Privacy Policy

The controller is Worknestle Limited, a company registered in England and Wales under number 17458035, whose registered office is 82a James Carter Road, Mildenhall, Bury St. Edmunds, England, IP28 7DE. The record at the top of this page carries the same details.

Anything to do with your information — a question, a request, an objection or a complaint — goes to support@worknestle.org. It is read by a person, not by a queue.

Three sources, and nothing else.

What you write to us

Your name, your email address, the organisation if you name one, and whatever you say about the work. The enquiry form assembles this in your own browser and hands it to your own email application; nothing typed into it reaches this website.

What an order produces

Correspondence about the project, the brief, the quotation, the order confirmation, invoices and payment records, and — where the work is built inside a workspace of yours — whatever we can see in the part of it you have given access to.

What the hosting produces

The server that serves these pages writes an ordinary access log: the address the request came from, the page asked for, the time, and what browser was declared. This happens for every website and is not linked to anything else held here.

No account is offered on this site, so no password is held. No special category data is asked for, and none should be sent: if a workspace of yours holds anything of that kind, say so in the brief and it will be dealt with in writing before any access is arranged.

• Answering enquiries and writing a brief and a quotation for what you have described.
• Carrying out an accepted order: designing, building, handing over and training.
• Invoicing, taking payment and keeping the accounting records the law requires.
• Dealing with questions, changes, complaints and, if it ever came to it, a dispute.
• Keeping the website running and secure.

Nothing is used for advertising, nothing is sold or given to anybody for their own purposes, and nobody is added to a mailing list for writing in.

Article 6(1)(b)

Performance of a contract, and the steps taken at your request before one exists. This covers the brief, the quotation and everything done to carry out an accepted order.

Article 6(1)(f)

Legitimate interests. Those interests are: keeping a record of what was asked for and agreed so that a later disagreement can be settled from the correspondence rather than from memory; keeping this website available and secure; and being able to defend a legal claim. Each was weighed against what a reasonable person would expect, and none of it involves profiling or marketing.

Article 6(1)(c)

Legal obligation. Accounting records have to be kept and produced, and tax returns have to be supported.

Consent is not relied on for any of this, so there is no consent to withdraw. Where consent is ever asked for in future it will be asked for separately and in plain words.

Nothing here is required by law of you, and nothing is required to read this site. What is required is practical: without a name and an email address there is nobody to reply to, and without a description of the work there is nothing to quote for. Without billing details an invoice cannot be raised, so an order cannot go ahead.

Where the work is built inside a workspace of yours, access to that workspace is something you grant and can withdraw. Withdraw it and the work carries on as a template built in ours instead, which is the route described on the How it works page.

Named where the arrangement is settled, and by category where it is not yet. The particular companies used for an order are named in the written order confirmation, and can be asked for by email at any time.

Hosting provider

Serves these pages and keeps the access log described above.

Email provider

Carries and stores the correspondence.

Payment provider: Stripe

A card payment made through the link on an invoice is taken by Stripe, on a payment page of theirs. They handle the card details; this company never sees them and never stores them, and what comes back to us is that an invoice has been paid, by whom and when. An invoice paid by bank transfer involves nobody beyond the two banks.

Accountant

Prepares accounts and returns from the invoices and payment records.

Professional advisers

A solicitor or an insurer, and only if a claim or a dispute makes it necessary.

One thing that is not on that list: Notion. Where a workspace is built inside an account of yours, the material in it sits with Notion Labs, Inc. under your agreement with them, not ours. This company is a visitor in that workspace at the level of access you granted, and their handling of it is governed by their own terms and privacy notice.

Hosting and email providers commonly run servers outside the United Kingdom, so some of what is described above may be processed abroad. Where that happens it is done only on a basis Chapter V of the UK GDPR allows: a country covered by UK adequacy regulations, or the International Data Transfer Agreement, or the UK Addendum to the European Commission's standard contractual clauses.

Which provider is used for an order, and which of those bases applies to it, is named in the order confirmation and can be asked for by email at any time.

Enquiries that go nowhere

Kept for 24 months from the last message, then deleted.

Project correspondence and files

Kept for 12 months after the work is signed off, so that a question about what was built can be answered, then deleted unless the order says otherwise in writing.

Invoices and payment records

Kept for six years from the end of the financial year they fall in, because company records have to be.

Server access logs

Kept for 30 days, then overwritten.

Access to a workspace of yours

Ends at sign-off, or sooner if you withdraw it. Nothing from it is copied out or kept unless the order says in writing that it is.

• A copy of what is held about you, and a description of what is done with it.
• Correction of anything wrong, and completion of anything incomplete.
• Deletion, where there is no longer a reason to hold it. Accounting records are the exception: they have to be kept for the six years above whatever anybody would prefer.
• Restriction, meaning it is kept but not used, while an objection or a correction is sorted out.
• Objection to anything done on the legitimate interests basis. It stops unless there is a compelling reason to carry on, and that reason is given to you in writing.
• Portability of what you gave us, in a common machine-readable format, where it was handled on the contract or consent basis.

Ask by email. There is nothing to pay, and an answer comes within one month; if a request is genuinely complicated that can be extended, and you are told inside the first month that it has been and why.

Start with us: write to support@worknestle.org and say what is wrong. It is usually quicker, and it is the only route that can actually fix the thing itself.

You do not have to, and you can go to the Information Commissioner's Office instead or as well. Their address is Information Commissioner's Office, Wycliffe House, Water Lane, Wilmslow, Cheshire, SK9 5AF, and their guidance and complaint form are at ico.org.uk. Complaining to them costs nothing and does not affect anything else.

This site sets no cookies. It stores nothing in your browser — no local storage, no session storage, no identifier of any kind — and there is no analytics, no tracking pixel and no advertising script on any page.

That is why there is no cookie banner: a banner asking permission for nothing would be theatre. If this ever changes, permission will be asked for before anything non-essential is stored, and this record will say what it is and how to refuse it.

The enquiry form works entirely inside your browser and keeps nothing after the page is closed. The one thing that leaves your machine is the email you send yourself, and that goes through your own email provider.

There are none. No decision affecting you is taken by a machine, nothing here scores, ranks or profiles anybody, and no automated system decides whether to quote for a job or what to charge for it. Briefs are read by a person and quotations are written by one.

The date this page was last edited is in the bar at the top and repeated at the foot. A change that alters what is done with information already held is told to anyone affected by email before it takes effect, not slipped in under a new date.