Who we are and how to contact us
Nidus is the name used for our business workspace and AI consulting services. This notice covers our website, enquiries and our own business relationship with you.
Controller details awaiting confirmation: the legal business name, registered address, company number and place of registration must be added before this notice takes effect. For privacy enquiries, contact [email protected].
Where we process information inside a customer’s workspace or project on that customer’s instructions, the customer’s privacy notice and our agreed Data Processing Agreement apply. This notice does not replace them.
Information we collect
When you request a demo or an AI consulting conversation, we collect your first and last name, work email, company, team-size band, selected areas of interest and message. We also receive information you send us by email and subsequent correspondence.
Our form needs the fields marked as required to handle your enquiry. Areas of interest are optional. Please do not include passwords, payment-card details, sensitive personal information or customer datasets in an enquiry.
If you become a customer, our business records may include contact and billing details, agreed orders, invoices and support correspondence. Information supplied by a colleague is used to manage the relevant business relationship.
Hosting and security services may process connection details such as IP addresses, request times, browser information and error logs. The deployed providers and their logging settings must be verified before publication.
Why we use information
We use enquiry and business-contact information to respond, arrange demos, scope services and manage customer relationships. For contacts acting for a business, our proposed lawful basis is our legitimate interest in answering requested enquiries and providing and administering our services, balanced against the individual’s rights.
Where you personally enter a contract with us, or ask us to take steps towards one, necessary processing may instead rely on that contract. Records required by tax or other applicable law are processed to meet those legal obligations.
Security and abuse prevention rely on our legitimate interest in protecting the website and its users. We must document these assessments and confirm the purposes and lawful bases before this draft is issued.
Submitting an enquiry is not agreement to receive unrelated marketing. Any future marketing programme needs its own lawful basis, required permissions and a clear way to stop messages. The current enquiry form does not sign you up to a newsletter.
Service providers and disclosures
The website’s enquiry form uses Resend to deliver your submission by email to [email protected]. The email includes the information you entered. Our receiving email service also handles that correspondence.
Depending on the agreed services, information may also be handled by hosting, support, billing and professional-advice providers, or disclosed where the law requires it. Access must be limited to what is needed for the relevant purpose.
Publication item: confirm the receiving mailbox provider, hosting and logging providers, any other recipients and the terms on which each handles personal information. Resend’s use for website enquiries is not a complete list of providers used in the Nidus product.
Information processed outside the UK
Provider processing locations and remote access can result in personal information being handled outside the UK. Before publishing this notice, we must identify the actual countries, applicable UK adequacy arrangements or other transfer safeguards, and how you can obtain information about those safeguards.
This draft does not claim that data stays in the UK or that particular transfer agreements are already in place. Contact [email protected] for questions about processing locations.
How long information is kept
Our retention schedule must distinguish enquiries that do not become customers, ongoing customer correspondence, contract and financial records, support records and technical logs.
The relevant criteria are whether an enquiry remains active, what is needed to deliver and support agreed work, applicable record-keeping duties and the reasonable period needed to resolve disputes. Information should then be deleted or anonymised, including through the applicable provider and backup deletion cycles.
Publication item: confirm and implement the periods or specific criteria for each category, including Resend and receiving-mailbox retention. No automatic enquiry deletion period has been verified. Browser storage is described separately below.
Your choices and rights
Depending on the circumstances, you can ask to access or correct your personal information, have it erased, restrict its use, receive portable data or object to processing based on legitimate interests. Where processing relies on consent, you can withdraw it without affecting earlier lawful processing. These rights are subject to the applicable legal conditions.
Contact [email protected] with your request. We may need proportionate information to confirm your identity. You can also complain to the Information Commissioner’s Office at ico.org.uk/make-a-complaint. You do not need to obtain our permission first.
If your request concerns information held in a customer’s Nidus workspace, contact that customer as the controller; we will assist it as required by the agreed Data Processing Agreement.
AI and decisions about people
The website enquiry handler sends your submission by email; it does not use AI to decide whether to accept your enquiry.
AI functionality within a commissioned service or customer workspace requires a separate assessment of the data, purpose, provider access and any decisions about people. The relevant controller must give the necessary information before that use begins. This notice does not grant permission to train models on customer information.
Cookies and browser storage
The current website application does not include analytics or advertising cookie scripts. The notice at the bottom of the site is informational. Selecting “Got it” saves your dismissal in this browser; it does not opt you into tracking.
Storage name: nidus-cookie-notice-dismissed-v1. Technology: local storage. Value: 1. Purpose: remember that you dismissed the notice. It is saved only when you select “Got it”.
There is no automatic expiry. The entry remains until you clear site data, the browser removes it, or it is removed by a later site update. It is specific to this browser and device. Private browsing usually removes it when the private session ends.
Select “Reset cookie notice” in the footer to remove the saved dismissal and reopen the notice. You can also remove the entry through your browser’s settings for this site’s stored data. If storage is blocked, the notice can still be dismissed for the current visit, but the choice may not survive a reload.
Before publication, verify cookies and similar technologies on the deployed site, including hosting and security services. If optional tracking is introduced, update this notice and implement any required choices before it runs.
Changes to this notice
We will date material updates and explain new uses of information before they start where required. The date on this draft records its preparation, not an effective date.