Privacy Policy

1. Who is responsible

NOSEYBOARD LTD (“Noseyboard”, “we”, “our”, “us”) is a private limited company registered in Scotland under company number SC900910, with its registered office at 4 Weston Place, Prestwick, KA9 2ED, United Kingdom. We decide why and how the personal data described in this policy is processed, which makes us its controller under the UK General Data Protection Regulation (“UK GDPR”) and the Data Protection Act 2018. Where the EU General Data Protection Regulation (EU) 2016/679 applies to people in the European Union, we follow it as well.

For anything in this policy, write to support [at] noseyboard-ltd.com.

2. Where this policy applies

This policy covers:

• our website at noseyboard-ltd.com (the “website”);
• mobile applications that Noseyboard publishes on the Apple App Store (the “apps”);
• emails and other messages you send us.

An app may describe its data handling in more detail — in its own privacy policy, on its App Store page (“App Privacy”) or inside the app. Where an app has its own privacy policy, as Rampart VPN does at rampart-vpn.com/privacy, that policy governs the app, and this one covers everything else.

3. What we collect

3.1 When you visit the website

The website is informational. It sets no cookies and runs no analytics, advertising or tracking code. Like any web server, ours writes a log entry for each request: your IP address, the date and time, the address requested, the referring page and your browser’s user-agent string. We use these logs only to deliver the website, investigate errors and protect it against abuse.

3.2 When you write to us

Your email address, your name and signature if you include them, the content of your message and any attachments, and the technical headers that every email carries.

3.3 When you use our apps

What an app processes depends on its features and is set out in that app’s privacy policy. Across our apps, it can include:

• Device and app details — device type, operating system version and app version.
• Identifiers — a random identifier the app or our service creates for an installation. We do not use Apple’s advertising identifier (IDFA) unless an app asks your permission through Apple’s App Tracking Transparency prompt and you allow it.
• Purchase records — where an app sells subscriptions or other items: what you bought, its status and renewal dates, and transaction identifiers. Apple takes the payment; we never see your card number.
• Diagnostics — technical events, error codes and performance measurements that help us keep a service working and find and fix problems.
• Support details — whatever you choose to send us from inside an app.

We do not ask for sensitive data — such as health, biometric or political information. If a future feature ever needed it, the app would explain why and ask for your explicit consent first.

3.4 Business relationships

If you are, or represent, a partner or supplier, we keep work contact details (name, role, email, phone) together with the correspondence, agreements and invoices needed to run that relationship.

4. Purposes and legal bases

Where we rely on legitimate interests, we have weighed them against your rights and you may object (section 8). Where we rely on consent, you can withdraw it at any time; earlier processing stays lawful. We do not take decisions about you by automated means alone that have legal or similarly significant effects.

5. Who receives data

We do not sell or rent personal data. We disclose it only as far as necessary, to:

• Infrastructure providers — Hetzner Online GmbH (Germany) hosts this website on servers in Finland, and Cloudflare, Inc. provides DNS and content delivery. App back-ends use hosting providers bound by data-processing terms, as named in each app’s privacy policy.
• Apple, which distributes the apps and processes payments as an independent controller under its own privacy policy.
• Professional advisers — accountants, auditors and lawyers — under duties of confidentiality.
• Courts, regulators and law enforcement where the law requires it, or where needed to protect rights and safety.
• A successor business in a merger, acquisition or asset sale, which must keep protecting your data as described here.

Our service providers process personal data only on our documented instructions and under written agreements.

6. International transfers

Some of the providers above process data outside the United Kingdom. Transfers to the European Economic Area rely on the UK’s adequacy regulations for those countries. Transfers to the United States rely on the UK Extension to the EU–U.S. Data Privacy Framework for certified companies, or on the International Data Transfer Agreement or Addendum issued by the Information Commissioner, with supplementary measures where needed. You can ask us for a copy of the relevant safeguards.

7. How long we keep it

8. Your rights

Under data protection law you can ask us to:

• give you access to your personal data and a copy of it;
• correct data that is wrong or complete data that is missing;
• erase your data in the cases the law provides;
• restrict how we process it;
• hand over data you gave us in a structured, machine-readable format, or send it to another controller;
• stop processing based on legitimate interests — and you can object to direct marketing at any time;
• stop processing based on your consent, by withdrawing it.

Email support [at] noseyboard-ltd.com. We may need to confirm your identity first. We answer within one month; complex or numerous requests can extend this by up to two further months, and we will tell you if that happens.

Apple holds its own records of App Store purchases, so some requests — refunds, or the store’s full purchase history — must go to Apple directly.

You also have the right to complain to the Information Commissioner’s Office (ICO), the UK supervisory authority: ico.org.uk, telephone 0303 123 1113. If you live in the European Union, you may complain to the authority in your country. We would welcome the chance to put things right first.

9. Children

The website and our apps are not intended for children under 16, and we do not knowingly collect their personal data. If you believe a child has given us personal data, contact us and we will delete it.

10. Security

We protect personal data with technical and organisational measures that fit the risk: encrypted connections (HTTPS), key-only administrative access to our servers, and access limited to the people who need it. No system is perfectly secure. If a breach affects your data, we will notify you and the ICO where the law requires.

11. Cookies and similar tools

This website sets no cookies. Our content-delivery provider may place a strictly necessary security cookie when it has to tell people apart from automated traffic. Our apps store on your device only what their features need, as described in each app’s privacy policy.

12. Updates to this policy

When we change this policy, we will publish the new version here with a new effective date. Significant changes will also be announced in the affected apps, or by email where we have your address.

13. Contact