// Legal

PRIVACY POLICY

Last updated: March 2026

1. Who We Are

Nova Blue Technologies Ltd is the data controller for personal information collected through this website and our services.

We are registered in England and Wales under company number 12840005. Our registered address is Staverton Court, Staverton, Cheltenham, Gloucestershire, GL51 0UX.

For any privacy-related queries, contact us at: hello@nova-blue.com

2. What Information We Collect

We collect personal information only when you voluntarily provide it to us. This occurs when you:

Complete an enquiry or assessment request form on our website
Email us directly
Subscribe to communications from us
Engage us for services

The types of information we may collect include:

Name and job title
Company name and business email address
Information about your organisation's size and security requirements
Any additional information you choose to share in a message field

We do not collect sensitive personal data (such as health data or financial account details) through this website.

3. How We Use Your Information

Purpose	Lawful Basis
Responding to your enquiry or assessment request	Legitimate interests / Contract (pre-contractual steps)
Following up on your interest in our services	Legitimate interests
Sending relevant security updates or insights (where you have opted in)	Consent
Improving our website and communications	Legitimate interests
Complying with legal obligations	Legal obligation

We will never sell your personal data to third parties or use it for purposes unrelated to our services.

4. Form Submission Processing

Enquiry and assessment request forms on this website are processed via Web3Forms (web3forms.com), a third-party form processing service. When you submit a form, your data is transmitted securely to Web3Forms and then forwarded to our team by email. Web3Forms does not store your form submissions beyond the transmission process. Please review the Web3Forms Privacy Policy for further information.

5. Cookies

This website uses a cookie consent banner. We use a single first-party cookie to remember your cookie preference (cookie_consent). This is a functional cookie and does not track your browsing behaviour.

If you accept optional cookies, we may in future use analytics tools (such as privacy-respecting analytics) to understand how visitors use our site. These tools will only be activated following your consent. We will update this policy when such tools are introduced.

You can withdraw cookie consent at any time by clearing your browser cookies.

6. How Long We Keep Your Data

We retain personal data only for as long as necessary for the purposes described in this policy:

Enquiry data: up to 24 months from last contact, unless you become a client
Client records: for the duration of our engagement and up to 6 years thereafter, in line with our legal and contractual obligations
Marketing preferences: until you withdraw consent

7. Your Rights

Under UK GDPR, you have the following rights in relation to your personal data:

Right of access — request a copy of the personal data we hold about you
Right to rectification — ask us to correct inaccurate or incomplete data
Right to erasure — request deletion of your data in certain circumstances
Right to restrict processing — ask us to limit how we use your data
Right to data portability — receive your data in a structured, machine-readable format
Right to object — object to processing based on legitimate interests or for direct marketing
Rights related to automated decision-making — we do not use automated decision-making or profiling

To exercise any of these rights, please email hello@nova-blue.com. We will respond within one calendar month.

8. Security

As a cybersecurity company, we take the security of your personal data seriously. We apply appropriate technical and organisational measures to protect your information against unauthorised access, disclosure, alteration, or destruction. All data transmitted via our website forms is sent over encrypted (HTTPS) connections.

9. Third-Party Links

Our website contains links to third-party websites, including the UK Government's Digital Marketplace, the Blockmark Technology certificate registry, and others. We are not responsible for the privacy practices of these sites and encourage you to review their respective privacy policies.

10. Changes to This Policy

We may update this privacy policy from time to time. The date at the top of this page reflects when it was last revised. We encourage you to review this policy periodically.

11. Complaints

If you have concerns about how we handle your personal data and we have been unable to resolve them, you have the right to lodge a complaint with the Information Commissioner's Office (ICO):

Website: ico.org.uk
Helpline: 0303 123 1113