Privacy policy

Who we are

Naunas (naunas.co.uk) builds client systems for service businesses. Naunas is run by Naufal, who is the controller of the personal data described here. Postal address: 7 Claymond Road. For anything about your data, email contact@naunas.co.uk.

What we collect

• Leak Map sign-up: your first name, email and (optionally) what a client is worth to you.
• Free audit questionnaire and booking: your name, email, website, business type, revenue band, what isn't working, and the time you book.
• Contact form and emails you send us: what you write and your contact details.
• Newsletter: your email, only after you tick the consent box.
• Instagram: if you comment a keyword such as “LEAK” on our posts or send us a direct message, your Instagram username, display name and the comment or message.
• Calls: audit and client calls may be recorded and summarised (Fathom). We tell you at the start of the call, and you can say no.
• Payments: handled by Stripe. We see your name, email, the amount and its status, never your full card details.
• How you found us: the page and campaign tags (for example utm_source) you arrived with, kept in your browser for 90 days and sent with any form you submit. Site traffic is measured with Vercel Analytics, which uses no cookies and doesn't identify you.

Why we use it (and the legal basis)

• To send what you asked for (the Leak Map, its email course, your booking confirmation, replies): to take steps at your request (contract) and our legitimate interest in answering enquiries.
• The newsletter: your consent, which you can withdraw with the unsubscribe link in any email.
• To prepare for your call and follow up (research on your public website, a written proposal): legitimate interest. We only use public information about your business.
• To deliver paid work and take payment: contract, and our legal obligation to keep financial records.
• Instagram replies: when you comment a keyword, we send you one direct message with the link you asked for. That is the only automated message we send.

Who processes it for us

We don't sell your data or share it for advertising. These services store or process it on our behalf:

• MailerLite (email course and newsletter)
• HubSpot (customer records)
• Zoho Mail (our email)
• Cal.com and Google Calendar (bookings)
• Stripe (payments)
• Meta / Instagram (comments and messages)
• Fathom (call recording and summaries)
• Google Drive (proposal documents)
• Anthropic's Claude (drafting replies, call summaries and proposals for us to review; nothing is sent to you without a person approving it)
• Telegram (private notifications to us about new enquiries and payments)
• Vercel (hosting this site)

Some of these are based in the United States or elsewhere outside the UK. Where they are, the transfer is covered by the provider's standard contractual clauses or an adequacy decision.

How long we keep it

• Enquiries and leads that don't become clients: up to 2 years after our last contact, then deleted.
• Newsletter: until you unsubscribe.
• Clients: for the engagement, plus 6 years for invoices and payment records (UK tax law).
• Call recordings: up to 12 months.

Your rights

You can ask to see, correct, export or delete your data, object to how we use it, or withdraw consent at any time. Email contact@naunas.co.ukand we'll reply within one month. Every marketing email has an unsubscribe link.

If you're unhappy with how we handle your data, you can complain to the UK Information Commissioner's Office at ico.org.uk.

Deleting your Instagram data

To have everything we hold from your Instagram comments or messages deleted, send us a DM on Instagram saying “delete my data”, or email contact@naunas.co.ukwith your username. We delete it within 30 days and confirm when it's done.