Get a quote

Privacy Policy

Last updated 8 November 2026

1. Who we are

Nabayn Limited (“we”, “us”, “our”) is the data controller responsible for your personal data when you use our website and when you contact us in connection with our business.

Nabayn Limited is registered in England and Wales, company number 16954773. Registered office: 33 Norfolk Road, Ilford, IG3 8LQ.

You can contact us about data protection at support@nabayn.co.uk.

This notice is provided under the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018. We also follow the Privacy and Electronic Communications Regulations 2003 (PECR) where relevant. See our Cookie Policy.

2. The data we collect

  • Enquiries: when you send our form, we keep your name, email address, company and phone number if you give them, your message and any file you attach.
  • Emails and messages: what you send us by email or WhatsApp, and your contact details.
  • Page counts: the address of each page viewed and the website that linked to it, if any. This count keeps no IP address and no browser details, and uses no cookie.
  • Security records: our hosting provider briefly processes IP addresses to deliver the website and keep it secure. To stop abuse of the form and the sign-in page, we keep a scrambled (hashed) version of IP addresses and email addresses that cannot be read back.
  • Public business details: if we contact your business about our services, we may hold your name, role and business contact details from public sources such as your website or Companies House, and we will tell you where we found them if you ask.

We do not ask for special category (sensitive) personal data. Please do not send it to us unless it is necessary.

3. How we use your data, and our lawful basis

  • Replying to your enquiry and preparing a quote: steps before a contract, and our legitimate interest in running our business.
  • Keeping the website working and secure: our legitimate interest in preventing fraud and abuse.
  • Counting page views: our legitimate interest in knowing which pages are useful. No cookie is involved.
  • Contacting businesses about our services: our legitimate interest in telling businesses about services that may be useful to them, within the PECR rules. You can tell us to stop at any time, and we will.
  • Meeting legal duties, and establishing or defending legal claims: legal obligation and our legitimate interests.

We do not add people who send us an enquiry to a mailing list. Where we rely on legitimate interests, we balance them against your rights, and you can object at any time (see section 7).

4. Who we share data with

We use these providers, who act on our instructions under data processing terms:

  • Fly.io: website and application hosting, on servers in London
  • Neon: database hosting
  • Zoho: business email and automated email delivery
  • Stripe: payments, if you become a customer
  • Meta (WhatsApp): only if you choose to message us on WhatsApp

We also share data with professional advisers where needed, and with regulators, law enforcement or courts where the law requires it.

Some of these providers may process data outside the United Kingdom. Where they do, we rely on a recognised safeguard such as adequacy regulations or the International Data Transfer Agreement or Addendum.

We do not sell your personal data.

5. How long we keep it

  • Enquiries and attached files: deleted automatically 3 years after we receive them. If an enquiry leads to a contract, we keep what the contract and the law require for as long as they require it.
  • Page counts: deleted automatically after 2 years.
  • Scrambled security records: deleted automatically after 7 days.
  • Database backups: deleted automatically after a short rolling period, normally 7 days.

6. How we protect it

All traffic to this website is encrypted. Enquiries can be read only through a private admin area that needs a password and a second sign-in code. Files you attach are private, and can be opened only through a short-lived link available to signed-in staff. No method of sending or storing data is completely secure, but we work to keep the risk low, and we will tell you and the ICO about a serious breach as the law requires.

7. Your rights

Under UK GDPR you may have the right to:

  • access your personal data
  • correct inaccurate data
  • erase data in certain circumstances
  • restrict how we use it
  • take a copy of data you gave us, where the law allows
  • object to our use of it, including for marketing
  • withdraw consent, where we rely on it
  • complain to the ICO: ico.org.uk or 0303 123 1113

To use any of these rights, email support@nabayn.co.uk. We normally respond within one month.

8. Automated decisions

We do not make decisions about you using solely automated processing that have legal or similarly significant effects. Where our services for a client involve automation or AI, the client’s contract and instructions govern that work.

9. Children

Our website and services are for businesses and adults, and we do not knowingly collect children’s data. If you believe we have, please contact us.

10. Changes to this notice

We may update this notice when our practices or the law change. The Last updated date above shows when it last changed.

11. Contact

Data controller: Nabayn Limited

Registered office: 33 Norfolk Road, Ilford, IG3 8LQ

Company number: 16954773

Email: support@nabayn.co.uk

Supervisory authority: Information Commissioner’s Office (ICO), UK: ico.org.uk