Privacy policy
Last updated: July 23, 2026
This policy explains what personal data NBS collects, why, and what your rights are. We collect as little as we can and we don't sell it.
1. Who is responsible
The data controller is NBS, Helsinki, Finland. For any question about your data, email hi@nobssite.com and a person will answer.
2. What we collect
When you request a free rebuild, we collect the website address you enter and your email address. When you email us, we keep your message and email address so we can reply.
If you become a customer, we hold the business details needed to run and bill your site: contact person, email, billing and payment method details, and your site's content.
Our website keeps analytics to a minimum. We do not use advertising trackers.
3. Why we use it, and the legal basis
We use your rebuild request to build and send you a demo, and to reply to you. This is our legitimate interest in responding to a request you made, and a step toward a possible contract.
We use customer data to provide and bill the service. This is necessary to perform our contract with you. We keep records where the law requires (for example, accounting).
4. No follow-up marketing
If you request a rebuild and don't go ahead, that's the end of it. We don't run a follow-up sequence and we don't add you to a marketing list. You won't get sales calls.
5. Who processes data for us
We use a small number of trusted providers to run the service: cloud hosting for the website and its data, a database provider, and an email provider for transactional messages. These act as our processors under data-processing agreements and only handle data to provide their service to us.
We can provide the current list of subprocessors on request.
6. How long we keep it
We keep rebuild requests only as long as needed to handle them and for a short period after. Customer data is kept for the life of the subscription and the retention periods the law requires afterwards. Email correspondence is kept as long as needed to support you.
7. Transfers outside the EU/EEA
Where a provider processes data outside the EU/EEA, we rely on the safeguards allowed under the GDPR, such as the European Commission's standard contractual clauses.
8. Your rights
You can ask us for a copy of your data, to correct it, to delete it, or to restrict or object to its use. Email hi@nobssite.com. You also have the right to lodge a complaint with the Finnish Data Protection Ombudsman (tietosuojavaltuutettu).
9. Changes to this policy
If we change this policy, we'll update this page and the date above.