Privacy Policy

How Naser & Co Analytics collects and uses personal information

1. Who we are and scope

Nima Naser trading as Naser & Co Analytics is a sole trader providing business analytics services. Contact: naseranalytics@gmail.com. Telephone: 07821 872062. Business correspondence address: Southlands, Westbury Road, Bromley, BR1 2QB, United Kingdom.

This notice covers personal data for which we act as controller, such as business enquiries, contacts, contracts and administration. Where we analyse personal data for a business client on its instructions, that client will generally be the controller and our Data Processing Agreement governs our role as processor.

This notice is not a replacement for a client’s own privacy notice to its staff or customers.

2. Information, purposes and lawful bases

Business contact information (name, role, work email or telephone), enquiry content and meeting notes: to respond to enquiries, provide quotes and manage business relationships. Lawful basis: legitimate interests in operating a business; contractual steps where the contact is an individual contracting personally.

Enquiries made through this website. The enquiry form collects your business name, contact name, email address, business sector, the service you are interested in, the types and amount of financial records available, and any optional message. We use this to respond to your enquiry and arrange an introductory consultation, on the lawful basis described above. Please do not send financial documents through the form.

Client administrative records, correspondence, contracts, invoices and payment status: to perform contracts and meet legal and accounting obligations. Lawful bases: contract where applicable, legitimate interests, and legal obligation as appropriate.

Information necessary to protect systems, investigate security incidents or establish legal claims: legitimate interests and, where applicable, legal obligation.

We do not intentionally seek sensitive personal data. Where a client supplies personal information in datasets for analysis, that activity is governed by the client’s instructions and the applicable Data Processing Agreement.

3. Recipients, storage and transfers

We use the following service providers, which may process personal information on our behalf:

  • Google (Gmail and Google Drive) — business email, and storing and sharing client files.
  • Netlify — hosts this website.
  • Formspree — handles the enquiry form. When you submit it, Formspree stores your submission in our Formspree account and emails it to us at naseranalytics@gmail.com.

We analyse client records using Microsoft Excel on our own computer.

Some of these providers may process information outside the UK. Where they do, we rely on safeguards recognised under UK data protection law, such as adequacy regulations or approved contractual clauses.

We may use AI tools to help check our analysis. We do not share identifiable personal information with AI tools; any AI-assisted checks use anonymised or synthetic data.

4. How long we keep information

We keep personal information only for as long as we need it:

  • Enquiries that do not lead to work are kept for no longer than 12 months after our last contact.
  • Contracts, invoices and business records are kept for up to six years, as needed for tax and legal purposes.
  • Client datasets and working files are deleted once the engagement ends or when you ask us to, unless the law requires us to keep them. Copies held in our providers’ backup systems are removed on their normal cycle.

5. Security

We take appropriate steps to protect personal information, including sharing client files only through restricted-access folders rather than public links. No method of storing or sending information is completely secure, but we will tell affected clients without undue delay if we become aware of a security incident involving their information.

6. Your rights and complaints

Subject to legal conditions, individuals may request access, correction, erasure, restriction, portability or objection, and may complain to the UK Information Commissioner’s Office at ico.org.uk (opens in a new tab). Please contact naseranalytics@gmail.com first for requests. If the information is processed for a client as controller, we may refer the request to that client.

We do not use solely automated decision-making with legal or similarly significant effects in our business-contact administration.

7. Cookies

This website does not set cookies or use analytics or advertising tracking. If that changes, this notice will be updated.

8. Changes to this notice

This notice takes effect on the date it is first published on this website. We will update it when our processing arrangements change.