Privacy Policy
Naustec Ltd | Last updated: April 2026 | Effective date: April 2026
01 — Who we are
Data controller
Naustec Ltd is the data controller for all personal data collected through this website (naustec.com) and associated subdomains.
02 — The Mind the Gap research survey
What data we collect
The Mind the Gap survey collects responses to questions about private mental health practice in the UK. This includes information about your practice type, years of experience, geographic region, and your experiences with administration, technology, and continuity of care.
Responses to all survey questions are anonymous by default. We do not ask for your name in the survey itself.
How we use survey responses: Survey data is used for aggregate research reporting only. We will publish findings as percentages, averages, and themes across the full respondent group. We will never identify or attribute responses to any individual. No individual response will be shared with third parties.
If you provide your email address: At the end of the survey, you have the option to leave your email address if you are willing to take part in a follow-up research interview. Your email address is collected only for this purpose. It will not be used to send you marketing communications, added to any mailing list, or shared with any third party. If you change your mind and no longer wish to be contacted, email us at info@naustec.com and we will delete your contact details immediately.
Legal basis for processing
We rely on legitimate interests (Article 6(1)(f) UK GDPR) for processing anonymous survey responses for research purposes. Our legitimate interest is to generate independently verified evidence about the operational realities of private mental health practice in the UK, for the purpose of developing software that serves this professional community.
For email addresses provided voluntarily at the end of the survey, we rely on your consent (Article 6(1)(a) UK GDPR). You may withdraw this consent at any time by emailing info@naustec.com.
03 — Survey platform
Tally.so
The Mind the Gap survey is hosted on Tally.so. Tally acts as a data processor on our behalf. Survey responses are stored on Tally’s servers in accordance with their own privacy policy and data processing terms. We encourage you to review Tally’s privacy policy at tally.so/privacy. Tally complies with GDPR requirements for the processing of data from EEA and UK respondents.
04 — Website data
What we collect automatically
When you visit naustec.com, standard server logs may record your IP address, browser type, pages visited, and time of visit. This data is used solely to understand how the site is being used and to maintain its security. It is not used to identify individuals.
05 — How long we keep your data
- Anonymous survey responses are retained for a maximum of three years from the date of collection, after which they are permanently deleted.
- Email addresses collected via the follow-up interview opt-in are retained until the research interview has taken place, or until you withdraw your consent, whichever is sooner. In any event, we will delete all interview opt-in email addresses no later than 31 December 2026.
- Website log data is retained for a maximum of 12 months.
06 — Sharing your data
We do not sell, rent, or trade your personal data. We do not share individual survey responses with any third party. Aggregated, anonymised findings will be published as part of the Mind the Gap report, available at naustec.com from June 2026.
We may share data with trusted processors who help us operate our services (such as Tally.so), but only under strict data processing agreements and only to the extent necessary.
07 — Your rights under UK GDPR
You have the following rights in relation to any personal data we hold about you:
- Right to access — you can ask us what data we hold about you.
- Right to rectification — you can ask us to correct inaccurate data.
- Right to erasure — you can ask us to delete your data.
- Right to restrict processing — you can ask us to limit how we use your data.
- Right to withdraw consent — where we rely on consent, you can withdraw it at any time.
- Right to object — you can object to processing based on legitimate interests.
To exercise any of these rights, contact us at info@naustec.com. We will respond within one calendar month.
You also have the right to lodge a complaint with the UK’s data protection authority, the Information Commissioner’s Office (ICO), at ico.org.uk.
08 — Security
We take reasonable technical and organisational measures to protect your data from unauthorised access, disclosure, or loss. Naustec is building towards ISO 27001 certification. Where we use third-party processors, we require them to maintain appropriate security standards.
09 — Changes to this policy
We may update this policy from time to time. Any changes will be published on this page with an updated effective date. We will not reduce your rights under this policy without your explicit consent.
10 — Contact us
If you have any questions about this policy or how we handle your data: