Legal
Privacy and cookies
What we collect when you get in touch, who else sees it, how long we keep it, and what this site stores in your browser. Written to be read, rather than to be technically true and practically useless.
Last updated 1 August 2026
The short version
We collect what you type into one of our forms, so that a person can reply to you. That goes to our support desk by email, and a copy goes to a private team channel so we notice it quickly. We do not sell anything to anyone, we do not buy lists, and we do not send marketing you did not ask for.
Nothing that tracks you runs until you accept cookies. If you decline, or ignore the banner, the site works exactly the same.
Who we are
Nialto Services Limited is the data controller for this website. We are registered in England and Wales, company number 11285399, at 6 Elmfield Road, Potters Bar, Hertfordshire, EN6 2JH.
You can reach us at hello@nialtoservices.co.uk or on 020 3372 5253 about anything on this page.
What we collect, and why
We only collect what you give us. There is no account to create and no profile built in the background.
The contact form on the home page
Your first and last name, your email address, and your message. Optionally your company name and phone number.
The enquiry form on the contact page
Your first and last name, your email address, your message, what you would like help with, and when you are hoping to start. Optionally your company name and phone number.
The support request form on the contact page
Your name, your email address, the website you are asking about, what you need, how urgent it is, and a description of what is happening. You can also attach a screenshot.
Please do not put passwords or card details in any of these forms. If we need credentials to help you, we will tell you a safer way to send them.
Our lawful basis for handling all of the above is our legitimate interest in answering people who contact us, and, where you are asking about work you want us to do, taking steps at your request before entering into a contract. If you go on to become a client, we keep the records the contract and our accounting obligations require.
Who else sees it
We use a small number of suppliers to run this site and answer you. They process your information on our instructions, and only for the purpose described.
| Who | What they do | Where |
|---|---|---|
| Cloudflare | Hosts this website, screens forms for automated abuse, limits how often a form can be submitted, and stores any screenshot you attach | Global, including the US |
| Postmark (ActiveCampaign) | Delivers the email your form submission becomes | United States |
| Our support desk | Holds the resulting conversation so we can reply and refer back to it | United Kingdom |
| Discord | Receives a copy of each submission in a private team channel, so we notice it quickly | United States |
| Tag Manager and website analytics. Analytics runs only if you accept cookies | Global, including the US | |
| Microsoft | Clarity, which records how pages are used so we can improve them. Runs only if you accept cookies | Global, including the US |
| CookieScript | Runs the cookie banner, records what you agreed to, and holds the other tags back until you have chosen | European Union |
The copy that goes to Discord carries your name, your email address, your phone number if you gave one, and the message you wrote. We send it because a chat notification is what actually gets a message seen quickly, and a reply is the whole point of you writing to us. The channel is private to our team. If you would rather we did not keep that copy, say so in your message or email us afterwards and we will delete it.
Transfers outside the UK are covered by the suppliers’ own approved safeguards, including the UK extension to the EU-US Data Privacy Framework and standard contractual clauses. Their own policies are worth reading if you want the detail: Cloudflare (opens in a new tab), Postmark (ActiveCampaign) (opens in a new tab), Discord (opens in a new tab), Google (opens in a new tab) and Microsoft (opens in a new tab).
We will also share information where the law requires it, which in practice means a valid request from a regulator, a court, or the police.
How long we keep it
| What | How long |
|---|---|
| An enquiry that does not become work | 24 months from your last message to us |
| Records relating to a client | For as long as we work together, then 6 years, which is what our accounting obligations require |
| A screenshot attached to a support request | 30 days, after which it is deleted automatically |
| The copy in our team chat | Deleted alongside the enquiry it belongs to |
Download links for an attached screenshot stop working after 30 days, and the file itself is removed on the same schedule.
Cookies and similar technologies
A cookie is a small file a website asks your browser to keep. Some are needed for a site to work at all. Others watch how a site is used. We treat those two differently.
The first time you arrive you will see a banner asking which of the optional ones you are happy with. Nothing optional is set until you choose, and declining changes nothing about how the site works. Some cookies are strictly necessary and are not covered by the banner: these keep the site secure and protect our forms from automated abuse, and they cannot be switched off without switching off the protection they provide.
Session recordings
We also use Microsoft Clarity to understand how the site is actually used: which parts of a page people read, where they scroll straight past something, and where a layout is quietly getting in the way. It records your visit as a replay of mouse movement, scrolling and clicks, which we watch to find the things worth fixing.
Like our analytics, it stays switched off until you accept analytics cookies. What you type is masked before a recording leaves your browser, so a replay shows that you filled a field in without showing what you put in it. We use these to improve the site and for nothing else, and we do not try to work out who you are from one.
What is actually set
Rather than describe our cookies in prose that quietly goes out of date, we let our consent manager scan this site and publish what it finds. The table below is generated from that scan, so it lists what is genuinely in use today, not what was in use when somebody last edited this page.
Changing your mind
Use the Manage cookies link in the footer to reopen the banner at any time and change what you have agreed to. You can also control cookies through your browser settings, including blocking or deleting ones already stored. Restricting them may affect how this or any other site behaves.
Reviews we publish
Our reviews page shows reviews customers have left for us publicly, some on Google and some on Trustindex, which is also the service we use to gather them. Each review says which of the two it came from. We publish the reviewer’s display name, their rating, the date and their words, exactly as they were written publicly. We do not add, edit or reorder them to flatter ourselves.
If you have left us a review and would like it taken down from this site, delete it on the platform you left it on, or email us and we will remove our copy.
Your rights
Under UK data protection law you can ask us to:
- give you a copy of what we hold about you
- correct anything that is wrong
- delete it
- stop or limit what we do with it
- send it to you, or to someone else, in a portable format
- stop relying on legitimate interests, by objecting
Email hello@nialtoservices.co.uk and we will respond within one month. We will not charge you, and we will not ask why. The ICO explains these rights in full on its own website (opens in a new tab).
If you think we have handled your information badly, please tell us first so we can put it right. You also have the right to complain directly to the Information Commissioner’s Office at ico.org.uk/make-a-complaint (opens in a new tab), or on 0303 123 1113.
Changes to this policy
When we change how any of this works, we change this page at the same time and update the date at the top. We will not quietly broaden what we do with your information and leave the page describing the old version.