Privacy Policy

Last updated: 14 August 2026

Note: this policy is written to cover the standard bases for a service handling delegated business communications. It has not yet been reviewed by a qualified solicitor — that review should happen before this is relied on as a complete legal document.

1. Who we are

Nocturni ("we," "us") provides after-hours operational continuity services for businesses. This policy explains what data we collect, why, and how it's handled — both from visitors to this website and from clients whose communications we're delegated to manage.

Contact: hello@nocturni.uk

2. What we collect

From website visitors: name, email address, phone number (optional), and any message content submitted through the contact form. This is processed via Web3Forms and delivered to our inbox — we don't separately store or sell this data.

From clients: once onboarded, we're granted delegated access to specific communication channels (email, messaging platforms) as agreed in your Statement of Work. We only access what's explicitly scoped — never blanket account access, and never shared credentials.

3. Why we collect it

To respond to enquiries submitted through this site
To deliver the after-hours coverage service itself (triaging, responding to, and escalating client communications as agreed)
To compile the daily morning handover brief

4. Legal basis

For enquiry handling: legitimate interest (responding to someone who's contacted us). For client service delivery: contractual necessity — it's the service being paid for, set out in a signed Statement of Work.

5. Who else sees it

Web3Forms — processes contact form submissions
Google Workspace — our email infrastructure
Cloudflare — hosts this website

We don't sell, rent, or share data with anyone beyond what's needed to run the service and the site itself.

6. How long we keep it

Contact form enquiries: retained only as long as needed to respond, then deleted. Client data: retained for the duration of the engagement and a limited period after (per the Statement of Work), then deleted or returned per the agreed offboarding process.

7. Your rights

Under UK GDPR (and EU GDPR, for clients based in Dublin or elsewhere in the EU), you have the right to access, correct, delete, or request a copy of your data, and to withdraw consent where relevant. Contact hello@nocturni.uk to exercise any of these.

8. Security

Access to client systems is granted through delegated permissions, not shared passwords. Data processing terms are agreed in writing before any access begins.

9. Cookies

This site doesn't use tracking or advertising cookies. Google Fonts are loaded from Google's servers for typography — no cookie is set for this.

10. Changes to this policy

We'll update this page if anything material changes, with the "last updated" date reflecting the most recent revision.