Nomma stores only what you send us (messages and bookings) and anonymous daily visit counts. This site sets no cookies and never stores your IP address.
Who is responsible for your data?
Nomma is the data controller. To ask about your data, use the contact form.
What do we store and why?
| What | Why | Lawful basis | How long |
|---|---|---|---|
| Contact messages: name, email, optional phone, your message, how you heard of us, the page you wrote from, and how you first found the site | To reply to you | Legitimate interests (answering your message) | 24 months after our last exchange |
| Bookings and enquiries: name, email, optional phone and notes, appointment time | To arrange and hold your appointment | Taking steps to enter a contract with you | 6 years after the appointment, for tax and accounting records |
| Marketing emails, only if you tick the box | To send occasional news | Consent, which you can withdraw at any time | Until you unsubscribe |
| Visit counts: page, referring site type, campaign tags | To see which pages help people | Legitimate interests | Daily visit counts are kept as long as the site runs. They contain no personal data. |
How do the visit counts work without cookies?
When a page loads, your browser sends the page address and where you came from. Our server turns a few request details into a code using a secret that changes every day, then throws the details away.
We never store your IP address, set a cookie or keep an id that follows you. Because the secret changes daily, the code cannot be reversed or linked from one day to the next.
Your browser keeps a small note of how you first found the site (for example "search" or "social") in local storage. It is sent to us only if you send a message or make a booking, and you can clear it at any time in your browser settings.
What about the app?
The Nomma app at /app keeps your preferences and logs in your own browser storage on your device.
Who else handles your data?
| Processor | What for | What they see |
|---|---|---|
| Cloudflare | Hosting, database and the booking system | Data stored in the EU region |
| Resend | Sending booking and reply emails | Your name and email address |
| Google Calendar | Keeping the diary for booked consults | Name, time and type of appointment |
| AuraicPulse | Our enquiry inbox, used to reply to messages and bookings | The details you send us |
What are your rights?
Under the GDPR you can ask to see, correct, delete or move your data, object to how we use it, or withdraw consent. Ask through the contact form.
You can also complain to your data protection authority: the Data Protection Commission in Ireland (dataprotection.ie) or the ICO in the UK (ico.org.uk).