Privacy Policy

This policy explains how Nobar Systems, a sole trader business ("we", "us", "our"), collects and uses your personal data when you visit our website, enquire about our services, or become a client. We are the data controller for the personal data described in this policy.

• Email: nathan@nobarsystems.co.uk
• ICO registration number: ZC171099

• Identity and contact data: name, business name, email address, phone number.
• Enquiry data: the content of messages you send us via our website form, email, text, or phone.
• Client data: billing contact details, service requirements, invoice history, and account information for clients we work with. We do not collect or store your card or bank account numbers; these are handled directly by our payment provider.
• Technical data: IP address, browser type, and basic usage data.

We collect data directly from you when you fill in our contact form, email, text, or call us, or sign up as a client. Our hosting provider also processes basic technical data automatically when you use our website.

You can withdraw consent for marketing or text messages at any time by emailing us, using an unsubscribe link, or replying STOP to any text.

When you contact us and provide your phone number, you may receive text messages from us in response, for example to acknowledge your enquiry, follow up, or arrange a call.

• By providing your phone number, you consent to receive these messages.
• Message and data rates may apply, depending on your mobile provider.
• You can opt out at any time by replying STOP to any message. Reply HELP for assistance.
• We do not share your phone number with third parties for their own marketing.

We use trusted third party providers ("processors") to run our business: Cloudflare (website hosting and form delivery), Make.com (workflow automation), Twilio (SMS and voice messaging), Google Workspace (email and document storage), Retell (AI voice agent services). When you become a paying client, payments are handled by a third party payment provider; your card or bank details are entered directly with them and we never see or store them. Each provider only processes data on our instructions and under a data processing agreement. We do not sell your personal data to anyone.

Some of our providers (including Cloudflare, Twilio and Google) are based in or transfer data to the United States. Where data leaves the UK, we rely on the UK International Data Transfer Agreement, the UK Addendum to the EU Standard Contractual Clauses, or an adequacy decision to keep it protected.

• Enquiries that don't become clients: 12 months, then deleted.
• Client records: for the duration of our work plus 6 years to meet tax and accounting obligations.
• Marketing and messaging data: until you unsubscribe or opt out.

Our website does not set advertising or tracking cookies. Our hosting provider may use strictly necessary cookies for security. You can control cookies through your browser settings.

Under UK data protection law you have the right to: access your data; correct inaccurate data; request erasure; restrict or object to processing; data portability; and to withdraw consent. To exercise any of these, email nathan@nobarsystems.co.uk. We'll respond within one month.

We may update this policy from time to time. The "last updated" date at the top shows when it last changed.

If you have a concern about how we handle your data, please contact us first. You also have the right to complain to the Information Commissioner's Office (ICO): website ico.org.uk, helpline 0303 123 1113.