Privacy policy.

Who I am

Nishan Sen — a sole trader based in London, United Kingdom. For the purposes of the UK General Data Protection Regulation (UK GDPR), I am the data controller responsible for the personal data described in this policy. I design and build websites for independent local businesses.

For any question or request relating to this policy, or to exercise any of the rights set out below, please contact me at hello@nishansen.com.

The information I collect

Enquiries you send me. When you email me, I receive your email address and the contents of your message. I use this to respond and, where we go on to work together, to carry out the project.

The enquiry form. If you use the form on this site, I receive the name of your business, an email address or a telephone number (whichever you prefer to give), and whatever else you choose to tell me — the kind of place it is, what you are looking for, your current website address, and your message. The only required fields are the business name, one way of contacting you, and what you are looking for; the contact detail is there solely so that I can reply. Nothing you type is stored on this website.

Business contact details. Where I have approached your business about my services, I may hold publicly listed business details — your trading name, a public email or telephone number, and public listings. If you would prefer not to be contacted, a single reply is enough and I will remove your details.

Technical logs. This website is hosted by Vercel, which records standard server logs (including visitors' IP addresses) in order to keep the site secure and available. These logs are not used to identify individual visitors.

Cookies and analytics

This site uses privacy-friendly analytics to measure visitor numbers and see which pages are popular. It does so without cookies and without identifying individual visitors.

The site sets no advertising or tracking cookies. Because it uses no non-essential cookies, no cookie-consent banner is required.

The basis for processing your data

Where I reply to an enquiry, or contact a business about my services, my lawful basis is legitimate interest. Where I go on to deliver a project for you, my basis is the performance of our contract. Where I retain records for tax and accounting, my basis is compliance with a legal obligation.

How your data is shared

I do not sell or rent personal data, and I do not carry out third-party advertising. I rely on a small number of trusted providers to operate — for example Vercel, which hosts this website and provides its privacy-friendly analytics, and Google Workspace, which handles my email — each of which processes data only on my instructions and under its own data-protection commitments.

The enquiry form is delivered by Web3Forms, which passes your message to my inbox and, by its own account, does not store form submissions — it forwards them and keeps only short-lived server logs, which it deletes periodically. It does not place the contents of your enquiry in any dashboard or database.

Where I manage a client's website analytics on their behalf, I act as their processor under our written agreement, using the data only to run and report on their site.

International transfers

Some of the providers I use may process personal data on servers outside the United Kingdom. Where that happens, I rely on providers that put appropriate safeguards in place for the transfer, in line with UK data protection law.

In particular, the enquiry form is handled by servers in the United States. If you would rather your details did not leave the United Kingdom, email me directly instead of using the form and they will not.

How long I keep it

Enquiry emails are kept for up to two years, so that returning conversations retain their context. Client records and invoices are kept for six years, as required by UK tax law. Outreach records for businesses that decline are removed on request and suppressed from any future contact.

Your rights

Under the UK GDPR you have the right to request a copy of the personal data I hold about you, and to ask me to correct, delete, restrict, or stop processing it. To make a request, email hello@nishansen.com; I will respond within one month.

Complaints

If you are unhappy with how I have handled your personal data, you have the right to complain to the Information Commissioner's Office (the UK's independent data-protection regulator) at ico.org.uk.

Changes to this policy

I may update this policy from time to time to reflect changes in my practices or the law. The date below indicates the current version.