Privacy Policy

1. Who we are

Navaire Digital is a United Kingdom website design studio. This Privacy Policy explains how we collect, use, store and protect personal information when you use our website, complete the project questionnaire, or communicate with us by email. Navaire Digital acts as the data controller for the personal information described below.

2. Information we collect

We collect only the information we need to respond to your enquiry or carry out a project. This may include your name, email address, business or organisation name, website address, project details, goals, timelines and any other information you choose to provide through the questionnaire or by email. We also record limited technical information (such as the user agent submitted with your form) to help detect spam.

3. Lawful bases for processing

Under UK data protection law, we rely on the following lawful bases:

• Legitimate interests — to respond to enquiries, run and improve our studio, prevent spam, and keep secure records of the work we quote for and deliver.
• Contract — where you have engaged us for a project, to prepare proposals, deliver the agreed services and manage the ongoing relationship.
• Legal obligation — where we need to retain information to comply with accounting, tax or other legal requirements.
• Consent — where you have expressly agreed to a specific use of your information (for example, to display a case study). You may withdraw consent at any time.

4. How we use your information

We use your information to respond to enquiries, prepare proposals, deliver our services, manage projects, provide ongoing Website Hosting & Care, and keep you informed about work we are doing for you. We do not use your information for marketing purposes unless you have explicitly agreed to this, and we do not sell your information to anyone.

5. How long we keep your information

For enquiries that do not result in a project, we retain the information you submitted through the questionnaire and any related email correspondence for up to 12 months from the date of your last contact with us, after which it is deleted or anonymised.

Where an enquiry becomes a project, we retain project records for as long as necessary to deliver the work, provide ongoing hosting and care, maintain accurate business and accounting records, and meet any legal or contractual obligations. When information is no longer needed, we delete or anonymise it securely.

6. Who processes your information

Your information is processed by Navaire Digital and by trusted third-party processors who help us operate the studio. These currently include:

• Supabase — secure database hosting for questionnaire submissions.
• Resend — email delivery for enquiry notifications and confirmations.
• Lovable — website hosting and deployment infrastructure.
• Cloudflare — content delivery, DNS and network security.

Each provider processes information only on our instructions and under appropriate data protection terms. We do not sell your information.

7. International transfers

Some of the processors listed above operate infrastructure outside the United Kingdom and the European Economic Area, including in the United States. Where personal information is transferred outside the UK, we rely on safeguards recognised under UK data protection law, such as the UK International Data Transfer Agreement, the UK Addendum to the EU Standard Contractual Clauses, and any applicable adequacy decisions, to make sure your information continues to be protected.

8. How we keep your information safe

We store data using services that apply appropriate technical and organisational security measures, including encryption in transit, access controls and secure authentication. Access is limited to those who need it to carry out a project or respond to an enquiry.

9. Your rights

Under UK data protection law you have the right to:

• Access the personal information we hold about you.
• Ask us to correct information that is inaccurate or incomplete.
• Ask us to delete your information where there is no good reason for us to keep it.
• Object to processing based on our legitimate interests.
• Ask us to restrict processing in certain circumstances.
• Request a copy of your data in a portable format.
• Withdraw consent at any time, where processing is based on consent.

To exercise any of these rights, please email info@navairedigital.com.

10. Cookies

We use only essential cookies and similar technologies needed for the website to function. We do not use non-essential tracking or advertising cookies.

11. How to complain

If you have any concerns about how we handle your information, please contact us at info@navairedigital.com. You also have the right to complain to the Information Commissioner’s Office (ICO), the UK supervisory authority for data protection matters. The ICO can be contacted at https://ico.org.uk.

12. Changes to this policy

We may update this Privacy Policy from time to time. Any changes will be posted on this page with an updated effective date.

13. Contact us

For any questions about this Privacy Policy or our use of your information, please email info@navairedigital.com.