Your information, handled with care.

This notice explains how NANA uses information from website enquiries, correspondence and client work.

Who is responsible

Kyle Davey is the data controller, operating as a sole trader under the trading names NANA and Not Another Agency.

Information collected and its sources

You may provide your name, business name, email address, telephone number, public website or social links, project requirements, product information and preferred contact method. Client work may also involve supplied files, correspondence, approvals, invoices and payment references.

The enquiry system records the submission time, the form used, your acknowledgement of the privacy notice and basic browser information. Optional qualification answers, how you heard about NANA and campaign tags from the link you followed are saved with your enquiry. Technical IP information is used for short-lived abuse prevention; stored rate-limit keys are hashed and expire within about 20 minutes. Hosting providers may process technical request information for delivery and security. NANA may review public business websites and listings you identify. Please do not include passwords, payment-card details, health information or other sensitive information in enquiry forms.

Why information is used

• To respond to enquiries, provide requested reviews and discuss suitable services.
• To prepare quotations and carry out agreed projects, revisions, training and support.
• To maintain invoices, payment records and required business records.
• To keep the website and enquiry system secure and handle complaints or disputes.

Where you are personally the contracting customer, necessary processing for requested steps towards a contract and agreed services relies on contract. For contacts acting on behalf of an organisation, free reviews, security and necessary administration, NANA relies on legitimate interests in responding to requests, delivering a reliable service and protecting records, balanced against your rights. Legal obligation applies to required tax and accounting records. Consent is used where a separate optional activity requires it; it is not a condition for unrelated marketing.

Services involved

• Fasthosts Mail Basic 5: domain and business email services.
• OpenAI Sites and its Cloudflare-based hosting infrastructure: delivery of this website and storage of enquiries and associated records.
• Google Workspace, including Drive and Docs: the chosen client-file and document services. Setup, two-factor authentication and applicable processing terms must be confirmed before client personal information is uploaded.
• Banking services: invoice payments by bank transfer. Account details are supplied on invoices, not collected through this website.

NANA shares only information needed for the relevant service. Professional advisers or public authorities may receive information where necessary for advice, legal obligations or legal claims. Information is not sold. SumUp or another payment provider will be identified if offered for a particular payment; Stripe is not currently the standard payment route.

If transactional email alerts are enabled, the sending provider will receive only operational delivery information and a protected dashboard link, rather than your full enquiry. The selected provider will be identified here before activation; email alerts are not currently represented as verified.

AI-assisted work

NANA uses ChatGPT, Claude and Manus to help research, draft and organise work. The default approach is to use public-facing business material and minimise or remove personal and confidential information. Public availability does not remove data-protection responsibilities.

Where identifiable or confidential information is genuinely necessary, NANA will discuss the proposed use with the client and check the lawful basis, permissions and provider arrangements, including appropriate business plans where required, before sharing it. Paid individual subscriptions alone are not treated as establishing those arrangements. A client's permission alone does not authorise use of another person's information. AI-assisted deliverables receive human review; NANA does not use solely automated decisions that have legal or similarly significant effects on you.

Storage, access and overseas processing

NANA's access policy is to limit client files to authorised people and use restricted sharing for client folders. Global cloud providers may process information outside the UK. Relevant locations and transfer arrangements depend on the provider and account used. Contact hello@callmenana.com for information about a provider used for your project.

Any new use of personal information in AI tools or additional services requires a review of the relevant processing and international-transfer arrangements before it is enabled.

How long information is kept

Enquiry and project information is retained according to its purpose: whether an enquiry is active, whether a quotation or project is ongoing, whether support or a complaint remains open, and whether records are needed to meet legal obligations or establish or defend a claim. Information that is no longer needed should be deleted or anonymised. There is no promise of automatic deletion by this website.

Tax and accounting records are normally retained for at least five years after the 31 January submission deadline for the relevant tax year, with longer retention where legally required. HMRC record-keeping guidance.

Your rights

Depending on the circumstances, you may request access, correction, deletion, restriction or portability of your personal information. You may object to processing based on legitimate interests. Where consent is relied on, you may withdraw it without affecting earlier lawful processing. These rights are subject to applicable conditions and legal record-keeping obligations.

Email hello@callmenana.com or write to the address above. NANA may need enough information to verify your identity. You can also complain to the Information Commissioner's Office.

Marketing and future changes

There is no newsletter sign-up currently. Sending an enquiry does not subscribe you to promotional emails. If newsletters or additional marketing features are introduced, the notice and relevant choices will be updated before use. Information needed to answer an enquiry must be provided for NANA to respond; optional fields are not required.

When NANA handles personal information on a client's instructions, the relevant processing responsibilities and instructions must be agreed separately.