Trust & security

How we handle your work and your data.

Short version: we keep your data to ourselves, we do not sell it, and we only hold what we need to do the job. Everything below is the full detail.

Last updated June 2026

Data we hold

We collect only what the audit or build requires: your name, email, company, and the workflow details you send us. We do not scrape, infer, or buy data about you. If you submit a workflow through the audit form, the details stay in our CRM and your audit report. Nothing else.

We do not process payment card details. Invoicing and payment are handled by Stripe, and card data never touches our systems.

How we use it

Who sees it

Nifty Labs is operated by Ben Hales as a sole trader. Ben has direct access to the CRM, the audit reports, and the inbox. No one else has access unless you explicitly bring them in or we engage a specialist with your written permission.

For builds that involve partner specialists, we share only what is needed for their piece of the work, and they are bound by the same confidentiality terms.

Security

Confidentiality

Every build engagement is covered by a confidentiality clause in the service agreement. Audit submissions are treated as confidential by default. We will not share, publish, or reference your audit or your data without your explicit written permission.

Case studies and testimonials are only published with your consent, and you can withdraw that consent at any time.

Subprocessors

We use a small number of services to operate. Each processes data only to the extent needed to provide their function:

We do not use advertising platforms, analytics vendors with cross-site tracking, or data brokers.

Your rights

You can ask us to:

Email ben@niftylabs.co.uk for any of these. We respond within 14 days.

Questions

Anything not covered here, email ben@niftylabs.co.uk. We keep it straightforward.