Privacy
This website belongs to Yuliyan Ombashiev, trading as Nuvapage, Suite RA01, 195-197 Wood Street, London, E17 3NU. Questions: hello@nuvapage.co.uk. We're registered with the Information Commissioner's Office (ICO), registration number ZC273260.
What we collect
Mostly what you send us yourself through the form, such as your name, phone or email and your message. Anything else we keep is explained below.
Where it goes
The form emails your message to Nuvapage through Cloudflare's email service. A copy is kept in Nuvapage's own records (on Cloudflare and on Nuvapage's computer) so we can reply, and deleted after 12 months unless we start working together. It's never used for marketing. Nuvapage keeps it only as long as needed to reply to you or do the job.
Why, and the legal basis
To reply to you. The legal basis is that it's needed to do what you asked (UK GDPR Article 6(1)(b)), or our legitimate interest in answering enquiries (Article 6(1)(f)). You don't have to give us your details, but without them we can't reply. We don't make automated decisions about you.
Cookies
This website doesn't use cookies.
Visitor counts
We count visits with Cloudflare Web Analytics, so we know how many people use the site and which pages they read. It uses no cookies and doesn't collect personal data about you.
Spam protection
Our forms use Cloudflare Turnstile to stop spam from automated programs. When you use a form, it checks your browser: Cloudflare processes your IP address and browser details only to tell people from bots, not to identify you or for advertising. Our legal basis is our legitimate interest in keeping the form free of spam (Article 6(1)(f)). Cloudflare's Turnstile privacy notice.
Hosting
The site is hosted by Cloudflare, which may briefly record technical details (such as your IP address) for security.
If you become a client
When you hire us we keep your business name, your name, email, phone, address and what we agree (quote, invoices, payments, approvals and changes). We use it to build and run your website, send invoices and keep the records the law requires. The legal basis is that it's needed for our contract with you (UK GDPR Article 6(1)(b)) and to meet legal duties such as tax records (Article 6(1)(c)).
Payments
Payments go through Stripe. The pay page is Stripe's, and Stripe takes your card details, not us. We only see that you paid, the amount and the date. Stripe also uses payment details for its own fraud checks and legal duties, under its own privacy notice (stripe.com/gb/privacy).
Our email (hello@, quotes@, invoices@ and support@ at nuvapage.co.uk) is received through Cloudflare and kept in a Google Gmail account.
AI tools
We use Anthropic's Claude and Google's Gemini to help design and check websites and, if you ask, to improve photos. The text and photos you give us for your site, and drafts of our emails to you, may be sent to them. We never send them payment details. Neither provider uses what we send to train or improve its models; Google keeps it for a limited time only to check for misuse. A person checks everything before it goes on a site.
If we contacted you first
We look for local businesses that might want a website using Google Maps. Google's details (such as your address, phone number and rating) are only shown to us while we search; we keep just Google's reference for your business and our own notes about your website. We may visit you in person, or email a limited company or LLP at an address on its own website. We don't make cold calls. If you say you're not interested, we keep only that reference and a note, so we never contact you again. The legal basis is our legitimate interest in offering our services to businesses (UK GDPR Article 6(1)(f)). You can object at any time: reply "STOP" or email hello@nuvapage.co.uk.
How long we keep it
Invoices and payment records: at least 5 years after the 31 January tax return deadline for that year, as HMRC requires. Other client details: while we work together, then up to 12 months. Enquiries from people who don't become clients: 12 months. Businesses we found on Google Maps: Google's details aren't kept at all; our reference and notes as explained above.
Outside the UK
Cloudflare, Google, Stripe and Anthropic are US companies, so your details may be handled outside the UK. Cloudflare, Google and Stripe are covered by the UK-US Data Bridge; Anthropic uses the standard contract clauses with the UK Addendum that UK law approves.
Your rights
You can ask Nuvapage for a copy of your data, to correct or delete it, to limit or object to how it's used, or to have it in a form you can take elsewhere. To ask, email hello@nuvapage.co.uk; we reply within one month. You can also complain to the Information Commissioner's Office (ico.org.uk).