Privacy Policy

1. Who we are

NabyDev Ltd (“NabyDev”, “we”, “us” or “our”) is a technology company based in Glasgow, Scotland. We provide web, software, IT and cybersecurity services to businesses.

We are the controller of the personal data described in this policy, which means we decide how and why it is used. You can contact us about it at hello@nabydev.com.

2. What we collect

We collect only the information we need to deal with you and to run this website:

Enquiries. If you use the contact form or chat with our assistant Saira, we store your name, your email address, your message and anything else you choose to tell us, together with the date and time you sent it and a note of whether we have dealt with it.
Newsletter. If you sign up for updates in the website footer, we store your email address and the date you signed up.
Technical data. Like any website, our hosting provider handles technical information when you visit, such as your IP address and details of your browser and device. We do not use this to identify you.
Admin sign-in data. The website owner signs in to a private admin area. This involves an account (name, email address and an encrypted password) and sign-in session records. It concerns the site owner only, not visitors.

We do not ask for payment card details through this website and ask that you do not send them to us in a message.

3. How and why we use it

We use personal data to:

reply to your enquiry and discuss your project;
prepare quotes and, if you go ahead, provide our services;
run, maintain and secure the website; and
meet our legal and accounting obligations.

Under the UK GDPR we need a lawful basis for each of these. Ours are:

Legitimate interests, for replying to enquiries, running and securing the website and running our business. We think this is fair because you contacted us and would expect a reply.
Taking steps at your request before a contract, or performing a contract, when we prepare a quote or provide services you have asked for.
Legal obligation, where the law requires us to keep or share information, for example for tax and accounting.
Consent, where we rely on it, for example when you sign up for our newsletter. You can withdraw consent at any time.

We handle enquiry details only to respond to you and to run our business. Our terms and conditions explain how we work with clients.

4. Saira, our AI assistant

Saira is the assistant you can chat with on our home page. She is an automated assistant, not a person. You can type or speak questions to her, and she can also guide you through an enquiry by asking what you need help with, a little more detail, and where we can reach you.

Saira answers from the information on our own website. She does not use an outside AI service, and she does not send what you type or say to one. The questions you type or speak to her are not stored. They are used only to find an answer and are then discarded. What you tell Saira is stored only if you choose to send it to us as an enquiry. In that case it is stored in the same way as a message from the contact form, so that a member of our team can reply by email.

If you use the microphone, your browser may send the audio to its own speech-recognition service to turn it into text. This depends on your browser and device and is controlled by them, not by us. We only receive the text. The microphone is used only after you click the microphone button.

Please do not share sensitive information in the chat, such as passwords, payment card details or health information.

Saira can speak aloud, but only if you switch the voice on. Her opening lines are pre-recorded audio files served from our own website. Her spoken answers may be generated by a text-to-speech provider, which receives only the text of her reply and never what you typed or said. If audio cannot be played, your browser may read the line aloud using its own built-in speech feature instead, which happens on your device and is controlled by your browser and operating system. Your voice on or off choice is remembered on your own device only.

5. Cookies and analytics

Here is exactly what the website uses:

Admin sign-in cookie. When the site owner signs in to the admin area, a secure session cookie keeps them signed in for up to seven days. Visitors do not receive this cookie.
Website analytics. The live website uses an analytics service to count page views and see how the site is used in general. The statistics are anonymous and aggregated, and our analytics provider states that it does not use cookies to identify visitors. We use it to improve the website, not to build profiles of individuals.
Browser storage on your device. The website stores your Saira voice choice, a note that you have already seen her greeting during your visit, and the position you place her at on the page, in your browser. This stays on your device and is not sent to us.

We do not use advertising cookies, and we do not use advertising or social media tracking on this website.

We share personal data only as far as we need to, with providers who help us run the website:

Our hosting and infrastructure provider, which hosts the website.
Our website analytics provider, which gives us anonymous, aggregated statistics about how the site is used.
Our database provider, where enquiries, newsletter sign-ups and the admin account are stored.
Our email service, which we use when we reply to you by email.

These providers act under their own terms and privacy commitments. We also share information where the law requires it. We do not sell personal data.

7. International transfers

Some of our providers may process personal data outside the United Kingdom. Where that happens, we rely on appropriate safeguards, such as the UK International Data Transfer Addendum or standard contractual clauses, to protect it.

8. How long we keep it

We keep personal data only for as long as we need it for the purpose we collected it for. Enquiries that do not lead to any work are deleted or anonymised after a reasonable period. If we do work together, we keep the records we need for the project and for our legal and accounting obligations. Newsletter details are kept until you ask us to remove them.

9. Security

We take sensible steps to protect personal data. The website is served over a secure connection, access to the admin area needs a password and is limited to the site owner, and our providers use their own security measures. No system is completely secure, so we cannot guarantee the security of information you send us over the internet.

10. Your rights

Under the UK GDPR you have the right to:

ask for a copy of the personal data we hold about you;
ask us to correct anything that is inaccurate or incomplete;
ask us to erase your personal data in certain circumstances;
ask us to restrict how we use it in certain circumstances;
ask for your data in a portable format;
object to us using it where we rely on legitimate interests;
withdraw your consent at any time, where we rely on it; and
not be subject to a decision based solely on automated processing that has a legal or similarly significant effect on you. We do not make decisions of that kind.

To use any of these rights, email hello@nabydev.com. We may need to check your identity first, and we will reply within the time the law allows.

11. Complaints

If you are unhappy with how we have handled your personal data, please contact us first at hello@nabydev.com so that we can try to put it right.

You also have the right to complain to the Information Commissioner’s Office (ICO), the UK data protection regulator, at ico.org.uk or on 0303 123 1113.

12. Children

Our services are for businesses and adults. This website is not aimed at children, and we do not knowingly collect personal data from anyone under 16. If you think a child has sent us personal data, please email hello@nabydev.com and we will delete it.

13. Changes to this policy

We may update this policy from time to time. The date at the top of the page shows when it was last changed. If we make a significant change, we will make that clear on this page.

14. Contact us

NabyDev Ltd, Glasgow, Scotland.

Email: hello@nabydev.com