PRIVACY POLICY

Who We Are

Nacho Tea is a creative marketing, public relations and brand-strategy studio. We help companies find a sharper position, a clearer message and a story their market can understand and believe in. This Privacy Policy explains what personal data we collect when you visit the Nacho Tea website (available at www.nachotea.com), use the tools and resources we publish on it — including the Marketing & PR Jargon Translator and our free Marketing & PR Translator e-book — submit a project enquiry through our intake form, subscribe to our newsletter, or otherwise communicate with us. It also sets out the reasons we collect that data, the limited circumstances in which we may share it, the safeguards that apply when it moves across borders, how long we keep it, and the rights and choices you have in respect of your own information.

In the spirit of the brand, here is the short version stated plainly: we only ever ask for the information we actually need in order to do the thing you asked us to do; we never sell your personal information to anyone; and you can ask us to correct or delete the data we hold about you at any time, for any reason, and we will action that request without argument. If any part of this policy reads like the corporate wallpaper we normally spend our days helping clients tear down, email us at disrupt@nachotea.com and we will translate it into plain English.

Information We Collect

Information you give us

There are only a handful of moments on this website where we ask you to hand us information directly, and we have tried to keep that list as short as the law and good service will allow. In each case we collect the minimum needed to do the specific thing you asked for, and we do not quietly repurpose it for unrelated purposes.

• Email address — if you sign up to receive our free Marketing & PR Translator e-book, or if you subscribe to the Nacho Tea newsletter, we collect and store the email address you provide. We use that address solely to deliver the e-book you requested and, where you have separately opted in to hear from us, to send the occasional Nacho Tea update about our work, our thinking and the tools we publish. We do not silently add you to a list you did not choose, we do not share the address with third parties for their own marketing, and every marketing email we send includes a clear, working unsubscribe link that takes effect without fuss.
• Term suggestions — the Marketing & PR Jargon Translator includes a feature that lets you suggest a new term for the glossary. When you use it, we collect the jargon term you suggest, the message or definition you submit, and — only if you choose to provide it — your email address. The email field is optional because we do not want to make you register an account just to help improve a free public resource. If you do leave an email, we may use it solely to follow up with you about your suggestion; we will not add it to a marketing list.
• Messages — if you contact us by email, or through the project intake form on this site (the "Start a Project" drawer), we collect the information you choose to share. This typically includes your name and title, a work email address, the name of your company or organisation, your stated area of interest, and the details of the project or problem you describe. We use this information only to understand your enquiry, to reply to you, and — if we end up working together — to scope and deliver the work.

Information collected automatically

Whenever you browse the site, our servers and the analytics tools we use record certain information automatically. This is standard across almost every website you have ever visited, and it helps us understand, in aggregate, how the site is being used so we can keep it working and make it better.

• Usage data — we collect information about how you use the site: which pages you visit, how long you spend on them, the search terms you type into the Jargon Translator, your browser type and version, the type of device you are using, your approximate location at the level of city or region (derived from your IP address rather than any precise geolocation), and the page or site that referred you to us. None of this is used to identify you as a named individual; it is used to understand what people are looking for, to spot and fix broken pages, and to improve the site experience.
• Cookies and similar technologies — we use a small number of cookies and similar technologies (such as local storage) to remember your preferences and to measure how the site is used. The full, candid account of what each cookie does, why we use it, and how long it lasts is set out in our Cookie Policy, which we encourage you to read.

We do not collect payment details of any kind. There is nothing to buy on this website: no subscriptions, no checkout, no payment processor is integrated, and we never ask for your card number, bank details or billing address. If you ever see a page on nachotea.com asking for payment information, it is not us — close it and tell us immediately.

How We Use Your Information

We use the information described above only for the purposes set out in this section, and we try to be deliberate about not using it for anything else. In plain terms, here is what your data lets us do:

• To send you the e-book you requested and the occasional Nacho Tea updates you explicitly asked for — and nothing you did not ask for.
• To receive, review and — where appropriate — publish the jargon term suggestions you submit to the glossary.
• To read, route and respond to the enquiries and messages you send us, including project intake submissions.
• To understand, in aggregate, how the translator, our content and the wider site are used, and to make them better.
• To keep the site secure, to prevent abuse, and to understand traffic patterns at a high level.

Legal basis

Under the General Data Protection Regulation (Regulation (EU) 2016/679, "GDPR") and the UK GDPR (as incorporated into UK law by the Data Protection Act 2018), we must have a lawful basis for processing your personal data. The bases we rely on are as follows, and we apply the narrowest basis that fairly covers the activity in question:

• Consent — where you have signed up for our newsletter or accepted non-essential cookies, we rely on your consent. You can withdraw that consent at any time, and withdrawal does not affect anything we lawfully did before you withdrew it.
• Contract, or steps at your request — where you request the e-book or submit a project enquiry, we process your data because it is necessary to provide what you asked for or to take steps you requested before entering into an agreement with us.
• Legitimate interests — where we analyse aggregated usage data, secure the site, or improve our content and tools, we rely on our legitimate interests in operating and developing a free public resource. We balance those interests against your rights and freedoms, and we do not let them override your privacy.
• Legal obligation — where the law requires us to retain or disclose information, we process it to comply with that obligation.

Cookies

Cookies are small text files placed on your device when you visit a website. We use a limited set of them, and we would rather tell you exactly which than bury it. Some are strictly necessary — they make the site function, remember that you have seen the cookie banner, and keep the site secure. Others are optional and only run with your permission: analytics cookies help us understand how the site is used, and marketing cookies help us measure the reach of our own campaigns. You are in control of the optional ones. You can change your choices at any time by opening Cookie settings — there is a link in the footer of every page and another one right there — or by scrolling to the bottom of this page, where the footer link lives again. For the complete, itemised list of every cookie we use, what it does and how long it persists, please read our Cookie Policy.

Sharing & Disclosure

We do not sell your personal information. We do not rent it, we do not trade it, and we do not hand it to data brokers or advertisers. Full stop. The only circumstances in which your data leaves our control are the following, and in each we share only the minimum necessary:

• Trusted service providers — we share data with a small number of vetted providers who process it on our behalf under written contract: for example, our web-hosting company, our email-delivery provider, and our website-analytics provider. Each acts as our data processor and is bound by contractual and legal obligations to keep your data secure and to use it only for the specific purpose we engage them for.
• Legal requirements — we may disclose information where we are legally required to do so, such as in response to a valid court order, subpoena or other legal process, or where disclosure is necessary to establish, exercise or defend our legal rights, or to protect the safety, rights or property of Nacho Tea, our users or the public.

We will never disclose your data for marketing purposes, and we will not transmit it to third parties who intend to use it to contact you about their own products or services.

International Transfers

Some of the service providers we use are based, or process data, outside the country in which you live. In particular, a number of the tools common across the modern web are operated by US-based companies. Where we transfer personal data from the European Economic Area (EEA) or the United Kingdom to a country that the European Commission or the UK Government has not deemed to provide an adequate level of data protection, we rely on appropriate safeguards recognised by law — most commonly the EU Standard Contractual Clauses ("SCCs") and the UK International Data Transfer Agreement — together with any additional technical measures needed to protect the data in transit and at rest. In short: if your data crosses a border, it does so with a legal safety harness on.

How Long We Keep It

We do not hoard data. We keep personal information only for as long as we have a reason to, and then we delete it or anonymise it. The specifics are these:

• Email addresses — we keep your email address for as long as you remain subscribed to the newsletter or until you ask us to delete it. If you unsubscribe, we remove your address from the active list promptly.
• Term suggestions — we keep suggestions for as long as they remain useful in building and maintaining the glossary. If a suggestion is not used, or once it has been incorporated, we may retain only an anonymised record of the contribution.
• Usage data — we retain analytics and usage data in aggregated, anonymised form wherever that is possible, and we delete raw usage logs once they no longer serve a legitimate purpose, typically within a period of months rather than years.

Where we are required by law to retain certain records for a fixed period, we will keep them only for that period and no longer.

Your Rights

Depending on where you live and subject to limited legal exemptions, you have a set of rights under data-protection law in respect of your personal data. We have listed them below, and we take them seriously:

• The right to access the personal data we hold about you.
• The right to ask us to correct inaccurate or incomplete data.
• The right to ask us to delete your data ("the right to be forgotten"), where there is no overriding reason for us to keep it.
• The right to restrict or object to how we process your data in certain circumstances.
• The right to receive your data in a structured, commonly used, machine-readable format, and to have it transmitted to another controller ("data portability").
• The right to withdraw your consent at any time, where we rely on consent, without that withdrawal affecting the lawfulness of anything we did before.
• The right to lodge a complaint with your local data-protection authority (in the UK, the Information Commissioner's Office, the ICO).

To exercise any of these rights, email disrupt@nachotea.com and tell us what you would like us to do. We will verify your identity where necessary to protect your account, and we will respond within one month as the law requires (and often sooner).

Children

This website is a professional resource for marketers, founders, communications professionals and the curious. It is not directed at children under the age of 16, and we do not knowingly collect personal data from anyone we know to be under that age. If you are a parent or guardian and you believe a child has provided us with personal data, contact us at disrupt@nachotea.com and we will locate and delete it as quickly as we can.

Security

We use reasonable technical and organisational measures to protect your personal data against loss, misuse, unauthorised access, disclosure, alteration and destruction. In practice this includes transmitting data over encrypted connections (HTTPS), restricting access to personal data to the specific people and processors who need it, and applying sensible access controls to our systems. We would be dishonest if we claimed the internet is perfectly safe; no method of transmission or storage is ever 100% secure, and we cannot guarantee absolute security. What we can promise is that we take the basics seriously, we keep our practices under review, and we will notify you and the relevant authority promptly where the law requires us to do so in the event of a personal-data breach that affects you.

Changes To This Policy

We may update this Privacy Policy from time to time to reflect changes in the way we work, changes in the law, or the introduction of new features on the site. When we make a change, we will update the "Last changed" date at the top of this page so you can see at a glance when it was last revised. If the changes are significant — for example, if we begin processing a new category of data or share it with a new type of provider — we will draw them to your attention, where we reasonably can, by means of a notice on the site or by email to the address we hold for you. Your continued use of the site after a change takes effect constitutes acceptance of the revised policy to the extent permitted by law, so it is worth checking back occasionally.

Contact

If you have any questions about this policy, any concerns about the way we handle your data, or a request you would like us to action, the fastest route is email: disrupt@nachotea.com. Nacho Tea is the data controller in respect of the personal data described in this policy, and we are happy to be challenged on it. We would rather hear from you directly than have you simmer. If you are unsatisfied with our response, you also have the right to complain to your local data-protection authority (in the UK, the ICO, at ico.org.uk).