Privacy Policy
The following outlines the privacy policy for Nukoko Ltd. Last updated: March 2026
Introduction
Nukoko (“we,” “our,” or “us”) is committed to protecting your privacy and personal data. This Privacy Policy explains how we collect, use, store, and protect your information when you visit our website www.nukoko.co.uk, use our services, or interact with us.
This policy complies with the UK General Data Protection Regulation (UK GDPR), the Data Protection Act 2018, and the Data (Use and Access) Act 2025.
Data Controller: Nukoko Limited 15 Surrey Technology Centre, 40 Occam Road, Surrey Research Park, Guildford, England, GU2 7YG
Data Protection Queries & Complaints: If you have any questions about how we handle your personal data, or wish to raise a concern, please contact us at hello@nukoko.co.uk. We will acknowledge your query within 5 working days. If you are unsatisfied with our response, you have the right to complain to the ICO (see Section 10).
Information We Collect
2.1 Personal Data You Provide
Contact Information: Name, email address, phone number, company name
Business Information: Company details, industry sector, product requirements
Communication Data: Information in emails, forms, and other communications with us
Newsletter Subscriptions: Email address and preferences (explicit opt-in required)
Sample Requests: Contact details and business requirements
2.2 Information Automatically Collected
Website Usage Data: Pages visited, time spent, referral sources
Technical Data: IP address, browser type, device information, operating system
Cookies and Tracking: As detailed in Section 8 and our Cookie Policy
2.3 Information from Third Parties
Business Databases: Publicly available business contact information
LinkedIn and Social Media: Professional information from your public profiles
Event Platforms: Contact information when you attend our events or webinars
How We Use Your Information
3.1 Legal Bases for Processing
We process your personal data only where we have a lawful basis to do so under UK GDPR Article 6:
Legitimate Interests — for business development, marketing to B2B contacts, and improving our services, where our interests are not overridden by your rights
Consent — for newsletter subscriptions and direct marketing communications (you may withdraw consent at any time)
Contract Performance — to fulfil sample requests and respond to business enquiries
Legal Obligation — to comply with applicable laws and regulations
3.2 Purposes
Business Communication: Responding to enquiries and providing information about our products
Marketing: Sending newsletters, industry insights, and promotional materials (with consent)
Product Development: Understanding market needs and improving our offerings
Sample Provision: Processing and fulfilling sample requests
Website Improvement: Analysing usage to enhance user experience
Legal Compliance: Meeting regulatory and legal requirements
Marketing Communications
4.1 Our Marketing Activities
Newsletter: Industry insights, company updates, and product information (Bean Briefing)
Direct Marketing: Information about our products and services
Event Invitations: Webinars, trade shows, and industry events
Content Sharing: Blog posts, whitepapers, and educational content
4.2 Analytics & Advertising Tools
We use the following tools to understand website performance and reach relevant audiences:
Google Analytics 4 — helps us understand how visitors use our website. Data is retained for 26 months. You can opt out here
LinkedIn — we may share information about interactions with our content on LinkedIn for audience insight purposes
Under the Data (Use and Access) Act 2025, certain statistical cookies may operate without prior consent where a clear opt-out is provided. Where we rely on this, an opt-out is always available via our cookie banner.
4.3 Opt-Out Options
4.4 Your Rights Regarding Marketing
You may unsubscribe from marketing emails at any time using the link in any email
You may update your communication preferences by contacting hello@nukoko.co.uk
You may withdraw consent for marketing communications at any time without affecting the lawfulness of prior processing
4.5 Compliance
All marketing complies with UK GDPR, PECR, and UK advertising regulations
We maintain suppression lists for those who opt out
All marketing emails include a clear unsubscribe option
Data Sharing and Disclosure
5.1 When We Share Data
Service Providers: Third-party suppliers who help us operate our business (email platforms, analytics, hosting). All are bound by Data Processing Agreements under UK GDPR Article 28.
Business Partners: When necessary for joint business activities and only with your consent
Legal Requirements: When required by law, regulation, court order, or legal process
Business Transfers: In the event of a merger, acquisition, or sale of business assets
5.2 Key Third-Party Processors
| Processor | Purpose | Location & Safeguard |
| Mailchimp (Intuit Inc.) | Email newsletter delivery | USA — Standard Contractual Clauses |
| Google Analytics 4 | Website performance analytics | EU/USA — Google DPA & SCCs |
| Google Workspace | Email & document storage | EU/USA — Google DPA & SCCs |
| Website hosting provider | Hosting nukoko.co.uk | UK/EU — DPA in place |
5.3 International Transfers
Where data is transferred outside the UK, we ensure appropriate safeguards are in place, including adequacy decisions or Standard Contractual Clauses (SCCs), in accordance with UK GDPR and the Data (Use and Access) Act 2025.
Data Security and Retention
6.1 Security Measures
Technical Safeguards: Encryption, secure servers, and access controls
Organisational Measures: Limited data access and data protection awareness
Regular Monitoring: Security assessments and software updates
6.2 Retention Periods
Newsletter subscriber data: retained until unsubscribe, then deleted within 30 days
Website enquiry data: retained for 12 months from receipt, then deleted
B2B contact and prospect data: retained for 12 months from last contact, then reviewed
Employee and contractor data: retained for 6 years post-engagement (HMRC requirement)
Website analytics data: 26 months (Google Analytics 4 default)
Your Rights Under UK GDPR
As a UK or EEA resident, you have the following rights over your personal data:
Right of Access: Request a copy of the personal data we hold about you
Right to Rectification: Ask us to correct inaccurate or incomplete data
Right to Erasure: Request deletion of your data, subject to legal obligations
Right to Restriction: Ask us to limit how we process your data
Right to Data Portability: Receive your data in a structured, machine-readable format
Right to Object: Object to processing based on legitimate interests or direct marketing
Right to Withdraw Consent: Withdraw consent for consent-based processing at any time
To exercise any of these rights, contact us at hello@nukoko.co.uk. We will respond within one calendar month in accordance with UK GDPR Article 12.
Cookies and Tracking
8.1 What Are Cookies
A cookie is a small file downloaded to your device when you visit our website. We use cookies to improve your experience and understand how our site is used.
8.2 Types of Cookies We Use
Essential Cookies: Required for the website to function. No consent needed.
Analytics Cookies: Help us understand visitor behaviour (e.g. Google Analytics 4). Under the Data (Use and Access) Act 2025, statistical cookies may operate without prior consent where an opt-out is clearly provided.
Marketing Cookies: Used to deliver relevant content and measure campaign effectiveness. Require consent.
Preference Cookies: Remember your settings and preferences.
8.3 Cookie Management
You can manage or disable cookies via your browser settings or our cookie banner. Disabling certain cookies may affect website functionality.
8.4 DUAA 2025 Update
From 5 February 2026, certain low-risk statistical cookies may be placed without prior opt-in consent under the Data (Use and Access) Act 2025, provided a clear opt-out mechanism is available. We will always offer a straightforward way to opt out via our cookie banner.
Third-Party Services and Links
9.1 Services We Use
Email Marketing: Mailchimp (Intuit Inc.) for newsletters and campaigns
Analytics: Google Analytics 4 for website performance
Social Media: LinkedIn for business communications and audience insight
9.2 External Links
Our website may contain links to third-party websites. We are not responsible for the privacy practices of those sites and encourage you to review their policies independently.
Complaints
If you are unhappy with how we handle your personal data:
Contact us first: hello@nukoko.co.uk — we will acknowledge your complaint within 5 working days
UK Supervisory Authority: Information Commissioner’s Office (ICO) — ico.org.uk / 0303 123 1113
From 19 June 2026, under the Data (Use and Access) Act 2025, individuals will have a statutory right to submit data protection complaints directly to us. We are committed to having a clear and accessible complaints process in place ahead of this deadline.