for any “Client Data” uploaded to our automation and AI services (see our Terms of Service).

2. The information we collect
We collect only the data we need to run our business and serve you effectively:
Identity details – your name, job title and the organisation you represent.
Contact details – email address, telephone number and postal address.
Technical usage data – IP address, browser type/version, device identifiers, pages visited, time-on-page and referrer URL, gathered automatically via server logs and first-party analytics cookies.
Transaction records – purchase orders, invoices, payment confirmations and subscription history.
Marketing preferences – the newsletters you subscribe to, events you register for, and cookie-banner choices you make.
Client Data (business customers only) – any files, databases or integrations you upload to our platform or share with our consultants during a project.

We do not knowingly collect children’s data or special-category data (e.g. health, race, biometrics) via the public website; please do not supply such data through contact forms.

3. How and why we use personal data
We process personal data only when we have a valid legal ground under the UK GDPR:
Operating the website and SaaS platform – to load pages, keep you logged-in and diagnose faults. www.nannoux.comLegal basis: Legitimate Interests or Contract (if you hold an account).
Creating and managing your account – to authenticate you and provide secure access. Legal basis: Contract.
Delivering contracted services and support – to fulfil statements of work, answer support tickets and send incident notices. Legal basis: Contract.
Billing and bookkeeping – to issue invoices, collect payment and satisfy HMRC record-keeping rules. Legal basis: Contract and Legal Obligation.
Product improvement – to analyse anonymous, aggregated usage statistics so we can refine features and content. Legal basis: Legitimate Interests.
Direct marketing – to send product updates, event invites or newsletters; you can opt out at any time. Legal basis: Consent for email/SMS campaigns; Legitimate Interests for B2B post or in-product messages.
Security and fraud-prevention – to monitor IP addresses and sign-ins for suspicious activity. Legal basis: Legitimate Interests.

We will never sell your personal data or use it for automated decision-making that produces legal or similarly significant effects without your explicit consent or another lawful exemption.

4. Data sharing and international transfers
We share data only with trusted sub-processors (cloud hosting, email delivery, analytics, payment providers). A live list with their data-centre regions is published at . Our backbone is UK-based, but optional integrations or features you enable may involve processing outside the UK/EEA. When this happens we rely on an adequacy decision or an approved safeguard such as the UK IDTA or the UK Addendum to SCCs.

5. Retention
• Website analytics: up to 26 monthshttps://www.nannoux.com/sub-processors
• Marketing lists: until you unsubscribe or your address hard-bounces
• Contractual records: 7 years after the end of the relevant financial year
• Client Data: deleted 30 days after service termination unless longer retention is required by law or agreed otherwise

6. Security
We operate ISO-27001-aligned controls, including encryption in transit and at rest, multi-factor authentication, least-privilege access, annual penetration testing and 24/7 monitoring.

7. Your rights
You can ask us to: access, correct, erase, restrict or port your data; object to certain processing; or withdraw consent. To exercise any right email privacy@nannoux.com. You can also complain to the UK Information Commissioner’s Office (www.ico.org.uk).

8. Withdrawing consent or opting out of marketing
Click “unsubscribe” in any marketing email or email privacy@nannoux.com with “OPT-OUT” in the subject line. To adjust cookie choices, use the banner or browser settings (see Cookie Policy).

9. Changes to this policy
Material changes will be announced by banner or email at least 14 days in advance. The “Last updated” date shows the current version.

10. Contact
Questions about privacy? Email privacy@nannoux.com or write to the Data Protection Lead at the postal address above.