Privacy
How we handle your information.
This notice explains what happens when you contact Nadavo or book a workflow-triage call.
Who is responsible
Nadavo Ltd is the controller for information handled through this website and our business communications. Nadavo Ltd is registered in England and Wales under company number 17444163. Its registered office is 167–169 Great Portland Street, 5th Floor, London W1W 5PF.
Information you choose to send
If you email us, we receive the message, your email address and any other information you include. Email is delivered through Google Workspace.
If you book a call, Google Calendar asks for your first and last name, email address and workflow information. These fields are required. Providing your company is optional. Without the required details, the Google Calendar booking cannot be completed; you can email hello@nadavo.co.uk as an alternative.
Business contacts we research
To identify organisations that may benefit from our consultancy, we collect limited professional information such as a person's name, role, business contact details, company information and relevant operational signals. We obtain this from business websites, Companies House, professional networking profiles and other public business sources.
We use this information for relevant business-to-business outreach, not consumer marketing. When we contact you, we identify Nadavo, explain why the message may be relevant and provide this notice so you can understand the source of your details. Every outreach email includes a simple way to opt out.
Information created when you visit
This website is hosted by OpenAI through ChatGPT Sites. When you visit, OpenAI and its hosting providers automatically process online and device identifiers and operational information. This can include your IP address, request and usage data, browser and device information, and security logs.
This information is used to deliver the pages, protect the service from abuse, keep it secure, diagnose problems and enforce platform policies. We do not use this hosting data for analytics or advertising.
Only after you choose to allow analytics, Google Analytics collects page views, booking-link clicks, session statistics, approximate location, referring pages, and browser and device information. It uses a pseudonymous client identifier in first-party _ga cookies to distinguish browsers and sessions. Google states that Google Analytics does not log or store individual IP addresses; it uses them at collection time to derive approximate location before discarding them.
How and why we use it
We use this information to reply to enquiries, arrange and run calls, understand the workflow you want to discuss, conduct proportionate and relevant business outreach, manage a prospective or active business relationship, and—with consent—understand which pages are useful and whether visitors use the booking link. We do not use it for automated decision-making or advertising.
Our legal bases
Our legitimate interests include replying to enquiries and running an efficient appointment and prospective-relationship process, researching and contacting suitable corporate organisations about relevant consultancy services, and providing a reliable and secure website. We limit outreach to contacts whose professional responsibilities make the message reasonably relevant, and we balance this interest against the contact's privacy rights before using their information.
We also process information to take steps at your request before entering into a contract and, where we provide services, to perform that contract. We rely on legal obligations where relevant for business and tax recordkeeping.
We rely on your consent for Google Analytics. You can refuse without losing access to the site and can change your choice at any time through Cookie settings in the footer.
Service providers
Email is handled through Google Workspace and appointment booking is handled by Google Calendar. Google processes information on our behalf when it provides those services, and its own processing may also apply when you use the external booking page. You can read Google's privacy policy for more information.
Google Analytics processes consented website-usage information on our behalf to provide aggregated reports. We have disabled advertising features and optional account data sharing. Google explains how it uses information from sites that use its services and provides a Google Analytics opt-out browser add-on.
OpenAI processes hosting information on our behalf to host, maintain and support this website. It may use the subprocessors on its published list, including Cloudflare for content delivery and web hosting. You can read the ChatGPT Sites Data Processing Addendum and OpenAI's subprocessor list.
International transfers
Google and its subprocessors may process personal information outside the UK. For international transfers, Google states that it relies on UK adequacy regulations where applicable and, for restricted transfers, an alternative transfer solution or the contractual clauses in its Data Processing Addendum. The Google Cloud Data Processing Addendum contains more detail. You can contact privacy@nadavo.co.uk for more information or a copy of the relevant safeguards.
ChatGPT Sites does not currently offer data residency, so hosting information may be processed outside the UK. For UK data, OpenAI's Sites Data Processing Addendum incorporates the standard contractual clauses together with the UK Addendum. Its listed hosting and infrastructure providers may process information in several countries; Cloudflare states that processing takes place at the data centre closest to the visitor. You can contact privacy@nadavo.co.uk for more information or a copy of the relevant safeguards.
How long we keep information
We keep information only while it is reasonably needed for the purposes above. We regularly review what we hold and delete or anonymise it when it is no longer needed. We retain information longer where required for active contracts or legal obligations.
We normally review and remove prospect research within six months of the last relevant contact if no business relationship develops. If you opt out or object to direct marketing, we keep a minimal suppression record for as long as reasonably needed to ensure that we do not contact you again.
Google Analytics event and user data is configured to be retained for 14 months. Analytics cookies are configured to expire after no more than six months. Your consent choice is stored in your browser for six months, unless you change it sooner or clear your browser data.
Under the Sites Data Processing Addendum, OpenAI processes hosting information for the term of the service and for the further time needed to complete obligations such as deletion. Information may be kept longer where the host is required to do so by law.
Cookies and tracking
We use basic consent mode: the Google Analytics tag is blocked and no analytics data is sent until you choose “Allow analytics”. If you consent, Google Analytics sets first-party _ga and _ga_<container-id> cookies to distinguish browsers and retain session state. We configure these cookies for a maximum life of six months and do not use Google Analytics for advertising.
We store your allow-or-decline choice in local storage so the site can respect it. This preference is necessary to remember your choice; it does not track which pages you visit. Use to review or change it. Withdrawing consent stops future Analytics collection on your next page load and removes the Analytics cookies available to this site.
OpenAI and its hosting providers may process identifiers or use similar technologies where needed to operate and secure ChatGPT Sites. Google may also process information when you follow the external booking link under its own terms.
Your rights
Depending on the circumstances, UK data protection law may give you rights to access your personal information, correct inaccurate information, erase it, restrict how it is used, object to certain uses, or exercise data portability for information you provided. You can also withdraw consent where consent is the basis for processing.
To ask a question or exercise a right, email privacy@nadavo.co.uk. We may need to confirm your identity before acting on a request.
Complaints
Please contact us first if you have a concern so we can try to resolve it. You also have the right to make a data protection complaint to the Information Commissioner's Office.
Changes to this notice
We will update this page if our data practices change and show the latest revision date below.
Last updated: 25 September 2026