Privacy policy.

This policy covers the Noughty Reality website (this site). The site is run by The Noughty Fox SRL, str. Tighina 24, Chișinău MD-2001, Republic of Moldova (“we”, “us”). We are the controller of the personal data described here, as defined by the EU General Data Protection Regulation (GDPR) and the UK GDPR.

It doesn’t cover the Noughty Reality SDKs or the Tours product itself. Data processed through those is covered by the agreement with the company that uses them.

Analytics (only with your consent). If you accept analytics cookies, we use Google Analytics 4 to see which pages people visit, how they got here and how they use the site, so we can make it better. Google Analytics collects:

• the pages you view and what you click
• the site that referred you
• your browser, device type, operating system and screen size
• your approximate location (country or city), taken from your IP address

Google Analytics 4 doesn’t log or store IP addresses. We have turned off Google Signals and advertising features, so the data isn’t linked to your Google account or used for ads. Until you agree, Google Analytics isn’t loaded and no analytics cookies are set. Legal basis: your consent (GDPR Art. 6(1)(a)). You can withdraw consent at any time (see Cookies).

Booking a call. When you click “Book a demo” (or a similar button), we load the booking calendar from Calendly. Nothing is loaded from Calendly before you click. To book, you give Calendly your name, email address and any answers you choose to add, and the time you pick. We get these details so we can hold the call and follow up. Legal basis: steps you ask us to take before a possible contract (Art. 6(1)(b)) and our legitimate interest in replying to business enquiries (Art. 6(1)(f)).

Emailing us. If you write to support@thenoughtyfox.com, we get your email address, your name if you include it, and whatever you write, and we use them to reply. Legal basis: our legitimate interest in answering you (Art. 6(1)(f)), or steps before a contract (Art. 6(1)(b)).

Serving the site. Like any website, our hosting provider handles your IP address, browser details and the pages you request to send you the pages and keep the site secure. Legal basis: our legitimate interest in running a working, secure website (Art. 6(1)(f)).

We don’t use your data to make decisions about you by automated means, and we don’t build advertising profiles.

The site works without cookies. We only use these analytics cookies, and only after you accept them:

We save your choice (accept or decline) in your browser’s local storage, so we don’t ask again on every page. We ask again after a year. If you open the booking calendar, Calendly may set its own cookies. Those are covered by Calendly’s privacy notice.

To change your choice or withdraw consent, use the Cookie settings link at the bottom of any page. If you decline after accepting, we delete the Google Analytics cookies. You can also delete cookies in your browser, or install Google’s Google Analytics opt-out add-on.

We don’t sell or rent your personal data. We share it only with the service providers that run parts of the site for us, and only for the purposes above:

• Google (Google Analytics, and Google Workspace for our email). See Google’s privacy policy and how Google uses data from sites that use its services.
• Calendly (booking calls). See Calendly’s privacy notice.
• Amazon Web Services (hosting the site). See the AWS privacy notice.

We may also disclose data if the law requires it, to protect our rights, or to a buyer or successor if our business is sold or merged. This policy would still apply to that data.

We are based in the Republic of Moldova, and our service providers may process data in the United States and other countries outside the European Economic Area (EEA) and the UK. When data from the EEA or the UK goes to a country without an adequacy decision, we rely on safeguards such as the European Commission’s Standard Contractual Clauses (and the UK addendum to them) or, for US providers certified under it, the EU–U.S. Data Privacy Framework and its UK extension. Contact us for a copy of the safeguards that apply.

• Analytics: Google Analytics keeps event data for 14 months, after which it is deleted. Reports only contain combined numbers.
• Bookings and emails: up to 2 years after our last contact, unless we start working together. Then we keep what the contract and the law (for example, accounting rules) require.
• Hosting logs: only as long as needed to run and secure the site.

Under the GDPR and the UK GDPR, you have the right to:

• access the personal data we hold about you and get a copy of it
• correct data that is wrong or incomplete
• erase your data (the “right to be forgotten”)
• restrict how we use your data
• object to processing based on our legitimate interests
• data portability, which means getting your data in a machine-readable format
• withdraw consent at any time. This doesn’t affect processing that happened before you withdrew it.

To use any of these rights, email support@thenoughtyfox.com. We will answer within one month. We may ask you to confirm your identity first. It’s free.

You can also complain to a data protection authority. This can be the one where you live or work (see the list of EU/EEA authorities), the UK Information Commissioner’s Office, or Moldova’s National Center for Personal Data Protection. We’d appreciate the chance to sort it out with you first.

If you live in the United States: depending on your state, you may have similar rights to know, access, correct and delete your personal information. You can use them the same way, by emailing us. We don’t sell personal information or share it for cross-context behavioral advertising, and we don’t treat you differently for using your rights.

Children. This site is for businesses and isn’t meant for children under 16. We don’t knowingly collect their data. If you think a child has given us personal data, email us and we will delete it.

Security. The site is served only over HTTPS. Access to the data we hold is limited to the people who need it. No system is completely secure, but we take reasonable steps to protect your data.

Changes. If we change this policy, we will post the new version here and update the date at the top. If a change affects what we need your consent for, we will ask for it again.

For questions about this policy or your data, email support@thenoughtyfox.com or write to The Noughty Fox SRL, str. Tighina 24, Chișinău MD-2001, Republic of Moldova.