Privacy notice
What we collect when you write to us, register a camera or apply to resell, why we collect it, how long we keep it, and what you can ask us to do with it.
This privacy notice explains what personal data Nakavision Ltd collects when you use this website, why, how long we keep it and what your rights are. It applies to every visitor to nakavision.com, and to anyone who uses its forms. It does not cover a purchase from the Nakavision Factory Store or Amazon, which have their own privacy notices, or the iCSee app, which is explained below.
Who is responsible for your data
Nakavision Ltd (“Nakavision”, “we”) is the controller of the personal data described here. We are registered in England and Wales at Unit 9a Wick Road Business Park, Wick Road, Burnham-On-Crouch, CM0 8FA, United Kingdom; our company number is on the imprint page. The UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018 apply — and, if you are in the European Union, the EU GDPR as well. For anything about your data, write to support@nakavision.com, our only inbox.
What we collect and why
This website sets no cookie and stores nothing about you until you do one of the things below.
When you write to us
The contact form asks for your name, email address, a topic, an optional order reference and your message. We use them to answer you and to deal with an order or warranty question. Our legal basis is our legitimate interest in replying to people who write to us (UK GDPR article 6(1)(f)) and, where the message concerns a purchase or the warranty, taking the steps that contract needs (article 6(1)(b)). We send an automatic acknowledgement; it does not repeat what you wrote.
When you register a camera
Registration on the registration page is optional. It asks for your email address and the product you bought, with a tick box for firmware notices and Nakavision news. We first send a verification link; nothing counts as a registration until you open it. We keep what you sent, verified or not, until you delete it or ask us to. A verified registration lets us match a warranty claim to a camera; the legal basis is our legitimate interest in supporting the products we make (article 6(1)(f)). Notices and news go only to people who ticked the box — your consent (article 6(1)(a)) — and every notice carries a link that stops them and a link that deletes the registration; both work at once and never expire. The verification email carries the delete link too.
When you apply to become a reseller
The reseller form asks for your name, email address, company name, tax number, business address and a message, which we use to assess and answer your application. The legal basis is taking steps at your request before entering into a contract (article 6(1)(b)) and, where you write for a company, our legitimate interest in dealing with its representative (article 6(1)(f)).
Technical and security data
To protect the forms from automated abuse we store, with each submission, a one-way hash of your IP address — the address plus a secret value that changes daily, passed through SHA-256 — and your browser’s name and version. The hash lets us count submissions from one address on one day; it cannot be turned back into the address, and it is erased after 30 days. Our web server keeps ordinary access logs — IP address, time, page and browser — for 14 days, for security and error diagnosis. If the site’s content security policy blocks something, your browser may send us a report — the page address, what was blocked, your browser’s name and the same hash — kept for 30 days. The legal basis is our legitimate interest in keeping the site secure and working (article 6(1)(f)).
Analytics and session replay
When analytics is enabled — it is switched off at the time of writing — we would like to use Google Analytics 4 to count visits, and Capturly, which records mouse movement, clicks and scrolling as a session replay. Neither loads until you press Accept on the cookie banner, and declining changes nothing; the legal basis is your consent (article 6(1)(a)). Google Analytics is set to shorten your IP address and store nothing for advertising. Capturly is never loaded on a page with a form, so a replay can never contain anything you type. The cookies page lists what each service sets.
Video
Videos on this site are hosted on YouTube. Nothing is requested from Google or YouTube until you press play; then the video loads from youtube-nocookie.com under YouTube’s own privacy policy.
The iCSee app
The Nakavision C1 works with the iCSee app, made by Hangzhou Jftech Co., Ltd. Nakavision does not operate the app or the cloud service behind it. The account you create in the app, and the video and settings it stores, are processed by the app’s provider under its own privacy policy; we never receive them.
How long we keep it
We keep personal data only as long as the reason for it lasts, then delete it automatically. Counted from the day we received it:
- contact form messages: 12 months;
- reseller applications: 24 months;
- submissions we mark as spam: 30 days;
- the hashed IP address stored with a submission: 30 days, after which it is erased while the submission stays;
- content security policy reports from browsers: 30 days;
- web server access logs: 14 days.
Camera registrations are the exception: we keep them, verified or not, until you delete them or ask us to, so that a warranty or support request can always be matched to a camera. They are not deleted on a schedule.
If you delete your registration with the link in one of our emails, it goes at once. Withdrawing consent to notices keeps the registration for the warranty but stops the emails.
Who we share it with
We do not sell personal data and do not share it with advertisers. Two companies process it for us under contracts that bind them to our instructions. Microsoft hosts the website and its database on Microsoft Azure in the West Europe region (Netherlands), operated by Microsoft Ireland Operations Limited, One Microsoft Place, South County Business Park, Leopardstown, Dublin 18, D18 P521, Ireland; and our emails — acknowledgements, verification links, firmware notices — go out from DoNotReply@nakavision.com through Microsoft Azure Communication Services. If you consent to analytics, Google (Google Analytics 4) and Capturly receive the usage data described above under their own terms; Google may transfer it outside the UK and the EEA under the safeguards its privacy policy describes. We disclose personal data only where the law requires it.
Where your data is stored
The website, its database and its backups are in the European Economic Area. Nakavision is in the United Kingdom, where the people who answer your messages read it. The UK is covered by the European Commission’s adequacy decision and treats the EEA as adequate in the same way, so no further safeguard is needed.
Your rights
Under the UK GDPR you can ask us for a copy of the personal data we hold about you; have it corrected or deleted; restrict our use of it; object to our use of it where we rely on a legitimate interest; and receive the data you gave us in a machine-readable form. Where we rely on your consent you can withdraw it at any time, without affecting what was done before. We make no decisions about you by automated means. To exercise a right, write to support@nakavision.com from the address you used with us; we answer within one month, free of charge.
How to complain
If you think we have handled your data wrongly, please tell us first so we can put it right. You also have the right to complain to the Information Commissioner’s Office, the UK’s supervisory authority: ico.org.uk, Wycliffe House, Water Lane, Wilmslow, Cheshire SK9 5AF, telephone 0303 123 1113. In Hungary the authority is the Nemzeti Adatvédelmi és Információszabadság Hatóság (naih.hu).
Security
The website is served only over an encrypted connection. Submissions are kept in a database only the people who answer them can open, behind a two-factor sign-in, and every change is logged with who made it. The links in our emails are signed so that they cannot be guessed or altered.
Changes to this document
We change this notice when what we collect, or why, changes. The date it was last updated is printed at the top of this page. A change that matters to you is announced here before it takes effect.
Contact
For anything in this notice, write to support@nakavision.com or use the contact form. Post can be sent to the registered office given above.