The Nook Privacy Notice
This Privacy Notice explains how Nook manages and uses your personal data. We gather this information from you when you contact us via email, telephone, the enquiry form on our website: www.hellonook.co.uk, through social media (Instagram, Facebook and Twitter), or in person (eg. at an event or conference). It is assumed that you are in agreement with this Privacy Notice as you interact with us.
Nook may change this Privacy Notice from time to time by updating this page. You should therefore check back on this page to ensure that you are happy with any changes. This policy is effective from October 2021.
Who are we?
We are Nook (which is a trading name of ‘Round the Door Limited’ (Company number: 13488220)).
Registered office address:
Black Bull House 353-355 Station Road, Bamber Bridge, Preston, Lancashire, United Kingdom, PR5 6EE
What information do we collect?
When you contact us, we may collect the following personal data from you:
Identity (your name, your place of work and your job title/role (if relevant))
Contact (your email address, your telephone number, your address)
We may also collect and process any information you have supplied to us that will help us better understand your needs and provide you with a better service. This may include photos, videos and images as well as descriptions of the project area. If we visit you we may then take down further details, information and photos of the project area. This is again to help us best deliver our service to you.
How do we collect personal data?
We collect data from you directly when you communicate with us via social media, email, telephone, in person or through our enquiry form.
Do we share personal data with other organisations?
We only share your data with organisations that are essential for the operation of our company:
organisations that provide us with essential services, such as IT systems like Google (who host our emails), Instagram (if you contact us via our Instagram account) and our website provider (if you contact us through our website enquiry form).
organisations that regulate us, such as HMRC, who may legally require access to personal data.
We therefore do not pass your information onto any third parties.
Why do we collect and process personal data?
We collect your name and other relevant contact and personal details so we can communicate with you about the project you have enquired and to help us provide you with the best service and product we can. We may also be in regular contact to keep you up to date with the services and products we provide (most probably via email) and to occasionally gather feedback about what we offer.
How do we store your personal information and is it secure?
We are committed to ensuring that your information is secure and safe. Therefore, your personal information is securely stored using the ‘Google Workspace’ services. If stored on paper (for example where we have taken notes during a meeting with you) it will be safely kept until securely stored electronically (using ‘Google Workspace’) and then destroyed after use via shredding or incineration.
How long do we store personal data? (Data Retention Policy)
We store your collected identity information and contact data electronically for as long as seems reasonable to deliver and offer you our service but up to six years, maximum, from the date you last contacted us. This will be stored securely using ‘Google Workspace’. Where initial notes were taken on paper this will be securely destroyed (as described above) after being transferred to an electronic format.
Is it legal for us to collect and process your data in this way?
There are four legal ways (known as ‘legal bases’), under the General Data Protection Regulation (GDPR), that we use to collect and process personal data:
Your consent. You are able to remove your consent at any time. You can do this by contacting us via Email: firstname.lastname@example.org or the alternative contact details towards the bottom of this Privacy Notice.
Performance of a Contract – we collect and process personal data so we can provide you with the services that we both agree on.
Legitimate Interest – it is reasonable for us to collect and process personal data so we can run our business, manage network security, provide administration and IT services, keep our records updated, analyse how our services are used and recover debts.
Legal Requirement - to inform you of any changes to our policies.
Do we transfer personal data abroad?
We do not transfer your data outside the EEA. However, the organisations which process your data on our behalf (like Google (who host our emails), Instagram (if you contact us via our Instagram account) and our website provider (if you contact us through our website enquiry form) if based outside the EEA may therefore transfer your data outside the EEA.
What are your legal rights in relation to your data?
Under data protection law, you have rights including:
Your right of access - You have the right to ask us for copies of your personal information.
Your right to rectification - You have the right to ask us to rectify personal information you think is inaccurate. You also have the right to ask us to complete information you think is incomplete.
Your right to erasure - You have the right to ask us to erase your personal information in certain circumstances.
Your right to restriction of processing - You have the right to ask us to restrict the processing of your personal information in certain circumstances.
Your right to object to processing - You have the right to object to the processing of your personal information in certain circumstances.
Your right to data portability - You have the right to ask that we transfer the personal information you gave us to another organisation, or to you, in certain circumstances.
You are not required to pay any charge for exercising your rights. If you make a request, we have one month to respond to you. Please note that in exercising your rights above, in some cases, this may mean we close your account and delete your contact and personal information and so may not be able to provide you with the level of service you require or we would ideally want.
Please contact us at email@example.com if you wish to make a request.
How do you make a complaint?
Contact: ‘Nook’ (Round the Door Limited); FAO: Data Privacy Manager
Postal address: Black Bull House 353-355 Station Road, Bamber Bridge, Preston, Lancashire, United Kingdom, PR5 6EE
You also have the right to make a complaint at any time to the Information Commissioner's Office (ICO), the UK supervisory authority for data protection issues. The ICO’s address:
Information Commissioner’s Office
Helpline number: 0303 123 1113
ICO website: https://www.ico.org.uk