Privacy Policy

We are a consultancy, not an ad platform. We collect the minimum information needed to answer your enquiry and do the work, and this page explains exactly what that means: what we collect, why, who processes it, and the rights you have over it.

Last updated·

Contents

Who we areThe information we collectHow we use your informationWho we share it withInternational transfersHow long we keep itHow we protect itYour rightsCookiesThird-party websitesChanges to this policy

Who we are

Naughton & Bird Limited is a specialist e-commerce consultancy and Shopify Plus Partner working with international Shopify brands across the UK, Hong Kong, and Dubai. Our registered office is at 2904-05, 29/F, Universal Trade Centre, 3 Arbuthnot Road, Central, Hong Kong.

For the purposes of data protection law, Naughton & Bird Limited is the controller of the personal information described in this policy. If you have any questions about it, or about how we handle your information, contact us at hello@naughtonandbird.com.

The information we collect

We collect information you give us directly. When you use the contact form on this site, that means your name, email address, your brand or website, the services you are interested in, and your message. When you request a free Readiness Review or Klaviyo audit, it includes your store address and the contact details you provide. When you email us, subscribe to the newsletter, or book a call, it includes your correspondence and the details you enter.

We also receive a small amount of technical information automatically. Like almost every website, our hosting provider records server logs, which include your IP address, browser type, and the pages you request. We use these only to keep the site running and secure.

We load no analytics scripts, advertising trackers, or social media pixels unless you accept cookies. Decline, and we collect nothing about you while you browse beyond the standard server logs described above. The Cookies section below explains the choice in full.

How we use your information

We use the information you give us to respond to your enquiry, to prepare and deliver the review or consultancy work you have asked about, to schedule and hold calls, and to manage the commercial side of an engagement: proposals, contracts, and invoicing.

Each of these uses has a lawful basis. Responding to an enquiry and preparing a proposal are steps taken at your request before entering a contract. Delivering an engagement is performance of that contract. Keeping financial records is a legal obligation. Maintaining the security of the site is a legitimate interest.

We will only send you marketing if you have asked to hear from us, and you can withdraw that consent at any time by replying to any message or emailing hello@naughtonandbird.com. We do not add people to mailing lists because they made an enquiry: the only mailing list we run is the newsletter in the site footer, which you join by subscribing and leave with the unsubscribe link in any email.

Who we share it with

We do not sell personal information, and we do not share it with third parties for their own marketing.

We use a small number of service providers to run the site and the business. Contact form, Readiness Review, and Klaviyo audit submissions are delivered to us by Resend, our email delivery provider. The footer newsletter runs on Klaviyo, which stores the email address you subscribe with. Call bookings are handled by Calendly, which collects the details you enter when you schedule. The site is hosted on Vercel, which processes the server logs described above. Our forms are protected by Cloudflare Turnstile, which processes your IP address to tell people from bots, and the site’s typefaces are served by Adobe Fonts, which receives your IP address when a page loads. If you accept cookies, Google and Meta also process usage data, as the Cookies section describes.

Each of these providers acts under its own contractual and security obligations, and we share only what is needed for them to provide their service. Beyond that, we disclose personal information only where the law requires it, or to professional advisers under a duty of confidentiality.

International transfers

We operate from Hong Kong and work with clients in the UK, Hong Kong, and the United Arab Emirates, so your information may be processed outside the country you live in. The service providers named above may also process data in other jurisdictions, including the United States and the European Union.

Where a transfer is subject to data protection law, such as UK GDPR, we rely on the safeguards those laws provide, including contractual protections with the providers that process data on our behalf.

How long we keep it

We keep personal information no longer than we need it. If your enquiry does not become an engagement, we periodically review and delete old correspondence. If you become a client, we keep the records of the engagement for as long as the relationship lasts and for the period afterwards that tax and company law require us to retain financial records.

You can ask us to delete your information at any time. Unless we are legally required to keep it, we will.

How we protect it

The site is served over HTTPS, so anything you submit is encrypted in transit. Personal information is held within the systems of the established providers named in this policy, and access is limited to the people who need it to respond to you or deliver the work.

No system is perfectly secure, but we choose providers with strong security practices and we keep the amount of personal information we hold deliberately small.

Your rights

You have rights over your personal information. You can ask for a copy of what we hold about you, ask us to correct it, ask us to delete it, object to or restrict how we use it, ask for it in a portable format, and withdraw any consent you have given.

To exercise any of these rights, email hello@naughtonandbird.com. We will respond within one month. We may need to verify your identity before acting on a request; that step exists to protect your information.

If you are unhappy with how we have handled your information, you can complain to a supervisory authority. In the UK that is the Information Commissioner’s Office (ico.org.uk). In Hong Kong it is the Office of the Privacy Commissioner for Personal Data (pcpd.org.hk). We would ask you to raise the issue with us first, so we have the chance to put it right.

Cookies

This site sets no advertising or analytics cookies unless you choose to accept them. The banner on your first visit offers exactly that choice. Accept allows Google’s analytics tag and the Meta Pixel to load, so we can understand how the site is used and measure our marketing. Deny loads nothing, and browsing continues with no tracking of any kind.

Your choice is stored on your device, holds no personal information, and can be changed at any time using the Cookie Preferences link in the footer. Google and Meta process the data their tags collect under their own privacy policies, as our processors for measuring this site’s audience and marketing.

Third-party websites

This site links to third-party websites, including Calendly for bookings and LinkedIn for our company and personal profiles. Those sites have their own privacy policies, and we are not responsible for how they handle your information. We recommend reading their policies before submitting personal information to them.

Changes to this policy

We review this policy when our practices change and update it here, with a revised date at the top of the page. If a change is significant and we hold your contact details, we will tell you directly.

Questions, requests, or anything unclear: email hello@naughtonandbird.com, or write to Naughton & Bird Limited, 2904-05, 29/F, Universal Trade Centre, 3 Arbuthnot Road, Central, Hong Kong.