Privacy Policy

How VirtuLink handles personal data, in plain English.

Last updated: July 2026

Who I am

VirtuLink is a UK-based executive and virtual assistance practice operated by Nan Kiku ("VirtuLink", "I", "me"). For the purposes of UK data protection law, VirtuLink is the data controller for personal data collected through this website, and can be contacted at connect@virtulink.app.

VirtuLink's registration with the Information Commissioner's Office (ICO) is in progress. The registration number will be published here once issued.

What I collect and why

When you submit the enquiry form or email me, I collect the details you provide: your name, email address, company or venture name, and the contents of your message. I use these solely to respond to your enquiry, discuss how VirtuLink might support you, and, if we work together, to set up and deliver that engagement.

The lawful basis for this processing is legitimate interest (responding to enquiries you have chosen to send) and, where an engagement follows, the performance of a contract.

This website does not use advertising or tracking cookies.

How the enquiry form works

The enquiry form is delivered by FormSubmit, a form-processing service that transmits your submission to my email inbox. Your submission is used only for delivery and is not used by VirtuLink for any other purpose.

Client data during engagements

Where I provide services to a client and handle personal data on their behalf (for example, correspondence, diaries or documents belonging to their business), the client remains the data controller and VirtuLink acts as a data processor under a signed Data Processing Agreement. I work within clients' own systems wherever possible, use two-factor authentication as standard, and do not retain client data beyond the engagement.

How long I keep enquiry data

Enquiries that do not lead to an engagement are deleted within 12 months. Records relating to an engagement are kept for as long as required for contractual, accounting and legal purposes, then deleted.

Sharing

I do not sell personal data, and I do not share it with third parties except the service providers needed to run this website and my practice (such as email and form-delivery services), or where the law requires it.

Your rights

Under UK GDPR you have the right to access the personal data I hold about you, to have it corrected or deleted, to restrict or object to its processing, and to data portability. To exercise any of these, email connect@virtulink.app.

If you're unhappy with how I've handled your data, you can complain to the Information Commissioner's Office at ico.org.uk.

Changes

If this policy changes, the updated version will be published on this page with a revised date.