Privacy Policy

At Nettl of York, we’re committed to protecting and respecting your privacy.

This Policy explains when and why we collect personal information about people who visit our website, how we use it, the conditions under which we may disclose it to others and how we keep it secure.

We may change this Policy from time to time so please check this page occasionally to ensure that you’re happy with any changes. By using our website, you’re agreeing to be bound by this Policy.

Any questions regarding this Policy and our privacy practices should be sent by email to or by writing to us at

Nettl of York
Blake House  |  Blake Street  |  York  |  YO1 8QU

Alternatively you can call us on 01904 501 524

Who are we?

Nettl of York is a York business formed in March 2006. We also now trade as ‘Nettl’, a partnership we have formed with a national network of web studios that provides us a strong infrastructure and support network that’s owned by Grafenia PLC.

How do we collect information from you?

We obtain information about you when you use our website, for example, when you complete the contact form, when you complete the site registration form, purchase a product from our store or engage with other forms within our site.

What type of information is collected from you?

The personal information we collect might include your name, address, email address, IP address, and information regarding what pages are accessed and when. If you purchase a product from us, your card information is not held by us, it is collected by our third-party payment processors, who specialise in the secure online capture and processing of credit/debit card transactions, as explained below.

Use of ‘cookies’

Like many other websites, the website uses cookies. ‘Cookies’ are small pieces of information sent by an organisation to your computer and stored on your hard drive to allow that website to recognise you when you visit. They collect statistical data about your browsing actions and patterns and do not identify you as an individual. For example, we use cookies to store your country preference. This helps us to improve our website and deliver a better more personalised service.

It is possible to switch off cookies by setting your browser preferences. For more information on how to switch off cookies on your computer, it depends on your browser and computer, you can easily find out how on the internet. Turning cookies off may result in a loss of functionality when using our website.

Main Cookies used on our site

Google Analytics

These cookies are used to collect information about how visitors use our site. We use the information to compile reports and to help us improve the site.

The cookies collect information in an anonymous form, including the number of visitors to the site, where visitors have come to the site from and the pages they visited

For more information on Google Analytics’ privacy policy visit here –

Google Maps

These are Google Maps third party cookies, which are unique identifiers to allow traffic analysis to Google Maps.

How is your information used?

We may use your information to:
  • Contact you regarding queries raised in the contact form;
  • Progress an order you have submitted and send you information directly related to this;
  • Process a donation that you have made;
  • Carry out our obligations arising from any contracts entered into by you and us;
  • Deal with entries into a competition;
  • Seek your views or comments on the services we provide;
  • Notify you of changes to our services;
  • Send you communications which you have requested and that may be of interest to you.
  •  These may include information about campaigns, appeals, other fundraising activities, promotions of our associated companies goods and services;
  • Process a grant or job application.

We review our retention periods for personal information on a regular basis. We are legally required to hold some types of information to fulfil our statutory obligations. We will hold your personal information on our systems for as long as is necessary for the relevant activity, or if is set out in any relevant contract you hold with us.

Who has access to your information?

We will not sell or rent your information to third parties.

We will not share your information with third parties for marketing purposes.

Third Party Service Providers working on our behalf: We may pass your information to our third-party service providers, agents subcontractors and other associated organisations for the purposes of completing tasks and providing services to you on our behalf (for example to process donations and send you mailings).

However, when we use third party service providers, we disclose only the personal information that is necessary to deliver the service and we have a contract in place that requires them to keep your information secure and not to use it for their own direct marketing purposes. Please be reassured that we will not release your information to third parties beyond the company for them to use for their own direct marketing purposes, unless you have requested us to do so, or we are required to do so by law, for example, by a court order or for the purposes of prevention of fraud or other crime.

When you are using our secure store pages, your payments are processed by a third-party payment processor, who specialises in the secure online capture and processing of credit/debit card transactions. If you have any questions regarding secure transactions, please contact us.

We may transfer your personal information to a third party as part of a sale of some or all of our business and assets to any third party or as part of any business restructuring or reorganisation, or if we’re under a duty to disclose or share your personal data in order to comply with any legal obligation or to enforce or apply our terms of use or to protect the rights, property or safety of our supporters and customers. However, we will take steps with the aim of ensuring that your privacy rights continue to be protected.

Your choices

You have a choice about whether or not you wish to receive information from us. If you do not want to receive direct marketing communications from us about our exciting products and services, then you can select your choices by ticking the relevant boxes situated on the form on which we collect your information.

We will not contact you for marketing purposes by email, phone or text message unless you have given your prior consent. We will not contact you for marketing purposes by post if you have indicated that you do not wish to be contacted.

We hold information as to your marketing preferences on our systems, you can update these at any time by emailing us at

How you can access and update your information

The accuracy of your information is important to us. You have the right to request a copy of the information we hold about you so that you can ensure its accuracy. You can do this by emailing us at, by calling 01904 501 524 or by writing to us at Room 1  |  The Cottage  |  Blake House  |  Blake Street  |  York  |  YO1 8QU

Right to erasure

You have the right to have all records of your personal data held by us erased where there is no legitimate reason for us to retain them.  To request this you should email us, call 01904 501 524 or by write to us at Room 1  |  The Cottage  |  Blake House  |  Blake Street  |  York  |  YO1 8QU

Security precautions in place to protect the loss, misuse or alteration of your information

When you give us personal information, we take steps to ensure that it’s treated securely. Any sensitive information (such as credit or debit card details) is encrypted and protected with the following software 128 Bit encryption on SSL. When you are on a secure page, a lock icon will appear in the search bar next to your URL in browsers such as Google Chrome.

Non-sensitive details (your email address etc.) are transmitted normally over the Internet, and this can never be guaranteed to be 100% secure. As a result, while we strive to protect your personal information, we cannot guarantee the security of any information you transmit to us, and you do so at your own risk. Once we receive your information, we make our best effort to ensure its security on our systems. Where we have given (or where you have chosen) a password which enables you to access certain parts of our websites, you are responsible for keeping this password confidential. We ask you not to share your password with anyone.


We may analyse your personal information to create a profile of your interests and preferences so that we can contact you with information relevant to you. We may make use of additional information about you when it is available from external sources to help us do this effectively. We may also use your personal information to detect and reduce fraud and credit risk.

Links to other websites

Our website may contain links to other websites run by other organisations. This privacy policy applies only to our website‚ so we encourage you to read the privacy statements on the other websites you visit. We cannot be responsible for the privacy policies and practices of other sites even if you access them using links from our website.

In addition, if you linked to our website from a third-party site, we cannot be responsible for the privacy policies and practices of the owners and operators of that third party site and recommend that you check the policy of that third party site.

16 or Under

We are concerned to protect the privacy of children aged 16 or under. If you are aged 16 or under‚ please get your parent/guardian’s permission beforehand whenever you provide us with personal information.

Transferring your information outside of Europe

As part of the services offered to you through this website, the information which you provide to us may be transferred to countries outside the European Union (“EU”). By way of example, this may happen if any of our servers are from time to time located in a country outside of the EU. These countries may not have similar data protection laws to the UK. By submitting your personal data, you’re agreeing to this transfer, storing or processing. If we transfer your information outside of the EU in this way, we will take steps to ensure that appropriate security measures are taken with the aim of ensuring that your privacy rights continue to be protected as outlined in this Policy.

If you use our services while you are outside the EU, your information may be transferred outside the EU in order to provide you with those services.

Review of this Policy

We keep this Policy under review. This Policy was last updated in September 2022.


How we use and protect your data

Chilli Cactus Limited is a private limited company. It chooses to operate in partnership with, and ‘trade as’ a Nettl studio. It abides by the rules and regulations as necessary provided by Nettl. Nettl is owned and operated by Grafenia Operations ltd a subsidiary of Grafenia PLC.

Nettl protects your personal information and your privacy. In this privacy statement, we explain our data practices and commitment to protecting the confidentiality and security of data, what personal information we collect and how we record and use your information. This privacy statement applies to our website (the Website) and the services Nettl offers both online and offline.

What personal information do we record?

We may record your personal information at various times, for example when you visit our Website, register on our Website, place an order, use our services or contact us. We record information such as your name, address, telephone number, email address, domain name, position and company name.

We may also record non-personal information, for example concerning the type of browser and computer you use, as well as technical information pertaining to the way you contact our Website.

We also record and make available to authorised client account holders their order history and graphic file data.

Are you under the age of 16?

If you are 16 or under, you must have permission from a parent or guardian to use our Website.

Why do we record your personal information?

We only record and process your personal information in order to deliver services to our clients and keep you up to date (if you wish). Sometimes, we will use your personal information to send you important information, for example concerning changes to our general terms and conditions or this privacy statement. We do not share any of your personal information with third parties without your permission.


You can opt-in to receiving our newsletter to stay up to date on the latest developments, to give you ideas, to save you money and occasionally make you smile. If you no longer wish to receive any updates/newsletters, you can send an email to or use the opt-out link contained within the update/newsletter.

How do we protect your personal information?

We do everything we can to protect your personal information against loss, destruction, use, modification or distribution by unauthorized third parties. To that end, we use an SSL connection. Data sent via an SSL connection is encrypted and therefore cannot be accessed or used by third parties. Your data is protected against all unauthorized access.

We do not share data without the customer’s authorization. Customers may control their own access to data and update personal information from within their Nettl account via the dashboard screen.

Security-dedicated engineering teams guard against external threats to data. Internal access to data (e.g., by employees) is limited by strict access controls (both internal policy controls and automated technical controls such as authentication, SSL, security logs and forced password changes) to only those with a business need to access it.

How can I access, update or delete my personal information?

You can access and update your personal information directly within your secure Nettl account. You’ll also be able to access your order history, graphic files and personal information from here. If you want to request deletion of your personal information, you can email us at


We use cookies to improve your user experience on our Website. A cookie is a small piece of information that is stored on your computer when you visit our Website. With these cookies, our Website can recognize you when you come back. Cookies also ensure that accessing our Website is quick and secure and they help us detect any errors on our Website. If you do not wish to receive any cookies, you can change your browser’s settings and delete any stored cookies. Note that this may affect the performance of our Website on your computer.


Our Website may contain links to other websites. We are not responsible for the content or privacy protection used by these websites. We would therefore advise you to always read the privacy statement of the website in question.

Changes to this Privacy Statement

We may update the contents of this privacy statement from time to time. If we make any major changes to this privacy statement, we will inform you via a notice on our Website and via email. A detailed version of our privacy policy can be found here on this page.


If you have any questions or remarks, you can contact us via email at

Share This