We respect the privacy of every individual who visits our website. We're committed to safeguarding your privacy and have written this privacy notice to explain what information we collect, and what we do with it.This policy may change so please check it periodically. It was last updated on 18th February 2018.
For the purposes of the personal data described in this notice, the data controller is the owner of this website.
We operate in accordance with the Data Protection Act 1998 and EU 2016/679 (The GDPR).
We may obtain your personal data in a variety of ways, including from website analytics built into this site.
Any information you give us should be accurate, and if supplying anyone else’s data you must ensure that you have the authority and legal basis to do so.
We may process different types of information about you, including:
The personal data you give us may be used in a variety of ways:
Your personal data will not be sold or disclosed to anyone outside of this website or our appointed suppliers, without obtaining your prior consent - unless we are required to do so by law.
We will only keep your personal data for as long as it is relevant to the purpose for which it was collected or for as long as we are required to keep it by law.
In most cases the processing is necessary for legitimate interests of nanika.co.uk.
You have the right to request access to the personal data that we hold about you - this is known as a Subject Access Request (SAR). If you wish to make an SAR about the personal data we hold about you, please email firstname.lastname@example.org. We will respond within 30 days to provide you with the data we hold about you in a commonly-used electronic format. There is no charge for this service, however if requests become manifestly unfounded, excessive or repetitive, we may charge a fee appropriate to the administrative work required.
You have the right to request a rectification of your personal data. To do so, please email email@example.com. we will respond within 30 days, although can be extended by two months if the request for rectification is complex. If we decide not take action in response to a request for rectification, we will explain to you our reasons.
You have the right to the deletion or removal of your personal data where there is no compelling reason for its continued processing. To request deletion of your personal data, please email firstname.lastname@example.org. We may refuse to comply with a request for erasure in some circumstances, for example in the case of requiring the information as part of a legal obligation, such as statutory accounts and records.
You have the right to suppress or restrict the processing of your personal data. To request this, please email email@example.com.
You have the right to data portability, which allows you to obtain and reuse your personal data for your own purposes across different services. To request this, please email firstname.lastname@example.org. We will respond within 30 days to provide you with the data we hold about you in a commonly-used electronic format. This time can be extended by two months if the request is complex.
You have the right to object to:
To make an objection to processing, please email email@example.com.
We take a range of organisational and technical measures to protect your information. We maintain strict physical, electronic and administrative safeguards to protect your personal data from unauthorised or inappropriate access.
Where appropriate we use industry-standard encryption techniques, including encrypting web traffic using HTTPS.
We hold regular security reviews to ensure that our systems and processes remain safe and secure for the protection of your personal data.
We keep software up to date with latest security patches as advised by the vendors of the software.
Yes, possibly - we use suppliers such as Google and Amazon Web Services who are based in the US, but have data centres in the UK and EU. Wherever possible we select data centres in the EU, however it’s likely some data is stored in the US.
If you are under 16, please ensure that you obtain your parent/guardian's consent, and evidence of that consent, before you provide personal information to us.
Please visit our cookies page for more information.
This website and other communications may contain links to other third-party websites. You should be aware that we do not have any control over other these third-party websites, and therefore we cannot be responsible for the protection and privacy of any information which you provide whilst visiting such sites. Such sites are not governed by this privacy notice.
You should exercise caution and look at the privacy notice applicable to the website in question.
For any questions about this Privacy Notice, or our approach to data protection, please contact us: