Privacy Policy

NOVO Digital Ltd ("NOVO Digital", "we", "us", or "our") operates the website novodigital.co and provides digital marketing services. Our registered address is in England and Wales. For privacy-related enquiries, contact us at legal@novodigital.co.

This Privacy Policy explains how we collect, use, store, and protect your personal data when you use our website or services. It applies to all visitors, clients, and prospective clients.

We collect the following categories of personal data:

Contact and identity information: Name, email address, phone number, company name, and job title — collected when you fill in forms on our website, email us, or engage with our services.

Usage data: IP address, browser type, pages visited, time spent, referring URL — collected automatically via cookies and analytics tools.

Communication data: Content of emails, messages, and calls when you contact us or when we work with you.

Financial information: Billing details processed securely through our payment providers. We do not store card details on our own servers.

Marketing data: Your preferences regarding receiving marketing communications and how you interact with our emails.

We use your personal data for the following purposes:

To provide our services: Delivering the digital marketing services you have engaged us for, including communication, reporting, and account management.

To process enquiries: Responding to contact form submissions, discovery call requests, and audit applications.

To send marketing communications: With your consent, we may send newsletters, insights, and updates. You can unsubscribe at any time.

To improve our website: Understanding how visitors use our site to improve performance and content.

To comply with legal obligations: Meeting our regulatory and contractual obligations.

Legal bases: We process data on the grounds of (a) contract performance, (b) legitimate interests in operating our business, (c) your consent where applicable, and (d) legal compliance.

We use cookies and similar tracking technologies on our website. These include:

Essential cookies: Required for the website to function. These cannot be disabled.

Analytics cookies: Help us understand how visitors interact with our website (e.g., Google Analytics). These are only set with your consent.

Marketing cookies: Used to track the effectiveness of our advertising campaigns. Set only with your consent.

You can control cookie settings through your browser or via our cookie consent tool. Disabling certain cookies may affect your experience of the site.

We work with trusted third-party providers who may process your data on our behalf, including:

Analytics: Google Analytics (Google LLC, US) — website usage analytics. Email marketing: MailerLite — newsletter delivery and list management. CRM: HubSpot — contact management and client communication. Payment processing: Stripe — secure payment processing. Hosting: Vercel — website hosting (data processed in the EU/US). Video calls: Zoom or Google Meet — for client calls.

All third-party processors are bound by data processing agreements and operate under appropriate data protection standards.

We retain personal data only for as long as necessary:

Client data is retained for the duration of our working relationship and for 7 years afterwards for legal and tax purposes.

Prospect data (e.g., enquiry forms) is retained for up to 2 years unless you ask us to delete it earlier.

Analytics data is retained in accordance with the respective tool's standard retention policies (typically 26 months for Google Analytics).

Email marketing data is retained until you unsubscribe.

Under UK GDPR, you have the following rights:

Right of access: Request a copy of the personal data we hold about you. Right to rectification: Ask us to correct inaccurate or incomplete data. Right to erasure: Request deletion of your personal data in certain circumstances. Right to restriction: Ask us to restrict processing of your data. Right to data portability: Receive your data in a structured, machine-readable format. Right to object: Object to processing based on legitimate interests or direct marketing. Right to withdraw consent: Where we rely on consent, you can withdraw it at any time.

To exercise any of these rights, email legal@novodigital.co. We will respond within 30 days. If you are unhappy with our response, you have the right to complain to the Information Commissioner's Office (ICO) at ico.org.uk.

We take data security seriously. We implement appropriate technical and organisational measures including:

Encrypted data transmission (HTTPS/TLS) across all our web properties. Access controls limiting who can access personal data within our organisation. Regular security reviews of our systems and processes. Data processing agreements with all third-party providers.

While we take all reasonable steps to protect your data, no internet transmission is 100% secure. Please contact us immediately at security@novodigital.co if you become aware of any potential security incident.

Some of our third-party providers are based outside the UK/EEA (notably the United States). When we transfer data internationally, we ensure appropriate safeguards are in place, such as Standard Contractual Clauses (SCCs) or adequacy decisions. Details of the safeguards used by specific providers are available on request.

We may update this Privacy Policy from time to time. When we make material changes, we will notify you by email (if you are a client or subscriber) or by posting a notice on our website. The date at the bottom of this page reflects when the policy was last updated.

For any questions about this Privacy Policy or our data practices:

Email: legal@novodigital.co Address: NOVO Digital Ltd, London, England Response time: We aim to respond to all privacy enquiries within 5 business days.