Privacy Policy

This policy explains what personal data itsnadora.com (the “site”) collects, why, who it is shared with and the choices you have. We collect as little as possible and never sell your data.

Who we are

The site is operated by Nader Abbass (“Nadora”, “we”, “us”), who is the controller of the personal data described here. You can reach us at hello@itsnadora.com.

What we collect and why

Project applications

When you apply to work together through the project application form, we collect:

• your name, email address and, optionally, your company or website;
• the project details you provide, including the type of project, goals, budget range and timeline;
• attribution information, such as the page you arrived on, the referring site and campaign (UTM) parameters, so we know which content brought you here;
• a one-way hashed version of your IP address and your browser's user-agent string, used only for spam and abuse prevention (we do not store the raw IP).

We use this to review your project, reply to you and decide whether we are a good fit. Applications are given an automatic priority score based on the answers you provide (for example budget and timeline) to help us respond in order; every application is still reviewed by a person and the score alone never decides the outcome.

Contact form

When you send a message, we collect your name, email address, the topic and your message so we can respond. A hashed IP may also be stored for abuse prevention.

Free resource requests

Some resources ask for your email address before you can download them. Agreeing to that is delivery consent: we record your email, the resource you requested, campaign (UTM) parameters and a hashed IP, and give you a time-limited download link. Joining the newsletter is a separate, optional checkbox, and we never add you to the newsletter unless you tick it.

Newsletter

If you subscribe to The Nadora Notes, your email address (and the page you subscribed from) is sent to our newsletter provider, beehiiv, which stores it and sends the emails. Every email includes an unsubscribe link.

Booking a call

Calls are scheduled through Cal.com. When you book, Cal.com collects the details you enter (such as your name, email and meeting notes) and shares the booking with us. Cal.com's own privacy policy applies to its booking pages.

Analytics and cookies

We use PostHog to understand which pages and features are useful. It is configured to be privacy-friendly:

• Until you give consent, analytics run in a cookieless, in-memory mode: no analytics cookies or local storage identifiers are set, and a new anonymous session starts on every visit.
• If you accept analytics, PostHog may store an identifier in your browser so visits can be recognised over time.
• Automatic capture of clicks and form inputs is turned off. We only record named events, such as a button click or a page view.
• If your browser sends a Do Not Track signal, PostHog does not record analytics events for your visit.

Campaign attribution (UTM parameters and referrer) is kept in your browser's session storage for the current visit only, so it can be attached to an application or signup you choose to submit. You can change your analytics choice at any time from the consent banner or by clearing site data in your browser.

Service providers

We use the following providers to run the site. They process data on our behalf and only as needed to provide their service:

• Vercel — website hosting and delivery. Vercel processes request data such as IP addresses in server logs.
• Supabase — database for applications, contact messages and resource requests.
• beehiiv — newsletter subscriptions and sending.
• Cal.com — call scheduling.
• PostHog — product analytics, as described above.
• Cloudflare Turnstile (when enabled) — bot protection on forms. Turnstile checks your browser to tell people from bots and does not use advertising cookies.
• Resend (when enabled) — sending us internal email notifications about new applications or messages, which include the details you submitted.
• Sanity — content management for articles and pages. It does not receive visitor data from forms.

Legal bases

Where laws such as the GDPR apply, we rely on:

• Consent for the newsletter, optional analytics storage and gated resource requests;
• Steps before a contract when you apply for a project or book a call;
• Legitimate interests for answering messages, keeping the site secure and preventing spam.

How long we keep data

• Project applications and contact messages: up to 24 months after our last interaction, unless we start working together.
• Resource requests: up to 12 months, so we can resend a file if needed.
• Newsletter subscriptions: until you unsubscribe.
• Analytics data: according to the retention settings of our PostHog project.
• Client project data: as set out in the written agreement for that project.

Your rights

Depending on where you live, you may have the right to access, correct, delete or export your personal data, to object to or restrict certain processing, and to withdraw consent at any time. To make a request, email hello@itsnadora.com. We will respond within 30 days. You can also complain to your local data protection authority.

International transfers

Our providers may store or process data in countries outside your own, including the United States and the European Union. Where required, we rely on appropriate safeguards such as Standard Contractual Clauses offered by those providers.

Security

Data is sent over HTTPS, stored with access controls, and forms are protected with rate limiting and spam checks. No system is perfectly secure, but we take reasonable steps to protect your information.

Children

The site is not directed at children under 16, and we do not knowingly collect their personal data. If you believe a child has sent us information, contact us and we will delete it.

Changes to this policy

We may update this policy as the site changes. The “Last updated” date at the top shows when it was last revised. Significant changes will be highlighted on the site.

Contact

Questions about privacy? Email hello@itsnadora.com or use the contact page.