Privacy Policy
Last updated: [DATE]
This policy explains what information nimbhl ("we", "us") collects through this website, why, and what rights you have over it. It's written to meet the common expectations of privacy law across the UK, EU, US, Canada, Australia, Singapore, Hong Kong, and other jurisdictions with similar frameworks — but where a specific law grants you rights beyond what's listed here, that law still applies to you.
Who we are
nimbhl is an independent industrial design studio. For any privacy question or request, contact us at [email protected].
What we collect
We only collect what you choose to give us. Through our contact form, this may include: your name, email address, optionally a LinkedIn URL, and whatever you write about your enquiry or project.
We do not use tracking cookies, analytics, or advertising pixels on this site. Our hosting provider (Cloudflare) automatically processes standard technical request data (such as IP address) as part of delivering the site and protecting it from abuse — this is infrastructure-level logging, not something we access or use for profiling.
How we use it
Solely to respond to your enquiry, assess fit for a discovery engagement, and — if you become a client — deliver that work. We do not sell your data, and we do not use it for advertising.
Who we share it with
We use a small number of service providers to operate this site and process enquiries, each acting as a data processor on our behalf:
- Resend (email delivery, EU/Ireland region) — delivers your form submission to us.
- Cloudflare (hosting, security, bot protection) — serves the site and screens spam/abuse.
- Proton Mail — where enquiry emails ultimately arrive and are stored.
We do not share your information with any other third party except where required by law.
International transfers
As a remote studio working with clients globally, your data may be processed in a different country than the one you're in — including the EU/Ireland and the United States, depending on the service provider. Where applicable, we rely on those providers' own compliance with recognised transfer mechanisms (such as the EU Standard Contractual Clauses).
How long we keep it
Enquiry data is kept only as long as reasonably needed to respond to you and, if you become a client, for the duration of that engagement plus a reasonable period afterward for legal and accounting purposes. You can request earlier deletion at any time (see "Your rights" below).
Your rights
Depending on where you live, you generally have the right to: access the information we hold about you; correct it if inaccurate; request its deletion; object to or restrict how we use it; and lodge a complaint with your local data protection authority. To exercise any of these, email [email protected] — we'll respond within a reasonable timeframe.
Children
This site and our services are directed at businesses and individuals over the age of majority in their jurisdiction. We do not knowingly collect data from children.
Security
We rely on industry-standard measures (encryption in transit, access controls, and reputable processors) to protect your information. No method of transmission or storage is 100% secure, but we take reasonable steps appropriate to the small amount of data we hold.
Changes to this policy
We may update this policy as the site or our services change. The "last updated" date at the top will always reflect the latest version.
This policy is intended as a good-faith, plain-English summary consistent with common privacy-law principles across the UK, EU, US, Canada, Australia, Singapore, Hong Kong, and similar jurisdictions. It is not a substitute for legal advice specific to your circumstances or ours.