Privacy Policy

Who we are

This website is operated by Nara Interiors, the trading name of [LEGAL BUSINESS NAME REQUIRED] (company number [COMPANY NUMBER REQUIRED, IF APPLICABLE]), an interior architecture and design studio working across the United Kingdom and Spain.

Registered or business address: [REGISTERED OR BUSINESS ADDRESS REQUIRED].

For anything to do with your personal data, contact [PRIVACY CONTACT EMAIL REQUIRED]. Where registration is required, our ICO registration number is [ICO REGISTRATION NUMBER, IF APPLICABLE].

For the purposes of the UK GDPR and the Data Protection Act 2018 we are the data controller for personal data collected through this website. Where the EU GDPR applies — for example to visitors and clients in Spain — we act as controller under that regulation too.

What this policy covers

This policy explains what happens to personal data you give us through this website. It covers the enquiry form, the email and telephone links, the cookie banner and the optional analytics. It does not cover any separate contract, proposal or correspondence, which is dealt with in the documents issued for that project.

What we collect, and why

Enquiry form. When you send an enquiry we receive the information you enter: your name, email address, telephone number if you give one, the project location, property type, approximate size, project stage, anticipated start, approximate implementation budget, the services you select, how you heard about the studio, your message, and any file you choose to attach.

We use it for one purpose: to read and reply to your enquiry, and to prepare a discovery consultation and a scope and fee proposal if the project is suitable. We do not add enquiry details to a mailing list, sell them, or share them for marketing.

Lawful basis. Article 6(1)(b) — steps taken at your request before entering into a contract; and, where you are enquiring on behalf of a business, Article 6(1)(f), our legitimate interest in responding to enquiries about our services.

Email and telephone. If you email or call us we hold that correspondence on the same basis, for the same purpose.

Analytics. If — and only if — you accept analytics cookies, Google Analytics 4 records pages viewed, the project pages read, language changes, whether an enquiry was started and whether one was sent, and clicks on our email, telephone and social links. It also processes your IP address, which Google shortens. Lawful basis: your consent, Article 6(1)(a), together with regulation 6 of PECR. Nothing you type into the form — name, email, telephone number, budget, message or file — is ever sent to Analytics.

Server logs. Our host records ordinary technical request data such as IP address, timestamp and user agent, in order to serve the site and protect it from abuse. Lawful basis: legitimate interests, Article 6(1)(f).

Cookies and local storage

This site sets nothing on your device beyond what is strictly necessary until you tell it otherwise. The full table is below and is repeated in the Cookie Policy.

There are no marketing or advertising cookies on this site, and no social media tracking pixels.

Who else sees your data

We keep the list of recipients as short as we can:

• Netlify, Inc. — hosting and form storage. Enquiries submitted through the form are stored by Netlify's form service, and Netlify serves every page of this site.
• FormSubmit — the relay that delivers your enquiry to the studio inbox as an email. It receives the contents of the form for that one purpose. It is used because it needs no account and stores no marketing profile; it does not receive anything you have not typed into the form.
• Google Ireland Limited / Google LLC — Google Fonts, which serves the two typefaces this site uses and therefore receives your IP address when a page loads; and Google Analytics 4, but only if you accept analytics cookies.
• Our email provider — enquiries are forwarded to the studio inbox so we can reply.
• Professional advisers, and any authority we are legally required to disclose to.

We do not sell personal data, and we do not share it with advertisers.

International transfers

Netlify and Google are US-headquartered. Where personal data is transferred outside the UK or the EEA, those transfers rely on the UK International Data Transfer Addendum and the European Commission's Standard Contractual Clauses, and on the EU–US Data Privacy Framework and its UK extension where the recipient is certified under it.

How long we keep it

• Enquiries that do not become projects — kept for up to 24 months so we can recognise a returning enquiry, then deleted.
• Enquiries that become projects — kept for the duration of the project and for six years afterwards, which is the period in which a contract claim can normally be brought.
• Analytics data — retained in Google Analytics for the period set on the property; we set the shortest retention Google offers that is useful, currently 14 months.
• Your cookie choice — stored in your own browser until you change or clear it. We never see it.

Your rights

Under the UK GDPR and, where it applies, the EU GDPR, you have the right to ask for a copy of your personal data; to have inaccurate data corrected; to have data erased; to restrict or object to processing; to receive your data in a portable format; and, where processing relies on consent, to withdraw that consent at any time.

Withdrawing analytics consent takes one click: choose Cookie settings in the footer of any page and switch analytics off. That stops any further collection immediately.

To exercise any other right, email [PRIVACY CONTACT EMAIL REQUIRED]. We will respond within one month. We do not charge for this, and we will not ask you to justify the request.

Complaints

If you are unhappy with how we have handled your data, please tell us first at [PRIVACY CONTACT EMAIL REQUIRED] so we can put it right.

You also have the right to complain to a supervisory authority. In the United Kingdom that is the Information Commissioner's Office (ICO), Wycliffe House, Water Lane, Wilmslow, Cheshire SK9 5AF — ico.org.uk, helpline 0303 123 1113.

If you are in Spain or elsewhere in the EEA you may instead complain to your own supervisory authority. In Spain this is the Agencia Española de Protección de Datos (AEPD), C/ Jorge Juan 6, 28001 Madrid — aepd.es.

Children

This website is aimed at people commissioning interior design work. It is not directed at children, and we do not knowingly collect personal data from anyone under 18.

Changes to this policy

If we change how this site handles personal data we will update this page and the date at the top of it. Where a change is significant we will make it obvious rather than rely on you re-reading the page.