Privacy policy
Clear, practical, GDPR-minded privacy information.
This page explains what data this site collects, why it is used, where it goes, and what rights you have. Each section starts with a short summary and opens for the fuller wording.
Who controls your dataNautilus DC is responsible for the personal data collected through this website.
Nautilus DC acts as the data controller for personal data submitted through the website contact form and related business communications. This means Nautilus DC decides why the data is collected and how it is used for business enquiries, service discussions, client administration, and follow-up communication.
What data is collectedThe site only asks for details needed to understand and respond to your enquiry.
When you use the contact form, Nautilus DC may collect your name, email address, company name, enquiry type, message, and basic technical information associated with the submission. If you consent to analytics, Google Analytics may process page views, referral source, approximate location, device and browser information, and interaction data. Consent choices are also logged with site key, domain, policy version, preference categories, timestamp, country code where available, and hashed technical identifiers.
Why it is collectedYour information is used to reply, assess the enquiry, and manage business follow-up.
Personal data is used to respond to enquiries, assess service fit, manage CRM records, prepare follow-up communication, administer client or supplier relationships, and maintain appropriate business records.
Legal basis under GDPRThe main bases are legitimate interest, pre-contract steps, consent where relevant, and legal obligations.
Nautilus DC may process enquiry data because it has a legitimate interest in responding to business enquiries, because processing is necessary before entering into a contract, because you have provided consent where consent is required, or because records are needed for legal, accounting, or compliance purposes. Google Analytics is used only with consent. Consent logs are kept to demonstrate and manage privacy choices.
Where your data goesWebsite enquiries may be sent to Odoo so they can be handled as CRM leads.
The contact form is designed to create a lead in Odoo CRM when the site is deployed with the required secure server-side configuration. Consent choices are stored in a Cloudflare D1 database that is accessible only through server-side Cloudflare Pages Functions and administration tools, not through public website pages. Cloudflare Pages may process technical request data as the hosting provider. If analytics consent is granted, Google Analytics may process analytics data according to Google's own terms and privacy controls.
How long data is keptEnquiry data is kept only for as long as it is reasonably useful or legally required.
Nautilus DC keeps enquiry and CRM data for as long as needed for business follow-up, client administration, legal obligations, accounting records, dispute handling, or legitimate operational purposes. Consent records should normally be retained only for as long as needed to demonstrate and manage consent, currently intended as up to 13 months unless a longer period is required for legal or compliance reasons.
Your GDPR rightsYou can ask to access, correct, delete, restrict, transfer, or object to certain processing.
Subject to applicable law, you may have the right to request access to your personal data, correction of inaccurate data, deletion, restriction of processing, objection to processing, portability, and withdrawal of consent where processing is based on consent. You may also have the right to lodge a complaint with an appropriate supervisory authority.
Cookies and analyticsEssential storage is always on; Google Analytics is optional and off until accepted.
The website uses essential local storage to remember your privacy preferences. Google Analytics is optional and is not loaded unless you accept analytics. You can decline analytics, save individual choices, accept all, or reopen Privacy preferences later to change or withdraw consent. Where practical, analytics cookies are removed after analytics consent is declined or withdrawn.
International transfers and securityService providers may process data in different locations, with practical safeguards expected.
Hosting, CRM, email, analytics, and professional service providers may process data in different countries. Nautilus DC expects reasonable technical, organisational, and contractual safeguards to be used where personal data is processed by service providers.
Contact about privacyFor GDPR or data protection matters, contact the DPO address directly.
Privacy and GDPR enquiries can be sent to dpo@nautilus-dc.com. General business enquiries should use the secure contact form.