Privacy

Privacy

Last updated 26 August 2026.

This website

The only personal data this site collects is what you enter into the evaluation form:

  • Your name and email address
  • Your company, and optionally its website
  • Target market, team size, approximate account volume and what you sell
  • Anything you choose to write in the free-text field

It is used for one purpose: to judge whether Noustiq fits what you do, and to prepare and run an evaluation. It is not sold, not passed to advertisers, and not added to a marketing list.

For evaluation-form abuse protection, we store a keyed HMAC of the address the form was submitted from together with the browser user-agent string. The raw IP is not written to the evaluation database.

First-party acquisition analytics

We collect limited first-party analytics to understand whether public Knowledge, Tools and product pages are attracting relevant visitors and which distribution channels lead to product, services or booking clicks. The record can include the page path, event type, referrer hostname, UTM campaign tags and a keyed pseudonymous visitor identifier derived from network/browser context.

Raw IP addresses, full user-agent strings, form contents and advertising identifiers are not written to the analytics log. The analytics endpoint is hosted on this domain and does not use a third-party analytics vendor. Raw analytics event files are retained for up to 90 days.

Public diagnostic tools

Some free Tools accept a public website URL so Noustiq can fetch that public page and return a conversion or security baseline. Submitted URLs are processed transiently for the requested result and are not stored as scan history. The scanners do not log in, submit forms, execute JavaScript, brute-force hidden paths, attempt exploitation or retrieve private/internal network addresses.

Scanner rate limiting uses a keyed pseudonymous identifier rather than storing a raw IP address in the tool data directory. Browser-only checklists and calculators keep their entered assessment answers in the visitor's browser unless the page explicitly says otherwise.

Cookies

One cookie, nqsid, is set when you open the evaluation form. It holds a session identifier used to protect the form against cross-site request forgery. It is strictly necessary, carries no personal data, and expires when you close your browser. There are no third-party analytics cookies, advertising pixels or cross-site trackers. The first-party acquisition analytics described above are cookieless. Full cookie detail.

Retention

Evaluation enquiries are kept while a commercial conversation is live, and for up to 24 months afterwards so that we remember prior contact. Ask us to delete yours sooner and we will.

The product

In a customer deployment, Noustiq processes business account and contact information on behalf of that customer. The customer is the controller of the data and Noustiq acts as processor. Those responsibilities are set out in the agreement covering the deployment, not in this notice.

Deployment isolation, database boundaries, hosting region and any data-sharing restrictions are confirmed for each customer before production processing. This notice does not claim an isolation model that has not been validated for that deployment.

Your rights

Depending on where you live, you may have rights to access, correct, delete, restrict or port your personal data, and to object to its processing. Write to hello@noustiq.com and we will respond.

Open items for legal review

  • The legal identity of the controlling entity and its registered address
  • A stated lawful basis for each processing purpose
  • A lead supervisory authority, where one applies
  • An international transfer mechanism where data crosses a border

These are deliberately absent rather than invented.