# Privacy notice

> Nomma stores only what you send us (messages and bookings) and anonymous daily visit counts. This site sets no cookies and never stores your IP address.

## Who is responsible for your data?

Nomma is the data controller. To ask about your data, use the [contact form](https://nomma.pages.dev/#contact).

## What do we store and why?

| What | Why | Lawful basis | How long |
| --- | --- | --- | --- |
| Contact messages: name, email, optional phone, your message, how you heard of us, the page you wrote from, and how you first found the site | To reply to you | Legitimate interests (answering your message) | 24 months after our last exchange |
| Bookings and enquiries: name, email, optional phone and notes, appointment time | To arrange and hold your appointment | Taking steps to enter a contract with you | 6 years after the appointment, for tax and accounting records |
| Marketing emails, only if you tick the box | To send occasional news | Consent, which you can withdraw at any time | Until you unsubscribe |
| Visit counts: page, referring site type, campaign tags | To see which pages help people | Legitimate interests | Daily visit counts are kept as long as the site runs. They contain no personal data. |

## How do the visit counts work without cookies?

When a page loads, your browser sends the page address and where you came from. Our server turns a few request details into a code using a secret that changes every day, then throws the details away.

We never store your IP address, set a cookie or keep an id that follows you. Because the secret changes daily, the code cannot be reversed or linked from one day to the next.

Your browser keeps a small note of how you first found the site (for example "search" or "social") in local storage. It is sent to us only if you send a message or make a booking, and you can clear it at any time in your browser settings.

## What about the app?

The Nomma app at [/app](https://nomma.pages.dev/app/) keeps your preferences and logs in your own browser storage on your device.

## Who else handles your data?

| Processor | What for | What they see |
| --- | --- | --- |
| Cloudflare | Hosting, database and the booking system | Data stored in the EU region |
| Resend | Sending booking and reply emails | Your name and email address |
| Google Calendar | Keeping the diary for booked consults | Name, time and type of appointment |
| AuraicPulse | Our enquiry inbox, used to reply to messages and bookings | The details you send us |

## What are your rights?

Under the GDPR you can ask to see, correct, delete or move your data, object to how we use it, or withdraw consent. Ask through the [contact form](https://nomma.pages.dev/#contact).

You can also complain to your data protection authority: the Data Protection Commission in Ireland ([dataprotection.ie](https://www.dataprotection.ie/)) or the ICO in the UK ([ico.org.uk](https://ico.org.uk/)).

Source: https://nomma.pages.dev/privacy
Last updated: 2026-09-24