Privacy Policy

NOTHINGTECH LIMITED, registered in England & Wales, registered office High Beeches Roman Road, Sutton Coldfield, England, B74 3AA, United Kingdom, trading as "NOTHING", is the data controller responsible for the personal data described in this policy.

For any privacy question, request or complaint, contact us at zixivipi@gmail.com. We respond to all privacy requests within 30 calendar days.

Information you give us: name, email address, phone number, company name, project requirements, budget range, timeline and any content you include in an inquiry, booking or proposal request form.

Transaction information: billing name, billing address, invoice records and payment confirmations. Card and bank details are entered directly with our regulated payment processors — we never see or store full payment card numbers.

Technical information: IP address, device and browser type, operating system, referring URL, pages viewed, and interaction timestamps collected automatically when you use the site.

Client project data: credentials and content you share so that we can deliver contracted services. Such data is processed strictly on your instructions as a processor.

To respond to inquiries and prepare proposals; to perform our contract with you and deliver, support and maintain the services; to issue invoices and process payments; to prevent fraud and secure our systems; to comply with legal, accounting and tax obligations; to improve site performance; and, where you have consented or where we have a legitimate interest, to send relevant service updates. You can opt out of marketing at any time via the unsubscribe link or by emailing zixivipi@gmail.com.

Our lawful bases under the UK GDPR are: performance of a contract, legitimate interests, compliance with a legal obligation, and consent (for non-essential cookies and marketing). We do not sell your personal data, and we do not use it for automated decision-making that produces legal effects.

We use strictly necessary cookies to operate the site and keep it secure. Where enabled, we also use analytics cookies to understand aggregate usage and improve the experience. Non-essential cookies are set only with your consent.

You may block or delete cookies through your browser settings at any time; strictly necessary cookies cannot be disabled without affecting site functionality. We honour browser-level privacy signals where technically supported.

We share personal data only with service providers that help us operate: hosting and infrastructure providers, email delivery services, analytics providers, payment processors and payout providers, and professional advisers (accountants, legal counsel). Each is bound by contract to protect your data and to process it only on our instructions.

We may also disclose data where required by law, regulation, court order, or to protect our legal rights, and in connection with a merger, acquisition or business transfer.

Some providers operate outside the United Kingdom. Where personal data is transferred internationally, we rely on UK adequacy regulations or on Standard Contractual Clauses with the UK International Data Transfer Addendum, together with appropriate technical safeguards.

We apply appropriate technical and organisational measures, including TLS/HTTPS encryption in transit, encryption at rest with our infrastructure providers, least privilege and role-based access control, credential rotation, multi-factor authentication on administrative accounts, logging and monitoring, and regular dependency and security reviews.

No system is perfectly secure, but in the event of a personal data breach that presents a risk to your rights, we will notify the UK Information Commissioner's Office within 72 hours and inform affected individuals without undue delay.

Inquiry and prospect data is retained for up to 24 months from last contact. Client project records and correspondence are retained for the duration of the engagement plus 6 years. Invoices and financial records are retained for 6 years to satisfy UK statutory accounting requirements. Analytics data is retained in aggregate for up to 26 months. After these periods, data is deleted or irreversibly anonymised.

Subject to applicable law, you have the right to access your personal data; to rectify inaccurate data; to erasure ("right to be forgotten"); to restrict or object to processing, including direct marketing; to data portability; and to withdraw consent at any time without affecting prior lawful processing.

To exercise any right, email zixivipi@gmail.com with the subject "Data Request". We may ask you to verify your identity, and we respond free of charge within 30 calendar days. You also have the right to lodge a complaint with the UK Information Commissioner's Office (ico.org.uk).

Our services are intended for businesses and adults. We do not knowingly collect data from anyone under 16; if we learn we have, we delete it promptly. Our site may link to third-party sites whose privacy practices we do not control.

We may update this policy; the "last updated" date above reflects the current version, and material changes will be communicated by email or a site notice.

Contact: NOTHINGTECH LIMITED, High Beeches Roman Road, Sutton Coldfield, England, B74 3AA, United Kingdom — zixivipi@gmail.com.