Legal
Privacy notice
Last updated 5 October 2026
Draft for legal review
This notice explains how Noah Resources Ltd ("we", "us") uses personal data in connection with RNS Assist (rnsassist.com), the Interview Studio and our Out of the GRND channels.
1. Who we are
1.1We are Noah Resources Ltd, company number 16088691, registered office 3rd Floor Ivy Mill, Crown Street, Manchester, M35 9BG. We are registered with the Information Commissioner's Office under number ICO registration number. For anything about privacy, email contact@rnsassist.com.
1.2Much of the personal data in RNS Assist sits in material our customers upload and in the interviews they arrange. For that data the customer company is the controller and we act as its processor under our Data Processing Agreement. If you took part in an interview or are named in a company's material, that company is your main contact, and we will help it answer any request you make. This notice covers the data we control ourselves and explains the rest so you know what happens to it.
2. What we collect
People who contact us through the website
- What you send through the demonstration or enquiry form: your name, work email, company, role, phone number if you give one, your message and the product you are interested in.
- Technical data needed to run and protect the site: IP address, browser type, the pages requested and when, held in server logs and in records that limit repeated attempts.
The quick-check sum on our forms is answered on the page. It does not use cookies or track you.
People who use a customer account
- Your name, work email, company and role, your password (stored only as a salted hash) and your two-step sign-in settings. Your company's publication PIN is also stored only as a hash.
- Activity records: sign-ins, approvals, downloads and changes, with the IP address and browser used. We keep these in an audit log so that approvals can be proved later.
- Billing details for the company: billing name and address, VAT number and payment status. Card details are entered with Stripe and never reach us.
- Messages you send to our support.
Executives who take part in interviews
- Your name, job title and company.
- Video and audio recordings of the interview, the transcript, and the answers and views you give.
- Technical data from the studio, such as camera and microphone checks and connection quality.
Your image and voice appear in the edited video and clips, and in the published versions once your company approves them.
People named in a customer's material
Names, roles and statements that appear in announcements, documents or drafts that customers upload, for example directors, competent persons, advisers and the contacts listed at the end of an announcement.
3. How we use it, and our lawful bases
| What we do | Lawful basis |
|---|---|
| Reply to enquiries and arrange demonstrations | Our legitimate interest in answering business enquiries, or steps you ask for before a contract |
| Provide accounts and the Services | Our contract with your company, and our legitimate interest in providing the service your company signed up for |
| Prepare, record and produce interviews | We do this as the customer's processor, on its instructions. The customer is responsible for the lawful basis |
| Publish approved interviews on Out of the GRND and RNS Assist channels | Our legitimate interest in publishing interviews a company has approved, which its executive agreed to take part in |
| Take payment and keep accounting records | Contract, and our legal obligations on tax and accounting |
| Keep the Services secure, stop spam and fraud, keep audit records | Our legitimate interests, and legal obligation where it applies |
| Send service emails, such as sign-in, approval and billing messages | Contract, and our legitimate interests |
| Understand how the Services are used, using statistics that do not identify anyone | Our legitimate interests |
We do not currently send marketing emails. If we start, we will only do so where the law allows, and every message will let you opt out.
We use artificial intelligence to draft questions, follow-up prompts, edits and written copy. A person at the customer company reviews and approves the results before anything is published. We do not make decisions about individuals by automated means alone that have legal or similarly significant effects. We do not use personal data to train artificial intelligence models.
4. Who we share it with
Our suppliers
These suppliers process personal data for us under contract:
| Supplier | What they do for us | Where the data is processed |
|---|---|---|
| Railway | Hosting, database and file storage | Amsterdam, the Netherlands |
| Anthropic | Artificial intelligence for drafting and analysis (Claude) | United States |
| Tavus | The AI presenter's video and voice during interviews | United States |
| Daily | The live video room the AI presenter speaks from, used through Tavus. It receives the guest's internet address, never their camera or microphone | United States |
| AssemblyAI | Speech to text during interviews, and transcripts | United States |
| Postmark | Sending service emails | United States |
Stripe processes card payments as a controller in its own right, under its own privacy notice.
Others
- The video and social media platforms where approved interviews are published, such as YouTube, X and LinkedIn. Published interviews are public on those platforms, under their terms.
- Our professional advisers and insurers, and regulators, courts or the police where the law requires it or to protect our rights.
- A buyer of our business, under a duty of confidentiality.
We do not sell personal data.
5. Transfers outside the UK
Our hosting is in the European Union, which UK law recognises as giving adequate protection. Some of our suppliers are in the United States. Where personal data leaves the UK, we rely on UK adequacy regulations (including the UK Extension to the EU-U.S. Data Privacy Framework where the supplier is certified) or on contractual safeguards: the Information Commissioner's International Data Transfer Agreement, or the Standard Contractual Clauses with the UK International Data Transfer Addendum. Our Data processing agreement lists the safeguard each supplier uses. Email us for details.
6. How long we keep it
| Data | How long we keep it |
|---|---|
| Enquiries that do not lead to a contract | 24 months after we were last in touch |
| Account and user records | While the account is open, then 6 years |
| Documents marked for a single interview | Deleted 90 days after the interview, unless the company sets a different period |
| Interview recordings, videos and clips | The company's media retention period (two years unless it chooses otherwise), or until its account is closed if that is sooner |
| Approval and audit records | 6 years after the customer's contract ends |
| Billing and accounting records | 6 years after the end of the financial year they relate to |
| Server and security logs | 12 months |
| Interviews published on our channels | Until they are taken down under our terms |
7. How we protect it
Data is encrypted in transit and stored by providers that encrypt it at rest. Files are kept private and served only through links that expire within minutes. Each company's data is kept separate and checked on every request. Passwords and PINs are stored as salted hashes, two-step sign-in is available to every user, uploads are scanned for malware, and an append-only log records sign-ins, approvals and downloads. Only the people who need it to provide the Services can reach customer data.
8. Cookies
We use one cookie, which keeps you signed in. It is strictly necessary, and it expires after 12 hours or when you sign out. The interview studio also keeps two settings in your browser for the length of your visit: whether you chose audio only, and whether it is running as a demonstration. We use no analytics, advertising or tracking cookies, so you will not see a cookie banner.
9. Your rights
Under UK data protection law you can ask us for a copy of your personal data, ask us to correct it or delete it, ask us to restrict or stop using it, ask for data you gave us in a portable form, and withdraw consent where we relied on it. Email contact@rnsassist.com and we will reply within one month.
Where we hold your data as a customer's processor, we will pass your request to that company and help it respond.
You can also complain to the Information Commissioner's Office at ico.org.uk or on 0303 123 1113. We would appreciate the chance to put things right first.
10. Children
RNS Assist is for businesses and is not intended for anyone under 18.
11. Changes to this notice
When we change this notice we update the date at the top. If a change matters, we will email account holders before it takes effect.
Also read: Terms of service, Terms of use and Data processing agreement.