Privacy policy.

Who is responsible for your information?

Viloso Limited is the data controller for Nookell.io. Nookell is a trading name of Viloso Limited (SC794881), registered at 9 Arnprior Place, Ayr, Scotland, KA7 4PT.

For all personal data enquiries or rights requests—including access, correction, deletion or objections—please contact data@viloso.co.uk. For project and sales enquiries, use hello@nookell.io.

What information do we collect?

When you contact us we collect information you choose to provide, including your name, email address, business or charity name, whether your project is new or existing, your domain preference or current domain, your message and your optional choice to receive marketing emails from Viloso Limited.

If you become a customer, we also handle correspondence, business and brand materials, website content, approvals, support requests and relevant billing or Direct Debit administration information. A Direct Debit provider may collect payment account information directly through its secure service; we will identify that provider when the mandate is set up.

Our website host may log IP addresses, device/browser information, dates, requested pages and security events. Please do not submit health information or other sensitive personal information using the general enquiry form.

How and why we use information

Simply making an enquiry does not automatically subscribe you to marketing. Viloso's single marketing checkbox is optional, unticked by default and does not affect our response to your enquiry. If you opt in, we may keep your name, email address, consent choice, submission date and the wording you agreed to as evidence of consent.

Who may handle your data?

We share personal data with suppliers only when reasonably necessary to provide services or fulfil legal obligations. These include:

• Formspree: to receive and process website enquiries (Formspree privacy notice).
• Microsoft 365: for our Viloso and Nookell email and customer correspondence; unsuccessful enquiries may be archived in the mailbox.
• Our UK website hosting provider: for website delivery, storage, security and technical logs. Nookell customer websites are hosted on servers in the United Kingdom.
• Domain registrars and other technical suppliers: to register and manage domain names and deliver customer services.
• Payment and Direct Debit provider: once selected and activated for collecting recurring payments during onboarding.
• Analytics, advertising and mailing platforms: only if and when enabled for the purposes described in this policy and subject to applicable consent and marketing requirements.

We do not sell your contact details to advertisers.

Where is your data processed?

All Nookell-managed customer websites are hosted on servers physically located in the United Kingdom. This statement concerns the location of website hosting, not every service that processes personal data.

Enquiries handled by Formspree, emails through Microsoft 365, external font services and any future analytics, marketing or payment suppliers may involve processing or access outside the UK. Where personal data is transferred internationally, we assess the provider's arrangements and use relevant UK adequacy provisions or appropriate safeguards as required.

For details about international transfers or safeguards applicable to a particular record, email data@viloso.co.uk.

How long do we keep information?

Unsuccessful enquiries are temporarily archived in our Microsoft 365 mailbox. We review them periodically and delete the enquiry messages and records no later than six months after their original submission if they have not become customers. We also manage copies stored with enquiry-processing providers, including Formspree, in line with this retention period. This is a maximum, not a promise to keep every enquiry for six months.

Marketing opt-in exception: if you have actively opted into Viloso Limited marketing, we may keep the limited contact information and records needed for your chosen email marketing, including your name, email address, consent choice and evidence of when and how you opted in, beyond the six-month enquiry period while your consent remains applicable. We do not keep your full unsuccessful enquiry message indefinitely merely because you opted into marketing. If you unsubscribe or withdraw consent, we stop marketing for the relevant category and delete no-longer-needed marketing data, while retaining minimal suppression or consent history where necessary to respect your choice or demonstrate compliance.

If you become a customer, we keep relevant project, support, billing, tax and contractual records for the life of the relationship and any additional period required by law or to resolve claims. Website security logs are retained for limited operational periods set under our hosting arrangements. Marketing subscription data is kept only while there is a valid reason to send the emails you selected; minimal opt-out and consent-history records may be retained as necessary to honour your choices and demonstrate compliance.

You may ask for further details or request erasure (where applicable) at data@viloso.co.uk. We will not keep personal data solely because it could possibly be useful at some unspecified future time.

Your rights and choices

Depending on the circumstances, you may have rights to access personal data, correct it, request its deletion, restrict processing, object to processing and receive certain data in a portable format. Where we rely on consent, you can withdraw it at any time without affecting processing that was lawful before withdrawal.

Your right to object to direct marketing is absolute: if you object to our processing of your personal data for direct marketing, we will stop using it for that purpose. Every Viloso marketing email will explain how to unsubscribe. You may withdraw your consent to Viloso marketing at any time using the unsubscribe link or by writing to data@viloso.co.uk.

If you are unhappy with our handling of your information, you can complain to the Information Commissioner's Office (ICO).

Cookies, analytics and advertising

As prepared for launch, the Nookell website uses hosting functions, external web fonts and a Formspree enquiry form, but it does not currently include Google Analytics or advertising tracking scripts. Providers can receive technical information when your browser loads their resources.

We intend to use Google Analytics and advertising tracking from time to time. Before activating optional tracking that requires consent, we will implement an appropriate cookie or tracking preference interface, explain each purpose and provide a genuine choice to accept or reject. Advertising cookies and similar tracking technologies will not be set before obtaining the consent required by UK law. Visitors will be able to withdraw consent.

Essential cookies or equivalent technologies may be used where needed for core site operation or security. You can also manage browser cookie controls, though blocking essential technology can affect functionality.

Security and automated decisions

We take reasonable technical and organisational measures to safeguard personal data, including limiting mailbox and service access to authorised personnel. No online service can guarantee absolute security.

We do not use enquiry details for solely automated decisions that produce legal or similarly significant effects on individuals. We will update this notice if our practices materially change.

Changes to this privacy notice

We may update this notice when our services, suppliers, marketing practices or legal requirements change. The date above shows the most recent revision. We will provide additional information or consent options before introducing processing that requires them.

For all requests relating to personal data, email data@viloso.co.uk.