Security & Data Handling

1. Our approach

NA Designs handles client information, project files and website access with care. This document explains our practical security approach in simple language so clients understand how their data is treated.

2. Data we may handle during projects

• Business details, brand assets, copy, images, videos and project notes.
• Website admin access, domain/hosting access or temporary collaborator access when needed.
• Contact information and communication history.
• Invoices, payment references and support requests.

3. Access control

Access to client data is limited to people or tools needed for the project. We avoid asking for unnecessary credentials. Where possible, clients should use collaborator access, temporary passwords or role-based access instead of sharing permanent main account passwords.

4. Secure communication

We usually communicate through email, WhatsApp, website forms or agreed project channels. Clients should avoid sending highly sensitive information unless it is required for the project. Passwords should be shared carefully and changed after handover where appropriate.

5. Website and form handling

Our website uses standard web security practices such as HTTPS-enabled hosting where available and trusted form/email tools. Form submissions may pass through third-party tools used to receive enquiries and reply to clients.

6. Backups and recovery

For active projects, NA Designs may keep working copies, exports or backups depending on the project type and platform. Clients are responsible for maintaining long-term backups after handover unless a maintenance plan includes backup support.

7. Third-party services

Websites often rely on third-party services such as hosting providers, domain registrars, form tools, payment gateways, email providers, plugins, fonts, analytics, CDNs or automation tools. These providers have their own security practices and terms.

8. Confidentiality

For projects involving confidential business information, unreleased ideas or private internal material, sensitive details are handled privately and are never published as public website content.

9. Credential handling

• Share only the access required for the task.
• Use temporary passwords or collaborator accounts where possible.
• Change passwords after project completion or when access is no longer needed.
• Do not share bank OTPs, personal OTPs, recovery codes or unrelated private account access.

10. Incident handling

If we become aware of a security issue affecting client project data, we will review the situation and take reasonable steps to reduce harm, fix the issue and inform affected clients where appropriate.

11. What we do not guarantee

No website, hosting provider, plugin, browser, communication app or online system can be guaranteed 100% secure. NA Designs uses reasonable practices, but clients should also follow safe account, password, backup and hosting habits.