Privacy notice

Who we are

Nikulsons & Co. (“we”, “us”) runs this website and is the controller of the personal data described in this notice: we decide how it is used. For any question about this notice, or to use your rights, you can reach us through the contact form on this site.

What the contact form collects

When you send the contact form, we receive:

• your name, email address and message, and your company name if you add it
• the page of the site you sent it from and the site’s language

The form also has a hidden field that people don’t see, and it notes how long the form took to fill in. Both only help us spot automated spam: they are checked when you send the form, a message that fails them is dropped, and neither is kept or passed on.

Your message goes straight to ClickUp, the tool we use to manage our work, where it becomes a task for us to answer. The website itself keeps no copy.

To stop the form being flooded, our server counts the messages sent from each IP address over a ten-minute window. It holds your IP address for this only in its working memory: it is never written to storage or passed to ClickUp, and it is lost when that server instance stops.

Visiting the site

The site is hosted by Vercel. Like any web host, Vercel processes the technical details your browser sends with each request, such as your IP address, the page asked for and your browser type, to deliver the site to you.

A normal visit sets no cookies and stores nothing in your browser. We use no advertising tools. The fonts and images come from this site itself, so your browser does not contact Google or any other font service. The only cookies and browser storage the site uses belong to its content editor, and they are set only when someone opens the editor’s sign-in page, which only our editors use.

To see how the site is used, we count visits with Plausible Analytics. For each page you view, your browser sends Plausible the page’s address and the site that linked you here, and, like any web request, your IP address and browser type. As you leave a page, it also sends how far down you scrolled and how long the page was in view. Plausible uses these to work out your browser, operating system and approximate location, and to tell whether two page views that day came from the same visitor, using a key it deletes every 24 hours. It stores neither your IP address nor the raw browser details, and we only ever see totals, never individual visitors. We also count clicks on links to other sites, with the address of the link, and messages sent through the contact form.

Links to other services

“Book a 30-min call” takes you to Proton Calendar, and “Meet Ignatius” and “Meet Kirils” to LinkedIn. These are separate services with their own privacy policies. If you book a call, Proton shares the details you enter there with us so that we can hold the call.

Why we use your data

• To reply to your enquiry, hold a call you booked and follow up: these are steps you ask for before a possible contract, and we have a legitimate interest in answering business enquiries.
• To run the site and keep it and the form free of spam and abuse: our legitimate interest in a working, secure website.
• To count visits and see which pages work, in aggregated totals: our legitimate interest in improving the site.

We use your details only for these purposes.

Who else handles it

Vercel (hosting) and ClickUp (where enquiries are kept) process data for us; both are based in the United States. Proton (call bookings) is based in Switzerland, and Plausible Analytics (visit counts) is based in the EU and keeps its data there. Where your data leaves the UK or the European Economic Area, the transfer relies on the safeguards in each provider’s data processing terms, such as the Standard Contractual Clauses.

How long we keep it

We keep enquiries and call bookings for as long as we need to reply and follow up, and no longer than 24 months after our last contact with you, unless we start working together, in which case they become part of our client records. The rate-limit count lives only in server memory, as described above. Plausible keeps aggregated visit statistics, not profiles of individual visitors.

Your rights

You have the right to ask for access to your personal data, to have it corrected or erased, to restrict or object to how we use it, and to receive it in a portable format. Where we rely on your consent, you can withdraw it at any time. To use any of these rights, contact us through the contact form. You also have the right to complain to a data protection supervisory authority, for example the one where you live or work.

Changes to this notice

We will update this notice when the site or the way we handle personal data changes, and change the date below.

Last updated: 7 October 2026