ntf-os
← Back to NTF-OS

Privacy Policy

Effective: 23 July 2026 Last updated: 23 July 2026 Applies to: ntf-os.org
Plain summary: We collect your name and email when you book a discovery call. We record anonymous page-view and click data to understand how people use this site. We do not sell your data, share it with advertisers, or use it for anything beyond running NTF-OS. Full details below.

1. Who we are

NTF-OS is a trading name operated by its founder. We are an autonomous operations system headquartered in the United Kingdom that runs company operations for non-technical founders.

Contact: For any privacy question, data subject request, or complaint, contact us at hello@ntf-os.org. We aim to respond within five working days.

We are in the process of registering with the Information Commissioner's Office (ICO) as required under the UK Data Protection Act 2018. Our ICO registration number will be published here once issued.

2. What data we collect and why

We only collect data that serves a specific, disclosed purpose. We do not collect data speculatively.

2.1 Discovery call enquiries

When you book a call via the "Book a call" button, you send an email directly to our inbox. That email typically contains:

Legal basis: Legitimate interests (UK GDPR Article 6(1)(f)). Our legitimate interest is evaluating whether NTF-OS is a fit for your business and responding to your enquiry. We have assessed that this interest is not overridden by your right to privacy, because you initiated the contact and the data is used only to respond.

Retention: We keep enquiry emails for 24 months from receipt, or until you ask us to delete them — whichever comes first.

2.2 Pilot and customer data

If you become a pilot partner or paying customer, we will process additional data under a separate Data Processing Agreement (DPA) and customer agreement. The DPA sets out our obligations as a data processor acting on your instructions when we handle your company's operational data — customer communications, financial records, and so on.

Legal basis: Contract performance (UK GDPR Article 6(1)(b)) and, for any special-category data, explicit consent obtained at onboarding.

2.3 Website analytics

Our site uses a lightweight analytics system that we operate ourselves — no Google, Meta, or other third-party analytics is active on this site. The system records:

None of these records contain your name or email address. The visitor identifier is a random string — it cannot be linked back to you without additional information we do not have.

Legal basis: Legitimate interests (UK GDPR Article 6(1)(f)) and compliance with our obligation under the Privacy and Electronic Communications Regulations 2003 (PECR) to disclose the use of storage mechanisms. Our legitimate interest is understanding which pages and links are effective so we can improve the site. The identifiers are randomly generated and not used for advertising profiling.

Retention: Raw analytics events are retained for 12 months, after which they are deleted or irreversibly aggregated.

How to opt out: Clear your browser's local storage and session storage for this site. You can do this via your browser's developer tools or privacy settings. If you use a content blocker that prevents requests to our analytics server, no events will be sent.

3. Who we share your data with

We do not sell, rent, or trade your personal data. We share data only where strictly necessary:

RecipientPurposeLocation
Email service providerDelivering replies to your enquiriesUK / EEA
Analytics serverReceiving page-view events (self-hosted, no third parties)UK
Legal and professional advisersWhere required to obtain legal advice or comply with a legal obligationUK

If we ever engage a new sub-processor that handles personal data, we will update this policy before doing so.

4. International transfers

At present, we process all personal data in the UK or within the European Economic Area. We do not transfer personal data to countries outside these jurisdictions. If this changes, we will apply appropriate safeguards (UK IDTA or UK Adequacy Regulations) and update this policy.

5. Your rights under UK GDPR

You have the following rights regarding your personal data. To exercise any of them, contact us at hello@ntf-os.org. We will respond within one calendar month.

If you are unhappy with how we handle your data, you have the right to lodge a complaint with the Information Commissioner's Office (ICO) at ico.org.uk or by calling 0303 123 1113. We would appreciate the opportunity to address your concern first.

6. Storage mechanisms (cookies and local storage)

Under the Privacy and Electronic Communications Regulations 2003 (PECR), we are required to disclose our use of storage mechanisms in your browser.

NameTypePurposeExpires
ntf_vidlocalStorageRandom visitor identifier for anonymous analytics de-duplicationPersists until cleared
ntf_sidsessionStorageRandom session identifier for grouping events within a browsing sessionEnd of browser session

We do not use advertising cookies, tracking pixels, or any third-party cookies. Google Analytics is not active on this site (it is pending future configuration). If and when GA4 is enabled, this table will be updated before activation and, where required by PECR, a consent mechanism will be added.

7. Children's data

NTF-OS is a B2B service intended for business owners. We do not knowingly collect personal data from anyone under the age of 18. If you believe we have inadvertently collected data from a child, please contact us immediately so we can delete it.

8. Security

We apply industry-standard technical and organisational measures to protect personal data:

No transmission over the internet is 100% secure. If you believe a security incident has occurred involving your data, contact us immediately at hello@ntf-os.org.

9. Changes to this policy

We may update this Privacy Policy when our data practices change. The "Last updated" date at the top of this page will reflect the most recent revision. For material changes — changes that affect how your data is used — we will notify active customers by email at least 14 days before the change takes effect. Continued use of the site after a non-material update constitutes acceptance of the revised policy.

10. Governing law

This Privacy Policy is governed by the laws of England and Wales. Any dispute arising from it is subject to the exclusive jurisdiction of the courts of England and Wales, except where superseded by mandatory consumer protection law applicable in your country of residence.