privacy policy

who we are

nura (“nura”, “we”, “our”) is a UK-based AI consultancy. Our website is nura.solutions. The data controller for the personal data described here is Nura Consulting Ltd, company number 17168540, registered office 72 Stafford Road, Sheffield S2 2SF.

Our data-protection contact is Robert Andrew Downham. For any privacy question, or to exercise your rights, contact us at hello@nura.solutions.

what data we collect

We collect information you give us directly when you:

• Complete the AI Readiness quiz (name, email, company, quiz responses)
• Use the AI savings calculator and request a breakdown (name, email)
• Sign the AI Pledge (name, email, company, role)
• Book an intro call (name, email, company, any notes you share)
• Submit the contact form (name, email, company, subject, message)
• Chat with our AI assistant (conversation content; name and email if you provide them)

We also collect information about how the site is used. Some of it is always on: anonymous traffic figures, and a record of your visits against a random id in our own system, which we link to you if you fill in a form. The rest — Google Analytics and advertising — only runs if you agree. The “cookies and tracking” section below sets out exactly what, and how you choose or object.

cookies and tracking

Most websites track you the moment you arrive, and never say how. We tell you exactly what we do, and what we do not. Here is the whole picture.

Anonymous traffic figures, always on. We use Plausible Analytics for basic traffic figures — how many people visit, which pages they read, roughly where in the world they are. Plausible sets no cookies, does not collect personal data, and does not follow you across other sites. It is EU-hosted and runs whether or not you accept anything below. We use it because we want to know if the site is working, not who you are.

First-party measurement, always on. We also record your visits against a random id, and link them to you if you fill in a form. The first time you visit, we set a first-party cookie called nura_visitor_id. It holds a random id. It carries no name, no email and nothing about your device. It lasts one year and is renewed each time you visit. Your browser sends it to every nura site on nura.solutions (for example workshops.nura.solutions), and nowhere else.

Against that id, whatever you choose in the cookie banner, we record:

• the pages you view
• when you start the AI Readiness Snapshot
• how you arrived: campaign tags in the link you followed (UTM tags, and ad click ids such as Google’s gclid), the first page you landed on, and the site that referred you

Your browser also keeps how you arrived, so that a form you fill in later can tell us where you came from. It sits in your browser’s local storage under names starting nura_attribution_. If local storage is not available, we use session cookies with the same names instead, and those end when you close your browser. What is in local storage stays until you clear your browser data or stop recording (below).

The visit record is held in nuraOS, nura’s own system, on Google Cloud in London. It is not sent to Google Analytics or any advertising platform unless you opt in to those.

If you send the AI Readiness Snapshot, the savings calculator, the contact form or a workshop checkout, we link the id to the details you give us, so we can see which pages brought you to us. The arrival details sent with the Snapshot, the calculator or the contact form are kept with that submission. They follow the retention for information you give us, not the 24-month limit for visit records.

Our lawful basis for this is legitimate interest: we need to know which pages and campaigns bring people to nura, and we measure it in our own system rather than hand it to a third party. You can object at any time, in two ways.

You can also block or clear the cookie in your browser. The site works the same without it; we just cannot connect one visit to the next.

With your consent, we use two further categories of cookie. When you first visit, we ask. You can accept all, reject all, or choose by category. You can change your mind at any time (see “changing your mind” below). Nothing in the two categories below runs until you opt in. The three categories are:

• Necessary — always on. These make the site work: keeping pages secure, and remembering your cookie choice so we do not ask again on every page. They set no tracking and need no consent. Remembering that you said “no” is itself a strictly-necessary cookie — saying no does not mean we forget your answer. The same goes for nura_measure_optout, which remembers that you asked us to stop recording your visits (one year, renewed while it is set). The nura_visitor_id cookie is not in this group; it is covered under first-party measurement above.
• Analytics — opt-in. With your consent, we use Google Analytics 4 (GA4) to understand how people move through the site in more detail than Plausible gives us: which journeys lead to a quiz or a call, where people get stuck. This uses cookies and collects data about your device and behaviour. If you opt in, Google Analytics also receives your nura visitor id, so its reports can connect your visits.
• Advertising — opt-in. With your consent, we use advertising cookies from Meta, Google and LinkedIn. These let us show nura to people who have visited the site before, on those platforms — and stop showing it once it is no longer relevant.

What we share with advertising platforms, and what we do not. When you opt in to advertising, we build audiences so we can re-reach people who have shown interest. We do not hand these platforms your email address or any detail in readable form. What is shared is a hashed identifier — a scrambled, one-way version of an identifier such as your email — which the platform uses only to match you to an existing account, if you have one. We never share your name, your quiz answers, your calculator inputs, or anything you typed into a form.

Meta, Google and LinkedIn process this advertising data in the US. That transfer is governed by each platform’s data-processing terms and the UK’s approved transfer mechanisms (the UK Addendum to the EU Standard Contractual Clauses and, where it applies, the UK extension to the EU–US Data Privacy Framework). If you do not opt in to advertising, none of this happens.

Who we retarget — and who we never do. Retargeting is for prospects only — people who have visited the site but are not yet working with us. If you are a nura member or a client with a nura login, you are suppressed: we do not build advertising audiences from your visits, and your authenticated account areas are never tracked (see “your account area is off-limits”). We do not target anyone on the basis of any special-category characteristic (such as health, beliefs, ethnicity, or sexuality). We frequency-cap: you will not be followed around the internet by the same nura ad indefinitely.

Lawful basis. For the two opt-in categories, our lawful basis is your consent, under UK PECR and UK GDPR. For first-party measurement (the nura_visitor_id cookie and the visit record in nuraOS), our lawful basis is legitimate interest, and you can object as set out above. For the strictly-necessary cookies, no consent is required because the site cannot function without them.

changing your mind

Consent is not a trap. You can withdraw it in one click, at any time, from the “privacy choices” link in the footer of every page. Turning a category off is exactly as easy as turning it on. When you withdraw analytics or advertising consent, we stop setting those cookies, and we ask the relevant platforms to stop building audiences that include you. First-party measurement is not a consent choice, so it is not in the footer panel. To object to it, use the stop recording button above on each browser or device. To have what we already hold deleted, email us.

how we use your data

We use the personal data you give us to:

• Give you your personalised results and reports
• Respond to your enquiries
• Follow up on your interest in our services, where you have asked us to or where we have a legitimate interest in doing so
• Improve our tools and services

We use our first-party visit record to see which pages and campaigns bring people to nura. We use the analytics and advertising data described above — only where you have consented — to understand how the site performs and to reach people who may find nura useful.

We do not sell your personal data. We do not share it with third parties for their own marketing.

your account area is off-limits

If you have a nura login — as a member or a client — the pages behind that login are never tracked by analytics or advertising cookies. That area is for doing your work with us, not for measuring or marketing. The tracking on this page applies to the public marketing site only.

how long we keep it

• Information you give us (quiz answers, calculator inputs, contact details, pledge, call notes, chat content, and the arrival details sent with a form): kept for as long as we need it to provide our services and to meet legal obligations, then deleted.
• Visit records and advertising data: these are to be deleted 24 months after your last visit. Automatic deletion is being switched on; until then we delete on request. For the first-party visit record in nuraOS, that means the id, the pages and steps recorded against it, and how you arrived.
• Google Analytics: Google applies its own retention (currently 14 months), after which it deletes the data regardless.
• Consent records: we keep a record of what you chose and when, for as long as needed to prove we asked and you agreed. This is a legal requirement and is kept even if you later withdraw consent.

where your data is stored

Information you give us, and our first-party visit records, are held in nuraOS, nura’s own system. nuraOS runs on Google Cloud in London and is encrypted at rest.

Some of the services we use to run the site handle your data on the way, and some are outside the UK. These are all of them:

• Google Cloud — hosts nuraOS, in London.
• Vercel — hosts this website. Your page requests and form contents pass through it on the way to nuraOS. We have not yet confirmed which region Vercel runs our server functions in.
• Resend — sends our emails, such as your report and our replies. Your name, email address and the email content pass through it. It is based in the US.
• Stripe — takes workshop payments. Your card details go straight to Stripe, never to us. Stripe processes data in the US and elsewhere.
• Cloudflare Turnstile — the bot check on our forms, when it is switched on. It sees your IP address and signals from your browser, so it can tell people from bots.
• Google (Gemini API) — drafts your Snapshot report. It receives your Snapshot scores and business profile, not your name or email. Google may process them outside the UK.
• Google Fonts — serves the typefaces on this site. Your browser fetches them from Google on every visit, before any cookie choice, so Google sees your IP address. Google may process it outside the UK.
• Plausible — anonymous traffic figures, hosted in the EU.
• Google Analytics, Meta, Google Ads and LinkedIn — only if you opt in, as described above. They process data in the US.

Where data leaves the UK, the transfer relies on the provider’s data-processing terms and the UK’s approved safeguards: the UK Addendum to the EU Standard Contractual Clauses, or the UK extension to the EU–US Data Privacy Framework where it applies. We are happy to set out the safeguard for each provider in writing on request.

your rights

Under UK GDPR, you have the right to:

• Access the personal data we hold about you
• Request correction of inaccurate data
• Request deletion of your data
• Object to how we process your data, including our first-party measurement
• Withdraw consent for analytics and advertising at any time
• Ask for your data in a portable form

To exercise any of these, email hello@nura.solutions. We aim to respond and complete your request within 30 days.

You also have the right to complain to the Information Commissioner’s Office (ICO) at ico.org.uk. We would always rather you raised it with us first, but the route is yours to take.

changes to this policy

If we change how we collect or use data, we update this page and the “Last updated” date. Where a change materially affects the choices you have made, we ask again rather than assume your old answer still holds.

contact

For any privacy-related query, contact us at hello@nura.solutions. A real person reads it.