Back to home
Legal · NovaStack Ltd

Privacy Policy

Last updated: 11 October 2026

NovaStack Ltd ("NovaStack", "we", "us") is the data controller for personal data collected through this website. We process personal data in line with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

1. Data we collect

  • Identity and contact data you provide: name, work email, company, LinkedIn or portfolio links, and project or application details.
  • Technical data collected automatically: IP address, browser type, device information and pages visited.
  • Correspondence you send us by email or during scheduled calls.

2. Lawful bases for processing

  • Contract: to take steps at your request before entering into an engagement and to deliver services.
  • Legitimate interests: to respond to enquiries, assess job applications, secure and improve our website.
  • Consent: where we rely on consent (for example, optional cookies or marketing), you may withdraw it at any time.
  • Legal obligation: where we must retain records for tax, accounting or regulatory purposes.

3. Sharing and international transfers

  • We share data only with processors acting on our instructions (hosting, email, scheduling and analytics providers) under written data processing agreements.
  • Where data is transferred outside the UK, we rely on UK adequacy regulations or the International Data Transfer Agreement / UK Addendum to the EU SCCs.
  • We never sell personal data.

4. Retention and security

  • Enquiry data is kept for up to 24 months; unsuccessful job applications for up to 6 months; client records for 6 years for legal and tax purposes.
  • We apply appropriate technical and organisational measures, including encryption in transit, access controls and least-privilege policies.

5. Your rights

  • You have the right to access, rectify, erase, restrict or object to processing of your personal data, and the right to data portability.
  • To exercise any right, email contact@novastackltd.com. We will respond within one month.
  • You may complain to the Information Commissioner's Office (ICO) at ico.org.uk or on 0303 123 1113.

6. Cookies

  • We use strictly necessary cookies to operate the site. Any non-essential analytics cookies are only set with your consent, in line with PECR.

7. Changes to this policy

  • We may update this policy from time to time. The current version, with its last-updated date, will always be published on this page.

Questions? Email contact@novastackltd.com.