Legal
Privacy Policy
This page explains what personal information N85 collects through this website, why it is collected, who it is shared with, and what you can ask us to do with it.
Who we are
N85 is an independent digital studio based in Portsmouth, United Kingdom. It builds and operates its own online products, including AXYN and Sable Thread.
For the purposes of UK data protection law, N85 is the data controller for personal information collected through this website. You can reach us about anything on this page at hello@axyn.co.uk.
What we collect
This site does not require an account and has no advertising. The only place it asks you for personal information is the enquiry form on the about page.
- Name
- As you enter it, so a reply can address you properly.
- Email address
- As you enter it, so we can reply.
- Project outline
- The message you write in the form.
- IP address
- Seen by our server when you submit the form. Used to limit how many submissions one address can make in a minute, and passed to Cloudflare as part of the spam check.
- Technical request data
- Standard web server and network information such as the time of the request, the page requested and your browser's user agent.
We do not ask for, and the form does not accept, payment details, identity documents or any special category data. Please do not send those through the form.
Why we collect it
We use what you send through the enquiry form to read your enquiry, reply to it, and keep a record of the exchange. Our lawful basis is legitimate interests: you have contacted us expecting a reply, and answering you is the whole purpose of the form.
We use your IP address and the spam check to keep the form usable, which is also a legitimate interest. Without them the endpoint would be trivially abusable.
We do not use anything you send for marketing, we do not profile you, and we do not sell or rent personal information to anyone.
Cloudflare and Turnstile
The enquiry form is protected by Cloudflare Turnstile, which checks that a submission comes from a person rather than an automated script. It replaces the kind of puzzle test that makes forms hard to use.
To do that, Turnstile receives your IP address and signals about your browser and its interaction with the page, and issues a single-use token that our server checks with Cloudflare before the enquiry is accepted. Cloudflare processes this as part of providing the service to us.
This site is protected by Cloudflare Turnstile to reduce spam. The Cloudflare Privacy Policy and Cookie Policy apply.
Cloudflare also sits in front of this website as its network and security provider, so it handles your request before it reaches our server whether or not you use the form.
Where it is stored
Enquiries are stored on a virtual private server we operate in a United Kingdom data centre, provided by IONOS. Both the enquiry database and the mailbox the enquiry is delivered to live there. Your enquiry is not transferred outside the UK by us.
Cloudflare is the exception, and it is worth being straight about it. As our network, security and Turnstile provider, Cloudflare operates a global network and handles your request before it reaches our server, which can mean processing outside the UK. Cloudflare publishes its own safeguards for that in its Privacy Policy.
How long we keep it
We keep an enquiry for as long as we need it to deal with the matter you raised, and afterwards as a business record of the correspondence. In practice that means it stays in the enquiry database and in the mailbox it was delivered to.
Our retention period is 24 months from your last contact with us about that enquiry. After that we delete it, unless it has become part of a live project record or we are required to keep it for longer, for example for tax or legal reasons.
If you would like your enquiry and our reply deleted sooner, ask us and we will remove them, other than anything we are required to keep.
Your rights
Under UK data protection law you can ask us to:
- confirm what personal information we hold about you, and give you a copy
- correct anything that is wrong or incomplete
- delete information we no longer have a good reason to keep
- restrict how we use it, or object to us using it
- provide it in a portable form, where that right applies
Email hello@axyn.co.uk and we will respond within one month. There is no charge for a normal request.
If you are unhappy with how we have handled your information you can complain to the Information Commissioner's Office, the UK supervisory authority, at ico.org.uk. We would rather you raised it with us first so we can put it right.
Security
The site is served over HTTPS only, with HTTP Strict Transport Security enabled. Enquiry data is transmitted over encrypted connections, and credentials for the systems that handle it are held in a secret manager rather than in code or configuration files.
No system is perfectly secure. If you believe you have found a security problem with this site, please email hello@axyn.co.uk and give us a reasonable opportunity to fix it before disclosing it publicly.
Changes and contact
If we change how we handle personal information we will update this page and change the date at the top. Material changes will be described rather than made quietly.
Questions, requests and complaints about this policy all go to hello@axyn.co.uk.