How Nuance collects, uses, and protects personal data.
| Service | Nuance — profit intelligence for beauty brands (nuance-detail.io) |
| Provider | Tinkerlab Services Ltd. (company no. 14840839), United Kingdom |
| Effective date | 25 June 2026 |
| Version | 1.0 |
| Contact | privacy@tinkerlab.co.uk |
Nuance provides profit-intelligence analytics to e-commerce and beauty brands. This policy explains how we handle personal data in connection with our website and service. For questions, contact us at the address above.
When we analyse a merchant's commercial data on their behalf, the merchant is the data controller and we act as their data processor, handling data only on their instructions. We are the controller for the limited personal data we collect directly — for example, the contact details of people who sign up or get in touch.
We process data to provide, secure, and support the service. Our legal bases are performance of a contract, our legitimate interests in operating and securing the service, and — for processing on behalf of merchants — the merchant's instructions and lawful basis. We do not sell personal data and do not use it for advertising.
We share data only with service providers needed to run Nuance — notably our hosting provider, Render, which stores data within the European Union. These providers are bound by contract to protect the data and use it only to provide their services to us.
Production data is hosted in the European Union (Frankfurt, Germany). Where any transfer outside the UK/EEA is required, we use an appropriate legal safeguard such as Standard Contractual Clauses.
We keep personal data only as long as needed to provide the service or as required by law. When a merchant relationship ends, we delete or return the merchant and customer data in our possession.
We protect data with encryption in transit and at rest, least-privilege access, multi-factor authentication, and a documented information-security and incident-response program.
Subject to applicable law, you may request access to, correction of, or deletion of your personal data, and may object to or restrict certain processing. Where we process data on a merchant's behalf, we will forward your request to that merchant. To exercise your rights, contact us at the address above. You may also complain to your local data protection authority (in the UK, the ICO).
We may update this policy from time to time and will post the current version here with a revised effective date.