Privacy Policy
Naked Instinct is a publishing by Tom Flemming. This policy explains how we handle personal data collected through nakedinstinct.xyz.
We act as the data controller for personal data described in this policy. This policy is compliant with the General Data Protection Regulation (EU) 2016/679 (GDPR).
1. What we collect
We collect personal data only where you choose to provide it, typically through:
- Contact or enquiry forms: name, email address and any message content you submit.
- Newsletter or mailing list signup: email address, and name if provided.
- Site analytics: aggregated, non-identifying usage data such as page views and general visitor location, used to understand how the site is used.
- The agent readiness check. When you run the agent readiness check and ask for your readout, we collect your name, your work email address, the answers you give to the check and the score they produce, and the campaign source that brought you to it. If you tick the optional box, we also record your consent to receive occasional email from us, and the time you gave it.
We do not collect special category personal data through the site, and we do not knowingly collect data from children.
2. How we use it
| Purpose | Legal basis |
|---|---|
| Responding to enquiries made through the site | Legitimate interests |
| Sending newsletter content to subscribers | Consent |
| Understanding site usage and improving content | Legitimate interests |
When you request a readout, we use your name, email and score to generate and send it, on the basis of our legitimate interest in providing what you asked for.
You can unsubscribe from any mailing list at any time using the link provided in each communication.
3. Third-party tools
The site uses third-party platforms to support publishing, forms and analytics. Where these platforms process personal data on our behalf, we take reasonable steps to ensure they operate under appropriate data protection obligations. We do not sell or share personal data with third parties for their own marketing purposes.
4. Who processes your data
To run the check and send your readout, we share the necessary information with a small number of service providers who process it on our behalf:
- Supabase stores your submission. Hosted in the EU (Ireland).
- Resend delivers your readout by email.
- Anthropic generates the wording of the readout. Only your scores are sent for this, not your name or your email address.
- Vercel runs the software that handles your submission.
Some of these providers are based outside the UK and the EU, so your information may be processed abroad. Where that happens, it is protected by appropriate safeguards under UK and EU data protection law.
5. Data retention
We keep submissions made through our forms and tools, including enquiries, contact messages and the agent readiness check, for 24 months from your last contact with us, then delete them. If a commercial engagement has begun in that time, the contracting entity’s own privacy and retention terms apply instead.
Newsletter subscribers, and anyone who has asked to receive further email from us, are kept until you unsubscribe, then deleted within 30 days.
6. Your rights
Under the GDPR, you have the right to access, rectify, erase, restrict, port and object to the processing of your personal data, subject to applicable legal conditions.
To exercise any of these rights, contact us. We will respond within one calendar month.
You also have the right to lodge a complaint with the supervisory authority in your country of residence. For Portugal, this is the Comissão Nacional de Proteção de Dados (CNPD) For the UK, this is the Information Commissioner's Office (ICO).
7. Commercial engagements
If your relationship with us develops into a commissioned engagement, your personal data will from that point be handled under the privacy policy of the relevant contracting entity through which the engagement is conducted. This will be provided to you as part of the engagement process.
This policy is drafted in English. English is the authoritative language. Where a translation is produced for any purpose, it is for reference only and the English version prevails in the event of any inconsistency.
This policy is effective from 11 July 2026
Current version: 1.0