How we handle your data.
Written plainly, and written honestly. This page tells you what we actually do with your data, in the detail your security team will want.
This page describes our practices. The privacy policy is the legal document, and your own data processing agreement takes precedence over both.
What we take, and how
We work from exports and read-only access. Where a system supports read-only credentials we use them; where it does not, we take a scheduled file export instead. We do not need, ask for, or accept write access to your accounts, your store or your ad platforms.
Where it lives
Your data is stored in the European Union (Frankfurt, Germany), encrypted in transit and at rest, and kept logically separated from every other client's. It is used for one purpose only: producing your analysis. It is never pooled with another brand's data, and never used to train a model that another brand benefits from.
Who can see it
Nuance is a very small team. In practice that means Ash and, where a specific piece of work requires it, a named contractor under the same confidentiality terms. There is no offshore support desk and no third party browsing your numbers. We will tell you who has had access if you ask.
How long we keep it
For as long as we are working together, plus a short wind-down period. When an engagement ends you can ask us to delete everything, and we will confirm in writing once it is done. We keep no shadow copy and no anonymised residue of your figures.
What we will sign
Your NDA and your data processing agreement, before you send us anything. We are a UK data controller and processor and we operate under UK GDPR. If your legal team has a standard pack, send it and we will work through it rather than insisting on ours.
Your customers' data
For retention work we need order histories, which contain personal data. Your data stays where you choose. Keep your own tool and your list never leaves it. Use ours, and your data is held under our signed agreement, and used only to email your own customers. We email people who chose to hear from you, and every message carries a clear way to stop. We honour it.
Questions we haven't answered here?
Send them to ashutosh@tinkerlab.co.uk and you will get a straight answer, including where the answer is "not yet".