Introduction
Novoda Limited[1] (“Novoda“, “we“, “our“, or “us“) operates the https://novoda.com website (the “Website“) and provides app development and related consultancy services (the “Services“).
At Novoda we are committed to protecting your privacy. In this privacy policy we have set out how we collect, store, process, transfer, share and use data that identifies or is associated with you (your “personal information“) and information regarding our use of cookies and similar technologies.
This privacy policy covers the information we collect about you when you use our Services, access our Website or contact us.
Data Controller
Novoda is the data controller of the personal information we hold about you. If you have any questions about this privacy policy or require any further information, you can write to us at privacy@novoda.com or 86-90 Paul Street, London EC2A 4NE, United Kingdom.
Information we collect from you
Information that you provide us
We collect personal information about you when you voluntarily submit information to us. This can include information you give us when you engage us to provide Services, fill in forms on our Website or correspond with us by phone, email or otherwise, or when you subscribe to our blog, mailing lists, newsletters or other forms of marketing communication.
We will inform you if the provision of certain personal information is mandatory or voluntary. If you choose not to provide personal information marked as mandatory, we may not be able to provide some of the Services or features of our Website to you or respond to your queries or comments.
Information we receive from other sources
We may receive personal data about you from public sources and various third parties, including, for example, social media networks.
The table in Annex 1 sets out the categories of personal information we collect about you and how we use that information. The table also lists the legal basis which we rely on to process the personal information and the recipients of that information.
Where we hold your information
We take the security of your personal information very seriously and have policies and procedures in place to protect your personal information against accidental or unlawful destruction, loss, change or damage (a “data breach“). We take care to limit access to your personal information to those employees, agents, contractors and other third parties who have a business need to know.
We have put in place procedures to deal with any suspected data breach and will notify you and any applicable regulator of a data breach where we are legally required to do so.
Although we do our very best to protect your personal details, the transmission of information via the internet is not completely secure, and we cannot and do not guarantee the absolute security and protection of your personal information.
The personal information we collect may be transferred to and stored in countries outside of the jurisdiction you are in where our third-party service providers or we have operations. If you are located in the European Economic Area (“EEA“), this may mean that your personal information will be stored in a jurisdiction that offers a level of protection that may, in certain instances, be less protective of your personal information than the jurisdiction you are typically resident in. We will take reasonable steps to ensure that your personal information is treated securely and in accordance with applicable law and this privacy policy.
Disclosure of your information
We may share your personal information with the following:
Service providers
We may transfer your personal information to third party selected service providers that perform services for us or on our behalf, including IT and system management services, legal and financial advisors, billing and payment processing services, fraud detection and prevention services, web analytics, web hosting, email and chat services, marketing services, recruitment services and content providers (collectively, “Third Party Service(s)”).
We require all Third Party Services to respect the security of your personal information and to treat it in accordance with the law.
Law enforcement, regulators and other parties for legal reasons
We may disclose your personal information to third parties if we are under a duty to disclose or share your data in order to comply with any legal obligation, or if we reasonable believe that such action is necessary to (i) comply with the law and the reasonable requests of law enforcement; (ii) detect and investigate illegal activities and breaches of agreements; and/or (iii) exercise or protect the rights, property or personal safety of Novoda, its users, employees or others.
Purchasers and third parties in connection with a business transaction
We may also disclose your personal information to third parties to whom we may choose to sell, transfer, or merge parts of our business or our assets. Alternatively, we may seek to acquire other businesses or merge with them. If a change happens to our business, then the new owners may use your personal information in the same way as set out in this Privacy Policy.
Affiliates
We may transfer your personal information to other affiliates of Novoda, so that they can provide you with news, updates, information and marketing messages about products or services that may interest you.
Social media networks
Content that you share through social media may be shared with your social media account provider and your friends, followers or contacts on the connected social network.
Your Rights
You have the following rights in respect of the personal information we hold about you:
- Right of access
You have the right to obtain:
– Confirmation of whether, and where, we are processing your personal information;
– Information about the categories of personal information we are processing, the purposes for which we process your personal information and information as to how we determine applicable retention periods;
– Information about the categories of recipients with whom we may share your personal information; and
– A copy of the personal information we hold about you.
- Right of portability
You have the right, in certain circumstances, to receive a copy of the personal information you have provided to us in a structured, commonly used, machine-readable format that supports re-use, or to request the transfer of your personal data to another person.
- Right to rectification
You have the right to obtain rectification of any inaccurate or incomplete personal information we hold about you without undue delay.
- Right to erasure
You have the right, in some circumstances, to require us to erase your personal information without undue delay if the continued processing of that personal information is not justified.
- Right to restriction
You have the right, in some circumstances, to require us to limit the purposes for which we process your personal information if the continued processing of the personal information in this way is not justified, such as where the accuracy of the personal information is contested by you.
- Right to Object
You have the right to object to any processing based on our legitimate interest where there are grounds relating to your particular situation. There may be compelling reasons for continuing to process your personal information and we will assess and inform you if this is the case. You can object to marketing activities for any reason.
If you wish to exercise any of these rights, please contact us via email at privacy@novoda.com.
You also have the right to lodge a complaint to your national data protection authority. Further information about how to contact your local data protection authority is available at http://ec.europa.eu/justice/data-protection/bodies/authorities/index_en.htm.
Timeline for keeping your information
We will only retain your personal data for as long as necessary to fulfil the purposes we collected it for, including for the purposes of satisfying any legal, accounting, or reporting requirements.
To determine the appropriate retention period for personal data, we consider the amount, nature, and sensitivity of the personal data, the potential risk of harm from unauthorised use or disclosure of your personal data, the purposes for which we process your personal data and whether we can achieve those purposes through other means, and the applicable legal requirements.
Cookies and similar technologies
Our Website doesn’t use any cookies.
Marketing and advertising
From time to time, we may contact you with information about our products and services. Most of the marketing messages we send will be by email or through push notifications on your device.
We will only send you marketing messages if you have given us your consent to do so. We will ask you if you would like to receive these messages when we first collect your contact details.
You can change your preferences at a later date by clicking on the unsubscribe link at the bottom of our marketing newsletters. You can also let us know at any time that you do not wish to receive marketing anymore by sending an email to us using the contact details at the end of this privacy policy.
Please note that if you do opt out of or do not grant consent to receiving marketing-related messages from us, we may still send you non-marketing messages, such as communications relating to the provision of our Services.
Links to third-party sites
Our Website may, from time to time, contain links to and from third-party websites, including those of other users, our partner networks, advertisers, partner merchants, news publications, retailers and affiliates. If you follow a link to any of these websites, please note that these websites have their own privacy policies and that we do not accept any responsibility or liability for their policies. Please check the individual policies before you submit any information to those websites.
Our policy towards children
Our Website and Services are not directed at persons under 16, and we do not knowingly collect personal information from children under 16. If you become aware that your child has provided us with personal information without your consent, then please contact us using the details below so that we can take steps to remove such information and terminate any account your child has created with us.
Changes to this policy
We may update this privacy policy from time to time, so you should review this page periodically. When we change this privacy policy in a material way, we will update the “last modified” date at the end of this privacy policy. Changes to this privacy policy are effective when they are posted on this page.
Notice to you
If we need to provide you with information about something, whether for legal, marketing or other business-related purposes, we will select what we believe is the best way to get in contact with you. We will usually do this through email or by placing a notice on the Website. The fact that we may send notices to you will not stop you from being able to opt-out of certain types of contact as described in this privacy policy.
Annex 1 – Personal information we collect when you use our services or our website
Contact information and basic personal details.
Such as your name, phone number, e-mail address.
How we may use it
We may use this information to provide you or another person connected to you (such as your employer) with our Services in accordance with our agreement with you or in accordance with our agreement with the customer.
We may use this information to communicate with you, including sending service-related communications.
We may use this information to send you unsolicited marketing communications in accordance with your preferences.
We may use this information to deal with enquiries and complaints made by or about you relating to the Service.
Legal basis for the processing
Where our agreement to provide Services is with you, the processing is necessary for the performance of a contract between you and us and/or to take steps at your request prior to entering into a contract.
Where our agreement to provide Services is with someone else (such as your employer), the processing is necessary for our legitimate interests and those of our customer, namely administering the Services.
We will only use your personal information in this way to the extent you have given us consent to do so.
The processing is necessary for our legitimate interests, namely administering the Services and our Website, and for communicating with you effectively to respond to your queries or complaints.
Parties we may share your information with
We may share this information with Google LLC when we upload documents or information to Google Drive and with HubSpot UK Holdings Ltd, our client relationship management system.
Employment information.
Such as the name of the company you work for, and information about the business unit you work for, your job title and function.
How we may use it
We may use this information to tailor and provide you or the client with Services.
Legal basis for the processing
Where our agreement to provide Services is with you, the processing is necessary for the performance of a contract between you and us and/or to take steps at your request prior to entering into a contract.
Where our agreement to provide Services is with someone else (such as your employer), the processing is necessary for our legitimate interests and those of our customer, namely administering the Services.
Parties we may share your information with
We may share this information with Google LLC when we upload documents or information to Google Drive and with HubSpot UK Holdings Ltd, our client relationship management system.
Correspondence, instructions and comments.
When you contact us directly, e.g. by email, phone, mail, or when you complete an online form, we will record your comments and opinions.
How we may use it
We may use this information to provide the Services in accordance with our customers’ instructions and to respond to your questions, issues and concerns.
We may use this information to tailor the Services to your or our customer’s requirements, deal with complaints made by or about you relating to the Services and monitor and improve our Services.
We may use this information to determine products, services, news and other information that we believe may be of interest to you.
We may use this information to promote our Services, such as using your feedback in promotional publications or communications.
Legal basis for the processing
Where our agreement to provide Services is with you, the processing is necessary for the performance of a contract between you and us and/or to take steps at your request prior to entering into a contract.
Where our agreement to provide Services is with someone else (such as your employer), the processing is necessary for our legitimate interests and those of our customer, namely administering the Services.
The processing is necessary for our legitimate interests, namely communicating with customers, tailoring our service to customers and improving our Services generally; the processing is also necessary for your legitimate interests and those of our customers, namely receiving the Services.
The processing is necessary for our legitimate interests, namely informing our direct marketing.
We will only process your personal data in this way to the extent that you have given us your consent.
Parties we may share your information with
We may share this information with Google LLC when we upload documents or information to Google Drive and with HubSpot UK Holdings Ltd, our client relationship management system.
Payment and transaction information.
Payment information, such as your credit card or bank details, and other information, such as the date and time of your transaction.
How we may use it
We may use this information to facilitate transactions made in connection with the provision of the Services.
We may use this information to detect and prevent fraud.
Legal basis for the processing
Where our agreement to provide Services is with you, the processing is necessary for the performance of a contract between you and us and/or to take steps at your request prior to entering into a contract.
Where our agreement to provide Services is with someone else (such as your employer), the processing is necessary for our legitimate interests and those of our customer, namely administering the Services.
The processing is necessary for our legitimate interests, namely the detection and prevention of fraud.
Information about the project.
Information regarding the project or services that we have been engaged to provide may contain personal information about you.
How we may use it
We may use this information to provide the Services in accordance with our customer’s instructions and to tailor the Services to your or our customer’s requirements.
We may use this information to determine products, services, news and other information that we believe may be of interest to you.
We may use this information to promote our Services, such as by providing a description of the project in promotional publications or communications.
Legal basis for the processing
Where our agreement to provide Services is with you, the processing is necessary for the performance of a contract between you and us and/or to take steps at your request prior to entering into a contract.
Where our agreement to provide Services is with someone else (such as your employer), the processing is necessary for our legitimate interests and those of our customer, namely administering the Services.
The processing is necessary for our legitimate interests, namely informing our direct marketing.
We will only process your personal data in this way to the extent that you have given us your consent.
Parties we may share your information with
We may share this information with Google LLC when we upload documents or information to Google Drive and with HubSpot UK Holdings Ltd, our client relationship management system.
Information provided by third parties.
From time to time, we may receive information about you from customers or third parties. We may obtain information from third parties to enhance or supplement our existing information about you. We may also collect information about you that is publicly available.
How we may use it
We may combine this information with the information we collect from you directly. We use this information to contact you or provide the Services in accordance with our customer’s instructions.
Legal basis for the processing
Where our agreement to provide Services is with you, the processing is necessary for the performance of a contract between you and us and/or to take steps at your request prior to entering into a contract.
Where our agreement to provide Services is with someone else (such as your employer), the processing is necessary for our legitimate interests and those of our customer, namely administering the Services.
Parties we may share your information with
We may share this information with Google LLC when we upload documents or information to Google Drive and with HubSpot UK Holdings Ltd, our client relationship management system.
Preferences
The preferencesthat you set for notifications, marketing communications, how our Services are provided and how our Website is displayed.
How we may use it
We may use this information to provide notifications, send news, alerts and marketing communications and provide our Services in accordance with your choices.
We may use this information to ensure that we comply with our legal obligation to send only those marketing communications to which you have consented.
Legal basis for the processing
The processing is necessary for our legitimate interest, namely ensuring the user receives the correct marketing and other communications.
The processing is necessary for compliance with a legal obligation to which we are subject.
Parties we may share your information with
We may share this information with Google LLC when we upload documents or information to Google Drive and with HubSpot UK Holdings Ltd, our client relationship management system.
All personal information set out above.
How we may use it
We may use all the personal information we collect to operate, maintain and provide to you our Services, to communicate with you, to monitor and improve our Services, our Website and business, and to help us develop new products and services.
Legal basis for the processing
The processing is necessary for our legitimate interests, namely to administer and improve the Services and/or our business and to develop new services.