01Overview and scope
This Privacy Policy explains how NBN Ventures Ltd, trading as Atellius ("we", "us", "our"), collects, uses, and protects information when you visit atellius.com, submit our contact form, or use GEO Intel at geo.atellius.com.
This policy applies wherever you are located, including the UK, EU, US, and India. Where regional law grants you specific rights — such as the UK/EU GDPR or India's Digital Personal Data Protection Act, 2023 — this policy is applied consistently with those rights, as described in the "Your rights" section below.
02Who we are
NBN Ventures Ltd is the data controller (or "data fiduciary" under Indian law) for the personal data described in this policy. You can reach us at hello@atellius.com for any privacy matter, including to exercise the rights described below.
03Information we collect
Information you provide directly
- Contact and inquiry data: name, email address, company name, project details, budget range, and any information you choose to share via the contact form or by email.
- Account and billing data (for GEO Intel subscribers): name, email, company, and billing information processed on our behalf by Razorpay. We do not store full card numbers on our own systems.
- Any content you upload or submit while using the platform, such as domains you request an audit for.
Information collected automatically
- Aggregate, cookie-free analytics via Plausible — page views, referrer, and country-level location, with no individual visitor profile and no cross-site tracking.
- Standard server logs (IP address, user agent, timestamp) retained briefly by our hosting infrastructure (Cloudflare) for security and abuse-prevention purposes.
- A single local preference (light/dark theme) stored in your browser's localStorage — this stays on your device, is not personal data, and is never transmitted to us.
We do not use advertising cookies, third-party tracking pixels, or cross-site behavioural profiling.
04How we use information
- To respond to inquiries and follow up on discovery conversations.
- To deliver, bill for, and support Project Services and GEO Intel subscriptions.
- To send transactional communication — invoices, service updates, security notices — via Resend.
- To understand aggregate site usage and improve our services (via cookie-free analytics only).
- To comply with legal obligations, prevent fraud, and enforce our Terms of Use.
We do not sell personal data, and we do not use your project details or audit content for any purpose other than delivering the service you requested.
05Legal bases for processing
Where UK/EU GDPR applies, we process personal data on the following bases: performance of a contract (delivering a Project Service or Subscription Service you have engaged), legitimate interest (responding to inquiries, securing our platform, improving our services), and consent (where you have explicitly opted in, such as a marketing email list, which you may withdraw at any time).
08International data transfers
Because we serve clients across the UK, EU, US, India, and beyond, personal data may be processed in a country other than your own, including India. Where required, we rely on appropriate safeguards — such as standard contractual clauses or equivalent mechanisms offered by our service providers — for any transfer of personal data across borders.
09Data retention
We retain inquiry and project data for as long as needed to deliver the relevant service and to meet our legal, accounting, or tax obligations thereafter, typically no longer than 7 years for financial records. Subscription account data is retained for the life of the account and deleted or anonymised within a reasonable period after account closure, except where retention is required by law.
10Your rights
Depending on your location, you may have the right to: access the personal data we hold about you; request correction of inaccurate data; request deletion of your data; object to or restrict certain processing; request a portable copy of your data; and withdraw consent at any time where processing is based on consent.
To exercise any of these rights, email hello@atellius.com. We will respond within a reasonable time and, in any event, within the period required by applicable law.
11Data security
We use industry-standard technical and organisational measures — including encryption in transit, access controls, and reputable third-party infrastructure — to protect personal data. No method of transmission or storage is completely secure, and we cannot guarantee absolute security.
12Children's privacy
Our services are intended for businesses and individuals aged 18 or older. We do not knowingly collect personal data from children. If you believe a child has provided us with personal data, contact us and we will delete it.
13Changes to this policy
We may update this Privacy Policy from time to time. Material changes will be reflected by an updated "Effective Date" above and, where required by law, notified to active subscribers directly.
14Contact and grievance officer
For any privacy question, rights request, or complaint, contact our designated privacy contact, Nawab Islam, at hello@atellius.com. We aim to acknowledge every privacy request within 5 business days.