NomoQ
Privacy note

Privacy, consent and data retention

Plain language, and accurate to what the site and our emails actually do. If something here does not match your experience, tell us and we will fix the statement or the behaviour.

Last updated: 2026-09-21.

Two different kinds of data

This page covers two things that are often muddled together, so we keep them separate on purpose.

Marketing data what you type into a form on this site, and how you arrived Kept for: 12 months from the date you submit it, then deleted automatically
Queue data names, ticket numbers and message logs created while a location runs its queue Kept for: 90 days, purged by a daily job

If you are a patient or a guest at a location using NomoQ, your ticket data is the second row. It is isolated per location and is never used for marketing.

What this website collects

When you submit a form, we store:

What you tell us

  • Your name, organisation, location type, city, preferred date and work email
  • Anything you write in the notes box, exactly as written

When you did it

  • A timestamp, in UTC, set by the server rather than by your browser
  • The page you submitted from

How you arrived

  • The campaign parameters in the link you followed: source, medium, campaign, term, content
  • An advertising click identifier if you came from an ad, and the referring site if there was one

That you agreed

  • A record of the consent wording shown to you, its version, and the fact that you ticked the box
  • A random visitor identifier kept in your browser, so a visit can be connected to a signup without an advertising cookie

Why we hold it

Two purposes only:

1. To reply to you

  • If you asked for a demo, we email you about that demo
  • If you asked for the playbook, we send you the playbook

2. To know which channels work

  • Aggregated counts of visits and submissions by campaign
  • So a weekly report can say which channel produced which leads

The legal basis is your consent, given when you tick the box. The playbook request is a separate consent from the demo request, and we do not rely on legitimate interests to email you. We do not buy lists.

Retention and deletion

Lead records carry a deletion date the moment they are written, and the database removes them automatically when it passes.

Demo request Your name, organisation, location type, city, preferred date, email and notes, plus how you arrived and your consent record Kept for: 12 months from submission
Playbook / newsletter subscriber Your first name, email, organisation and consent record Kept for: Until you unsubscribe, then 12 months
Analytics events Page views, form starts and form errors, attributed to a channel Kept for: 14 months
Your consent record The exact wording you agreed to and when Kept for: As long as we hold the contact, plus 12 months
Queue data (the product) Names, ticket numbers and message logs created while a location runs its queue Kept for: 90 days, purged daily

To have your marketing record deleted, email hello@nomo-q.com with the address you used. We action deletion within 30 days and confirm by email. You do not need to give a reason.

Unsubscribing

Every email we send carries a one-click unsubscribe link, and it works without you logging in or giving a reason. The link is tied to a token for your address, so clicking it suppresses that address immediately and records the date.

If a link ever fails, reply to any email from us with the word stop, or write to hello@nomo-q.com, and a person will remove the address by hand.

Cookies, and what runs on the page

The site sets no advertising cookies of its own. It stores a random visitor identifier and the campaign parameters in your browser's local storage, and that data is sent to us only attached to a form submission or an analytics event.

Our fonts are served from our own domain, so text and layout make no request to a third party. Two scripts on the page are ours: the form handler, and a small tracker that records a visit and a form submission to our own database, which is how a lead is attributed to a channel.

Two third-party tags also run: Google Analytics 4 and the Meta pixel. Google Analytics loads from Google, sets the _ga cookies, and records page views, clicks and form submissions with your IP address anonymised. The Meta pixel loads from Facebook, sets the _fbp cookie, and records the same page views and form submissions so that ad campaigns can be measured and audiences retargeted. Both exist for one purpose — to show which channels bring visitors and which channels bring leads. We do not send Meta your name, email or phone number: automatic advanced matching is switched off, so the contact details you type are not shared with Meta.

Who can see your data

A small team sees the lead records: the people who reply to you. We do not sell, rent or share your details with third parties for their own marketing.

If we use a CRM, an email tool or a hosting provider, they process the data on our instructions only. Our hosting and email providers are listed in our internal runbook, and this page is updated when that list changes.

What we never do

Not this

  • We do not pre-tick a consent box. You tick it or the form will not send
  • We do not add you to a newsletter because you asked for a demo

Not this either

  • We do not put patient or guest queue data into our marketing list
  • We do not make getting the playbook conditional on receiving marketing

Questions? Write to hello@nomo-q.com. That address is monitored, and a person answers it.