Your information.
A considered approach.

Who is responsible

Nabiel Nireayo operates as a sole trader trading as Worthfield and is the controller responsible for the personal information described in this notice. For questions or privacy requests, email nabiel@worthfield.co.uk.

You can also call 020 8191 4095 or write to our correspondence address:

This notice covers our website, enquiries and professional communications. If we agree a service engagement, any additional handling of project information will be explained before it is provided.

When you contact Worthfield

If you email or call us, we receive the contact information, message and other details you provide, such as your name, organisation, role and requirements. Our telephone and call-answering providers may handle caller details and messages so that we can respond. We use this information to assess whether we can help and keep an appropriate record of our conversation.

Our lawful basis is our legitimate interest in responding to enquiries and managing professional relationships. Where you personally ask us to take steps towards a contract with you, we rely on the contract lawful basis for information needed for those steps.

Providing information is voluntary, although enough detail is needed to respond usefully. Please begin with a short description and avoid sending confidential project documents or sensitive personal information before suitable sharing arrangements are agreed.

Professional contacts

We may obtain professional contact information from company websites, public business records, professional profiles, introductions and business contact-data suppliers, including Apollo and Data HQ. This can include your name, role, organisation, business email address and telephone number, the source of the information and communication records. You can ask us where we obtained your details.

We use relevant professional information to identify appropriate business contacts and introduce services relevant to their responsibilities. Where permitted, we rely on our legitimate interest in developing relevant business relationships, taking account of the relevance of the contact, reasonable expectations and privacy impact. Where consent is required for a communication, we obtain it first.

You can stop marketing contact at any time. Reply to a marketing message, use its unsubscribe option where provided, tell the caller, or email nabiel@worthfield.co.uk. We will stop using your information for direct marketing and retain only the minimum record needed to respect your preference.

Meetings and AI-assisted work

We use Fathom to assist with meeting recordings, transcripts and summaries where recording is agreed. This may include participants’ names, voices, video and information shared during the meeting. We will explain the recording before it starts and ask for your agreement. You can ask for an unrecorded conversation.

We rely on consent for an agreed recording and on our legitimate interest in keeping accurate, proportionate notes and following up professional discussions for ordinary meeting notes. You may withdraw recording consent at any time by contacting us.

We use software, including OpenAI / ChatGPT, to assist research, organisation, analysis and drafting. Relevant professional information or extracts from communications may be processed for those purposes, using the lawful basis for the underlying task. Personal information should be limited to what the task needs. Confidential project material requires agreed handling arrangements. Outputs are reviewed before they inform our work; AI output is not evidence in itself.

Website technology

Worthfield has not installed advertising trackers or visitor analytics on this website. Images and fonts are served with the site. Selecting an email link opens your email application; selecting a telephone link opens a calling application where your device supports it. These links do not themselves submit a website enquiry. The copy-address button places the business email address on your clipboard when you request it.

The website is hosted through ChatGPT Sites, with Cloudflare infrastructure used for delivery and security. These providers may process technical information such as IP addresses, request times, browser details and security logs. Any hosting access controls or security checks may use essential cookies or similar technology. Our purpose is to operate and protect the website, based on our legitimate interest in providing a reliable, secure service.

The website code does not provide Worthfield with a visitor list or analytics dashboard. Provider processing is explained in the policies linked below.

Who handles information

Nabiel Nireayo manages business enquiries. Relevant information may also be handled by the following suppliers when providing services for Worthfield:

• Google Workspace: business email, correspondence and associated contact information. Google’s data processing terms.
• Apollo: business contact research and professional contact records. Apollo also maintains its own business-information database under its privacy policy.
• Business marketing and appointment support: Data HQ for business contact data and campaign delivery, and Nigel Morgan / Appointment Setter for business outreach and arranging conversations. Where involved, they may handle relevant professional contact details, enquiry or call summaries, correspondence and contact preferences.
• Telephone and message handling: Voipfone (iNet Telecoms Ltd) provides our business telephone service. When AllDayPA (ADP Call Centres Ltd) handles enquiries on our behalf, it records the caller details and message needed to follow up. Relevant messages may be passed to Nabiel and the appointment-setting provider to help arrange a conversation. This may include your name, company, job title, phone number, email address and reason for calling.
• OpenAI / ChatGPT: AI-assisted research and drafting, and the ChatGPT Sites hosting platform. Processing depends on the service, account and applicable settings; see OpenAI’s privacy policy.
• Fathom: agreed meeting recordings, transcripts and summaries. See Fathom’s privacy policy.
• Cloudflare: domain, website delivery and security services. See Cloudflare’s privacy policy.

Providers may act on our instructions or process some information for their own purposes, as described in their terms and policies. Information may also be disclosed where necessary to comply with law, respond to a lawful request or establish, exercise or defend legal claims.

International processing

These services may store or access information outside the UK, including in the United States. Their published arrangements include recognised adequacy decisions and contractual safeguards, such as standard contractual clauses with the UK transfer addendum where applicable. Some providers also describe reliance on the UK Extension to the EU–US Data Privacy Framework for covered transfers.

The applicable protection depends on the provider, service and transfer. The linked provider policies and terms explain their arrangements. Contact nabiel@worthfield.co.uk for more information about a transfer involving your information or how to obtain details of the relevant safeguards.

How long information is kept

We review inactive enquiries and prospect records after 12 months from the last meaningful contact, or from collection where there has been no contact. Information that is no longer needed is deleted; it may be deleted sooner when its purpose ends. Twelve months is our review point, not an automatic deletion deadline or a period required by law.

Continued retention needs a specific reason, such as an active enquiry or business relationship, a legal obligation or a dispute. Meeting recordings and working AI material are retained only while needed for the relevant purpose and are included in this review where they relate to an enquiry or prospect.

A minimal do-not-contact record is kept for as long as necessary to prevent further marketing contact. It is used to respect the objection, not for marketing. Deletion from working accounts is subject to providers’ separate backup, security-log and legal-retention arrangements, described in their policies.

Your rights

Depending on the circumstances, you can ask to access, correct, delete or restrict the use of your information. You can object to processing based on legitimate interests and may have a right to receive certain information in a portable form. Where consent is relied on, you may withdraw it without affecting the lawfulness of earlier use.

Your right to object to direct marketing is unconditional. Contact nabiel@worthfield.co.uk to exercise your rights. We may need proportionate information to verify your identity before releasing personal information.

You can raise a concern with Worthfield and may also complain to the UK Information Commissioner’s Office through its complaints service.

We will update this notice when our practices change. The date at the top shows when it was last revised.