Legal & Privacy

Privacy Policy

NOVADOT LTD is committed to protecting your privacy and handling personal data with transparency, integrity and accountability.

Data controller

Who we are

This website is operated by NOVADOT LTD (company registration number 07691369), with registered office at 21 Berkeley Close, Oadby, Leicester, England, LE2 4SZ and office address at First Floor, 18B Tithe Street, Leicester, LE5 4BN. Under UK data protection law (UK GDPR and the Data Protection Act 2018), we are the data controller for personal data collected through this website.

For privacy enquiries, contacthello@novadot.co.uk.

Information we collect

Information we collect and why

We deliberately minimise the personal data we collect. We do not use third-party analytics trackers, advertising networks, or unnecessary marketing scripts.

1. Direct project and event enquiries

When you use our project enquiry form, event form, or contact us via email or telephone, we collect:

  • Your name, work email address, telephone number (if provided), and organisation name;
  • Details of the project, system, event topic or space requirements you share with us; and
  • Communication history regarding your enquiry.

When you submit a project or event enquiry, our website sends your details securely to NovaDot's Microsoft 365 email mailbox. SiteGround provides the website hosting and Microsoft provides the email service. We use your email address to reply to your enquiry. The website does not keep a separate database of enquiry messages or add you to a marketing list.

To limit spam and duplicate messages, the website temporarily keeps hashed request identifiers and network addresses with timestamps. These records expire after 24 hours and are cleared when subsequent submissions are processed; they do not include your enquiry text.

Legal basis: Processing is based on our legitimate interest in assessing and responding to your enquiry, or taking preliminary steps at your request prior to entering into an agreement.

2. Technical server logs

Our hosting infrastructure records standard technical request logs (such as IP address, browser user-agent, and request timestamp) strictly for server security, diagnostic monitoring, and network defence.

Legal basis: Legitimate interests in securing our digital infrastructure against abuse and unauthorised access.

3. Cookies

This website does not deploy tracking, advertising, or third-party analytical cookies. We do not require a cookie banner because no intrusive or non-essential cookies are placed on your device.

Retention & security

Data retention and security

Enquiry records that do not lead to an engagement are archived and securely deleted after 12 months. Client project data and correspondence are retained in accordance with UK statutory accounting, legal, and contractual limitation periods (typically 6 years from project completion).

We apply robust technical and organisational security controls, including encrypted transport (HTTPS/TLS), access limitations restricted to authorised personnel, and protected hosting and email services.

Your rights

Your statutory rights

Under UK data protection law, you have the right to:

  • Request access to the personal data we hold about you;
  • Request correction of inaccurate or incomplete personal records;
  • Request erasure of your personal data where retention is no longer justified;
  • Object to or request restriction of our processing of your information; and
  • Lodge a complaint with the UK supervisory authority, the Information Commissioner's Office (ICO) at ico.org.uk.

To exercise any of these rights, please contact us at hello@novadot.co.uk.