Privacy Policy

Nivaan.uk ("we", "our", or "us") is a digital agency operating at nivaan.uk. We are committed to protecting the privacy and security of all individuals who interact with our website and services. This Privacy Policy describes how we collect, use, share, and safeguard your personal information when you visit our website or engage with our services.

By accessing or using nivaan.uk, you acknowledge that you have read and understood this policy. If you do not agree with any part of it, please discontinue use of our site.

We collect information in two ways: information you provide directly, and information collected automatically when you use our site.

The information we collect is used strictly to operate and improve our services. We rely on legitimate interests, contractual necessity, and your consent as the legal bases for processing your data.

• To respond to your enquiries and provide quotes, proposals, or project scoping.
• To deliver, manage, and invoice for digital services you have commissioned.
• To improve the functionality, content, and performance of our website.
• To send transactional communications (such as project updates or invoices) that are essential to your engagement with us.
• To comply with legal obligations, including tax, anti-fraud, and record-keeping requirements.
• To analyse aggregate, anonymised usage trends that help us make product decisions — no individual is identifiable in these reports.

We do not use your data for automated profiling that produces legal or similarly significant effects on you. We do not send unsolicited marketing emails unless you have explicitly opted in.

Nivaan.uk uses cookies — small text files stored on your device — to enable core functionality and understand how visitors engage with our site. We categorise cookies as follows:

• Strictly necessary cookies — Required for the website to function. These cannot be disabled without breaking core features (e.g. form session tokens).
• Analytics cookies — Help us understand visitor behaviour in aggregate. We use privacy-first analytics that anonymise IP addresses and do not share data with advertising networks.
• Preference cookies — Remember settings you have configured, such as theme preferences or region.

You can configure your browser to refuse all or some cookies, or to alert you when websites set or access cookies. If you disable or refuse cookies, some parts of the site may become inaccessible or not function properly.

To deliver our website and services, we rely on a small number of carefully selected third-party providers. Each sub-processor is contractually bound to handle your data only as directed by us, in accordance with applicable data protection law.

• Netlify — Website hosting and edge infrastructure. Netlify may collect basic access logs as part of network operations. See netlify.com/privacy.
• Google Fonts — Font delivery. Your browser makes a request to Google's servers to download fonts. Google may collect your IP address in this process.
• Payment processors — When you pay for services, payment data is handled entirely by a PCI-DSS compliant processor. Nivaan.uk never stores raw card numbers.

We do not transfer personal data outside the UK or the European Economic Area unless adequate safeguards are in place (such as Standard Contractual Clauses or an adequacy decision).

We retain personal data only for as long as necessary for the purposes described in this policy, or as required by law.

• Contact enquiries — kept for up to 24 months from the date of last correspondence, or until you request deletion.
• Project records and invoices — retained for 7 years in line with UK financial record-keeping requirements.
• Website analytics data — retained in anonymised, aggregate form indefinitely; individual sessions are purged after 14 months.
• Cookies — session cookies expire when you close your browser; persistent cookies expire no later than 12 months from creation.

When retention periods expire, we securely delete or anonymise data so it can no longer be linked to any individual.

Depending on your location, you may have the following rights in respect of your personal data. We aim to respond to all verified requests within 30 days.

• Right of access — Request a copy of the personal data we hold about you.
• Right to rectification — Ask us to correct inaccurate or incomplete data.
• Right to erasure — Request deletion of your data where it is no longer needed or where you withdraw consent.
• Right to restriction — Ask us to suspend processing while a dispute is resolved.
• Right to portability — Receive your data in a structured, machine-readable format to transfer to another provider.
• Right to object — Object to processing based on legitimate interests, including direct marketing.
• Right to withdraw consent — Where processing is based on your consent, you may withdraw it at any time with no detriment.

To exercise any of these rights, contact us at contact@nivaan.uk. You also have the right to lodge a complaint with the Information Commissioner's Office (ICO) at ico.org.uk if you believe we have not handled your data lawfully.

We implement appropriate technical and organisational measures to protect personal data against unauthorised access, accidental loss, destruction, or disclosure. These measures include:

• TLS/HTTPS encryption for all data transmitted between your browser and our servers.
• Access controls ensuring only authorised personnel can access personal data.
• Regular review of our data handling practices and security posture.
• Use of reputable, security-audited infrastructure providers.

Despite our best efforts, no transmission over the internet is 100% secure. If you suspect a security incident involving your data, please contact us immediately at contact@nivaan.uk and we will investigate promptly.

Our services are not directed at individuals under the age of 16. We do not knowingly collect personal data from children. If you are a parent or guardian and believe your child has provided us with personal information, please contact us at contact@nivaan.uk and we will take steps to delete it promptly.

We may update this Privacy Policy from time to time to reflect changes in our practices, technology, legal requirements, or for other operational reasons. When we make significant changes, we will update the "Last updated" date at the top of this page and, where appropriate, notify you by email or by a prominent notice on our website.

We encourage you to review this policy periodically. Continued use of nivaan.uk after changes become effective constitutes your acceptance of the revised policy.

If you have any questions, concerns, or requests regarding this Privacy Policy or how we handle your personal data, please reach out to us:

We are committed to working with you to resolve any concerns. If you remain unsatisfied after contacting us, you have the right to escalate your complaint to the relevant supervisory authority in your jurisdiction.