Website and Enquiries Privacy Notice

How personal data is processed when you visit nodu.fi or contact us through the enquiry form or by email.

Nodu Group Limited · Last updated 30.09.2026

This notice explains how personal data is processed when you visit nodu.fi or contact us through the enquiry form or by email. It does not cover services provided to clients. Clients receive a separate privacy notice from the Nodu group company that provides services to them.

1. Who is responsible for your personal data

Nodu Group Limited is the controller of personal data processed through this website and in handling enquiries. Nodu Group Limited is a private limited company registered in England and Wales under company number 16646447, with its registered office at 20 Wenlock Road, London, N1 7GU, United Kingdom (“Nodu”, “we”, “us” or “our”).

You can contact us about this notice or your personal data at legal@nodu.fi, or by post to the address above, marked “Data protection”.

If your enquiry is referred to Nodu Digital SIA or Nodu Canada, Inc., as described in section 5, that company becomes a separate controller for its own processing of your enquiry.

2. Personal data we process

  • Enquiry data: the information you provide in the enquiry form or in an email, such as your name, business contact details, job title, company name and website, the countries where your company is established or operates, the services you are interested in and the content of your message.

  • Correspondence: our communications with you about your enquiry.

  • Technical data: your IP address, browser and device information, the pages requested, and the date and time of access, which our hosting and content delivery providers record to deliver and protect the website.

  • Analytics data: information about how you use the website, collected through analytics cookies only if you consent. See our Cookie Policy.

Please do not send identity documents, account details or information about other individuals, such as your company’s beneficial owners, with an enquiry. If your enquiry proceeds, the relevant Nodu group company will request any information it needs through its onboarding process.

Providing enquiry data is voluntary. Without your name and contact details, we cannot respond to your enquiry.

Purpose Legal basis under the UK GDPR and, where applicable, the EU GDPR
Responding to your enquiry and assessing whether, and through which Nodu group company, the services you are interested in can be provided Our legitimate interest in responding to business enquiries and developing business relationships (Article 6(1)(f)). Where you enquire about services for yourself, taking steps at your request before entering into a contract (Article 6(1)(b))
Referring your enquiry to the Nodu group company that may provide the services you are interested in (Nodu Digital SIA or Nodu Canada, Inc.) Our legitimate interest in directing enquiries to the group company able to deal with them (Article 6(1)(f))
Keeping a record of our communications Our legitimate interest in documenting our business communications (Article 6(1)(f))
Operating and securing the website, and preventing and investigating misuse Our legitimate interest in providing a secure and functioning website (Article 6(1)(f))
Measuring website use with analytics cookies Your consent (Article 6(1)(a))
Complying with legal obligations and requests from competent authorities Compliance with a legal obligation (Article 6(1)(c))
Establishing, exercising or defending legal claims Our legitimate interest in protecting our legal rights (Article 6(1)(f))

We do not make decisions about you based solely on automated processing that produce legal effects concerning you or similarly significantly affect you.

4. Who receives your personal data

We share personal data only where needed for the purposes described above, with:

  • Nodu Digital SIA or Nodu Canada, Inc., where your enquiry is referred to that company (section 5);

  • other Nodu group companies that provide technical, administrative or management support to us;

  • service providers that process personal data on our behalf and under our instructions, including providers of website hosting and content delivery, our customer relationship management system (Pipedrive, which also provides the enquiry form), email and IT services, and, if you consent, website analytics (Google);

  • professional advisers and auditors, under duties of confidentiality;

  • courts, supervisory authorities and other public bodies, where we are required by law to disclose it.

5. Referral within the Nodu group and international transfers

Depending on the services you are interested in and where your company is established or operates, we may share your enquiry with Nodu Digital SIA, a company registered in Latvia, or with Nodu Canada, Inc., a corporation incorporated in Ontario, Canada. The United Kingdom recognises the European Economic Area (EEA), and Canada for recipients subject to the Personal Information Protection and Electronic Documents Act (PIPEDA), as providing an adequate level of protection for personal data.

Some of our service providers may process personal data in other countries. Where personal data is transferred outside the United Kingdom, the transfer is based on UK adequacy regulations, including the UK Extension to the EU-US Data Privacy Framework for certified recipients in the United States, or on the International Data Transfer Agreement or the UK Addendum to the European Commission’s standard contractual clauses. Where the EU GDPR applies, transfers rely on the corresponding adequacy decisions of the European Commission or on its standard contractual clauses. You can request information about these safeguards using the contact details in section 1.

6. How long we keep your personal data

  • Enquiries that do not lead to a client relationship: for as long as needed to respond to and follow up on your enquiry, and afterwards only as long as reasonably necessary to keep a record of our communications. The data is then deleted or anonymised.

  • Enquiries that lead to onboarding: the data becomes part of the client file of the Nodu group company concerned and is kept in accordance with that company’s client privacy notice and its record-keeping obligations.

  • Technical data: for the limited period needed to operate and secure the website.

  • Analytics cookies: as set out in our Cookie Policy.

We may keep personal data for longer where required by law or where needed to establish, exercise or defend legal claims.

7. Your rights

Under the UK GDPR and, where it applies, the EU GDPR, you have the right to:

  • access your personal data and receive a copy of it;

  • have inaccurate or incomplete personal data corrected;

  • have your personal data erased, where the legal conditions are met;

  • restrict the processing of your personal data, where the legal conditions are met;

  • receive the personal data you provided to us in a structured, commonly used and machine-readable format and have it transmitted to another controller, where the processing is based on consent or contract and carried out by automated means;

  • withdraw your consent at any time, without affecting the lawfulness of processing carried out before withdrawal. You can withdraw consent to analytics cookies through “Cookie settings” at the bottom of every page of the website.

Right to object: you may object at any time, on grounds relating to your particular situation, to processing based on our legitimate interests.

To exercise your rights, contact us using the details in section 1. We may need to verify your identity. We respond within one month of receiving your request. Where necessary, this period may be extended by two further months, in which case we will inform you.

If you have a concern about how we handle your personal data, you can raise it with us using the details in section 1. You also have the right to lodge a complaint with the Information Commissioner’s Office (ICO), the UK supervisory authority, at www.ico.org.uk. If you are in the EEA, you may also complain to the supervisory authority in the EEA country where you live or work or where the alleged infringement took place.

8. Individuals in Canada

If you are in Canada, we collect, use and disclose your personal data with your consent, which is implied when you submit an enquiry, for the purposes described in this notice, or as otherwise permitted or required by law. Your personal data is stored and processed outside Canada, including in the United Kingdom and the European Union, and may be accessible to courts and authorities there under local law.

Where your enquiry is referred to Nodu Canada, Inc., it handles your personal information in accordance with PIPEDA and applicable provincial privacy laws. You may contact the Nodu Canada Privacy Officer at canada@nodu.fi to request access to or correction of your personal information, to withdraw your consent subject to legal or contractual restrictions, or to ask questions. You may also complain to the Office of the Privacy Commissioner of Canada or, where applicable, to the privacy regulator of your province, including the Commission d’accès à l’information du Québec.

9. Security

We use technical and organisational measures appropriate to the risk to protect personal data against unauthorised access, loss and misuse. No transmission over the internet is completely secure, so please do not send confidential or sensitive information through the enquiry form or by email.

10. Changes to this notice

We may update this notice from time to time. The current version is always available on this page, with the date of the last update shown at the top.