What we collect, why we collect it and how we protect it — in plain language.
Last updated: October 2026
This policy explains how NightSonar (“NightSonar”, “we”, “us”) handles personal data collected through nightsonar.com and in the course of our services.
For any privacy question or request, contact us at [email protected].
Information you give us: when you use our contact or project forms, we collect your name, email address, company, target market, budget range and the content of your message.
Usage information: we collect limited technical data such as pages visited, referring source and campaign parameters (for example UTM tags), device type and approximate location derived from your IP address.
We use a small number of first-party cookies that are strictly needed to run the site and to understand which channels bring visitors, such as a random visitor identifier and the first campaign source. They are not used to build advertising profiles or to track you across other websites.
Our traffic analytics are privacy-focused and do not rely on third-party advertising cookies.
To reply to your enquiry and prepare proposals.
To deliver and improve our services and this website.
To keep the site secure, including spam and abuse prevention (for example Cloudflare Turnstile).
To meet legal, accounting and regulatory obligations.
Where the GDPR or similar laws apply, we process your data on the basis of our legitimate interest in responding to business enquiries and running our website, steps taken at your request before entering into a contract, performance of a contract, compliance with legal obligations, and your consent where we ask for it.
We never sell personal data. We share it only with service providers that help us run our business — such as hosting, email delivery, security and analytics providers — under contracts that require them to protect it, or where the law requires us to.
We work with clients and providers in several countries. Where data is transferred outside your country, we rely on appropriate safeguards such as standard contractual clauses.
Enquiries that do not become projects are deleted within 24 months. Client and contract records are kept for as long as the engagement lasts and afterwards for the period required by law.
Depending on where you live, you may have the right to access, correct, delete or export your data, to object to or restrict processing, and to withdraw consent at any time. Write to [email protected] and we will respond within 30 days.
You also have the right to lodge a complaint with your local data protection authority.
We may update this policy as our services evolve. The date at the top of this page shows the latest revision.