Privacy Policy
Last updated: 30 April 2026
Who we are
Nashira is a trading name of Wrought Web ("we", "us", or "our"). We operate the website nashira.co.uk and the Nashira booking platform. We are committed to protecting your personal data and your privacy.
Contact email: hello@wroughtweb.com
What data we collect
We may collect the following personal data when you use our website:
- Early access enquiries: your name, practice name, email address, and the message you send us via the contact form.
- Cookies: see our Cookie Policy for details. This site currently uses only strictly necessary cookies — no analytics or tracking cookies are set.
Nashira platform (practitioner accounts)
If you sign up for a Nashira account, we additionally process:
- Your name, email address, and business details provided during registration.
- Patient data entered into the platform by you or your team. This data is processed on your behalf — you remain the data controller; Nashira acts as a data processor. A Data Processing Agreement is available on request.
- Payment information processed by Stripe (we do not store card details).
How we use your data
- To respond to early access enquiries submitted via our contact form.
- To set up and manage your Nashira account if you register.
- To send service-related emails (account notifications, booking confirmations) — these are not marketing and cannot be opted out of while using the service.
Legal basis for processing
- Legitimate interests — responding to enquiries you have initiated; providing and improving the Nashira service.
- Contract performance — managing your account and delivering the service you have signed up for.
Who we share your data with
We do not sell your personal data. We may share it with:
- Formspree Inc. — contact form processor. They receive form submission data to deliver it to us. See Formspree's privacy policy.
- Stripe Inc. — payment processing for Nashira subscriptions. See Stripe's privacy policy.
- Amazon Web Services Inc. — hosting infrastructure. Patient and account data is stored in AWS eu-west-2 (London) region.
International data transfers
Some of our third-party processors (Formspree Inc., Google LLC, Stripe Inc.) are based in the United States. Where your data is transferred outside the UK, it is protected by appropriate safeguards including the UK International Data Transfer Agreement (UK IDTA) and/or Standard Contractual Clauses (SCCs) approved by the ICO. You can request more information about these safeguards by contacting us at hello@wroughtweb.com.
How long we keep your data
Contact form enquiries are retained for 12 months and then deleted. Analytics data is retained in Google Analytics for 14 months. Nashira account data is retained for the duration of your subscription, plus 90 days following cancellation, after which it is permanently deleted. You may request earlier deletion at any time.
Children's data
This website is not directed at children under 16 years of age, and we do not knowingly collect personal data from children. If you believe a child has provided us with personal data, please contact us at hello@wroughtweb.com and we will delete it promptly.
Your rights
Under UK GDPR you have the right to:
- Access the personal data we hold about you.
- Request correction of inaccurate data.
- Request erasure of your data.
- Object to or restrict processing.
- Data portability.
- Withdraw consent at any time (where processing is based on consent).
To exercise any of these rights, email us at hello@wroughtweb.com. We will respond within 30 days.
You also have the right to lodge a complaint with the Information Commissioner's Office (ICO).
Cookies
For detailed information about the cookies we use, please see our Cookie Policy.
Changes to this policy
We may update this policy from time to time. The "Last updated" date at the top of this page reflects the most recent revision. Continued use of the site after changes constitutes acceptance of the updated policy.