Privacy Policy

This Privacy Policy explains how novi.digital Ltd, trading as Novi (Company No. 07526752), collects, uses, and protects personal data when you visit novi.digital or interact with us as a prospective or existing client.

1. Who We Are

novi.digital Ltd is the data controller for personal data collected through this website. Registered address: Piccadilly Business Centre, Unit C, Aldow Enterprise Park, Manchester, England, M12 6AE. Trading address: DiSH, Heron House, 1 Lincoln Square, Manchester, M2 5LN, United Kingdom. Contact: hello@novi.digital / 0333 090 4442.

2. What Data We Collect

We may collect the following categories of personal data:

• Contact details you provide via forms on this site (name, email address, phone number, company name, and message content)
• Technical and usage data collected automatically via analytics and advertising tools (IP address, browser type, device information, pages visited, referral source)
• Communications data if you email, call, or book a meeting with us, including call/meeting recordings made for note-taking and quality purposes

3. How We Collect It

We collect data when you submit a form on this site (e.g. book a meeting, request a quote, contact us), when you interact with our advertising (Google Ads, Microsoft Ads, Meta Ads, LinkedIn Ads), and automatically through cookies and similar technologies as described below.

4. How We Use Your Data

We use personal data to respond to enquiries and provide requested information, deliver and manage services for existing clients, improve this website and our marketing, and where you have consented, to send marketing communications. We rely on legitimate interest, consent, or contractual necessity as the legal basis for processing, depending on the activity.

5. Cookies and Tracking Technologies

This site uses cookies and similar technologies, including:

• Google Analytics 4 and Google Tag Manager – to understand site usage and performance, and to manage other tracking tags on the site
• Amplitude – a product analytics tool that also provides session replay (a recording of how visitors interact with pages, including clicks and mouse movement) to help us understand and improve the site; session data is processed in the EU
• Impact.com – a partnership and affiliate tracking platform
• Databox – a third-party reporting tool used to aggregate performance data; Databox is hosted in the United States

Additional tags may be configured within Google Tag Manager from time to time (for example, advertising conversion tracking for specific campaigns); this policy will be updated to reflect any such tags as they are added.

You can control or disable cookies through your browser settings. Disabling cookies may affect the functionality of this site.

6. Forms and Third-Party Processors

Forms on this site are powered by Gravity Forms and protected by Google reCAPTCHA v3 to prevent spam. Form submissions may be routed to our CRM (HubSpot) for follow-up, and outbound email is sent via Mailgun. Where you book a meeting with us, calls may be recorded using Read.ai for note-taking, quality, and training purposes; recordings are typically retained for around 30 days and used internally only.

7. Payment Data

If you become a client, invoicing and payment collection is handled via GoCardless (Direct Debit) or Stripe (card payments). We do not store your full card or bank details ourselves; these are processed directly by our payment providers under their own privacy and security terms.

8. Hosting and Infrastructure

This website is hosted with security and performance services including Cloudflare (CDN and security). Data may be processed by these infrastructure providers as part of delivering the site to you.

9. Data Sharing

We do not sell personal data. We share data only with the service providers listed above, insofar as necessary to operate this website and deliver our services, and where required by law or to protect our legal rights.

10. International Transfers

Some of the third-party tools we use (for example, Databox) may store or process data outside the UK, including in the United States. Where this occurs, we rely on appropriate safeguards such as Standard Contractual Clauses or equivalent mechanisms provided by those vendors.

11. Data Retention

We retain personal data only for as long as necessary for the purposes described in this policy, or as required by law. Call and meeting recordings are typically retained for around 30 days. Client data is retained for the duration of the engagement and for a reasonable period afterwards for legal, accounting, or record-keeping purposes.

12. Your Rights

Under UK GDPR, you have the right to request access to, correction of, or deletion of your personal data, to object to or restrict certain processing, and to data portability where applicable. To exercise any of these rights, contact us at hello@novi.digital. You also have the right to lodge a complaint with the UK Information Commissioner’s Office (ICO) at ico.org.uk.

13. Changes to This Policy

We may update this policy from time to time. The latest version will always be available on this page.

14. Contact Us

Questions about this policy or how we handle your data can be sent to hello@novi.digital or by calling 0333 090 4442.