nomma.

Legal

Privacy notice

Nomma stores only what you send us (messages and bookings) and anonymous daily visit counts. This site sets no cookies and never stores your IP address.

Who is responsible for your data?

Nomma is the data controller. To ask about your data, use the contact form.

What do we store and why?

WhatWhyLawful basisHow long
Contact messages: name, email, optional phone, your message, how you heard of us, the page you wrote from, and how you first found the siteTo reply to youLegitimate interests (answering your message)24 months after our last exchange
Bookings and enquiries: name, email, optional phone and notes, appointment timeTo arrange and hold your appointmentTaking steps to enter a contract with you6 years after the appointment, for tax and accounting records
Marketing emails, only if you tick the boxTo send occasional newsConsent, which you can withdraw at any timeUntil you unsubscribe
Visit counts: page, referring site type, campaign tagsTo see which pages help peopleLegitimate interestsDaily visit counts are kept as long as the site runs. They contain no personal data.

How do the visit counts work without cookies?

When a page loads, your browser sends the page address and where you came from. Our server turns a few request details into a code using a secret that changes every day, then throws the details away.

We never store your IP address, set a cookie or keep an id that follows you. Because the secret changes daily, the code cannot be reversed or linked from one day to the next.

Your browser keeps a small note of how you first found the site (for example "search" or "social") in local storage. It is sent to us only if you send a message or make a booking, and you can clear it at any time in your browser settings.

What about the app?

The Nomma app at /app keeps your preferences and logs in your own browser storage on your device.

Who else handles your data?

ProcessorWhat forWhat they see
CloudflareHosting, database and the booking systemData stored in the EU region
ResendSending booking and reply emailsYour name and email address
Google CalendarKeeping the diary for booked consultsName, time and type of appointment
AuraicPulseOur enquiry inbox, used to reply to messages and bookingsThe details you send us

What are your rights?

Under the GDPR you can ask to see, correct, delete or move your data, object to how we use it, or withdraw consent. Ask through the contact form.

You can also complain to your data protection authority: the Data Protection Commission in Ireland (dataprotection.ie) or the ICO in the UK (ico.org.uk).

Last updated