Privacy notice

This site sets no cookies, runs no analytics and makes no third-party requests. The only personal data we hold about you is what you send us when you get in touch, and what our hosting necessarily records to serve the page.

Who we are

Nauni Limited is the controller for the personal data described in this notice.

Registered name: Nauni Limited
Registration: Registered in England and Wales, company number 12121976
Registered office: 124 City Road, London, EC1V 2NX, United Kingdom
Contact: hello@nauni.co.uk

This notice covers nauni.co.uk and enquiries you send us. If you use one of our software platforms, the notice you were given for that platform applies instead. If you are a consumer who ordered a personalised product from a shop that runs on our software, that shop is the controller of your order — contact the shop, and they will involve us if they need to.

What this website collects

Nothing, in the sense most sites mean it:

No cookies are set, and nothing is written to local storage.
No analytics, tag manager, session recording or advertising pixel.
Fonts, images, stylesheets and scripts are all served from this domain. Loading a page here does not tell Google, a CDN or a social network anything about you.

Because there is no non-essential storage and no tracking, there is no cookie banner: there is nothing to ask you to consent to.

Hosting and server logs

The site is a set of static files held in Amazon Web Services in London and served through Amazon CloudFront, a content delivery network. To deliver a page, the hosting necessarily processes your IP address, the file requested, the time of the request and your browser's user-agent string.

Purpose. Serving the site, and keeping it available and secure.
Lawful basis. Our legitimate interests in running a website securely (UK GDPR Art. 6(1)(f)).
Retention. Request logging is currently switched off, so these records are not kept at all. If we turn it on, they will be kept for no more than 30 days and then deleted.

We do not use these records to profile you, and we do not combine them with anything else.

If you contact us

When you email us we hold your name, your email address, and whatever you choose to tell us about your organisation and what you are building.

Purpose. To answer you, and — if it goes further — to scope and run the engagement and to invoice for it.
Lawful basis. Our legitimate interests in responding to an enquiry (Art. 6(1)(f)); performance of a contract once we work together (Art. 6(1)(b)); and our legal obligation to keep accounting records (Art. 6(1)(c)).
Retention. Enquiries that do not lead to work are deleted after 12 months. Correspondence with clients is kept for the engagement and for six years afterwards, which is the period we must keep accounting records for.

We will not add you to a mailing list, and we do not send marketing unless you ask us to.

Who we share it with

We do not sell personal data and we do not share it for anyone else's marketing. The categories of recipient are:

Amazon Web Services, which stores and serves this site.
Google Workspace, which carries the email you send us.
Our accountants, where an enquiry becomes paid work.
Anyone the law requires us to disclose to.

Each supplier is engaged under written terms that meet UK GDPR Art. 28, and is only given the data its purpose needs.

Transfers outside the UK

Two of these involve processing outside the United Kingdom. The content delivery network serves pages from locations across Europe and North America, which means your IP address is handled at whichever one is nearest to you; and Google Workspace is a United States provider. Both transfers rely on an appropriate safeguard — the UK Addendum to the EU Standard Contractual Clauses, in each provider's data processing agreement — together with a transfer risk assessment. A summary is available on request.

Your rights

You can ask us to give you a copy of your personal data, correct it, delete it, restrict how we use it, object to our use of it, or send it to you in a portable format. You can also object to processing we carry out under legitimate interests.

Email hello@nauni.co.uk. We reply within one month, and will tell you if a request is complex enough that we need to extend that by up to two further months. Making a request is free.

Some information cannot be deleted on request — accounting records, for instance, we are legally required to keep. If that applies to your request we will tell you which parts and why.

Complaints

If you are unhappy with how we have handled your data, please tell us first so we can put it right. You also have the right to complain to the Information Commissioner's Office at ico.org.uk or on 0303 123 1113.

Security

The site is served over HTTPS. Internally, access to enquiry correspondence is limited to the people who need it, on managed devices with disk encryption and multi-factor authentication. Our wider information security and data protection policies are available on request.

Changes to this notice

We publish changes on this page and update the date at the top. This notice was last updated on 14 September 2026.