Privacy Policy

How DrNiki.co handles personal data.

Last updated: 26 June 2026. This policy explains what data is collected when you send a project request or contact DrNiki.co.

Data collected

When you submit or email a brief, the data may include your name, email, phone, company, project goals, competitor links, preferred colors, budget range, timeline, and any notes you provide.

Purposes and lawful bases

  • Replying to enquiries and preparing quotes: pre-contractual steps.
  • Project delivery and support: contract performance.
  • Accounting, tax, legal record keeping: legal obligations.
  • Security, abuse prevention, service improvement: legitimate interests.
  • Analytics or marketing cookies: consent, if enabled later.

Sharing and processors

Data may be processed by hosting, email, analytics, payment, accounting, project-management, or automation providers when needed. Access is limited to what is necessary for the relevant service.

Retention

Enquiries are normally kept for up to 24 months unless a project, legal obligation, dispute, or accounting rule requires longer retention. You can request deletion when retention is no longer required.

Your rights

Under GDPR, you may request access, correction, deletion, restriction, portability, objection to processing, and withdrawal of consent where processing is based on consent. Email [email protected].

International transfers

Some providers may process data outside the EEA. Where this happens, appropriate safeguards should be used, such as Standard Contractual Clauses or equivalent lawful mechanisms.

Security

Reasonable technical and organizational measures are used to protect personal data. No internet service can be guaranteed completely secure.