Legal
Privacy Notice
This notice explains what Novalk Technologies and its service providers may receive when you visit this website or get in touch, why it is used, and what control you have over it.
Last updated: 2 September 2026
Who we are
This website is operated by NOVALK TECHNOLOGIES LTD, company number 16648348. NOVALK TECHNOLOGIES LTD is responsible for the personal information described in this notice.
Registered office: 45 Blackthorn Road, Bristol, England, BS13 0AL.
Registered in England and Wales.
Data protection contact: privacy@novalktechnologies.com.
Information we collect
When you submit a form on this website, we receive the information you enter, together with the page from which the form was submitted and the time it was received. We use that information for the purpose described below for that form.
The forms on this website collect: your email address; the Novalk product you selected; the page you signed up from; the exact consent wording and its version; the time the request was received by our server.
If you email one of the addresses published on this website, we receive whatever you choose to include in that message — typically your name, your email address, and the details of your enquiry.
We also handle: technical website information that our website hosting and application-runtime provider may process when serving the site, including IP address and approximate location, browser, device or session information, requested pages or features, timestamps, referrer information, and error or diagnostic information; email content, attachments, and delivery or security metadata when someone chooses to email Novalk.
Why we use it, and our lawful basis
To receive, assess and respond to enquiries, and to manage any resulting business conversation — lawful basis: legitimate interests. Our legitimate interest is communicating with people who contact us and operating and developing Novalk’s business.
To handle privacy rights requests and data-protection complaints — lawful basis: legal obligation.
To deliver, secure, maintain and troubleshoot this website — lawful basis: legitimate interests. Our legitimate interest is operating a secure and reliable website, preventing misuse, and diagnosing technical problems.
To send you the product updates you asked for about the specific Novalk product you selected — lawful basis: consent.
Information you must provide
your email address — if this is not provided, we cannot send you the confirmation email or the product updates you asked for.
the Novalk product you selected — if this is not provided, we cannot tell which product's updates you want to receive.
your ticked consent box — if this is not provided, we cannot register you, because consent is our lawful basis for sending updates.
Product updates
Product updates are only sent when you actively opt in to updates about a specific Novalk product on this website, and we use your email address for that purpose on the basis of that consent.
The opt-in you are asked to agree to reads: “I agree to receive Novalk product updates about the Novalk product you selected. Novalk will send a confirmation email, and I can unsubscribe at any time.” — the product named in that sentence is always the exact Novalk product whose page you signed up from, taken from our published product list and never from anything you type.
You can withdraw that consent at any time. Every update includes a way to unsubscribe. In this first version unsubscribing is global: it stops every Novalk product update, not only the product you selected.
Product update registration
Signing up for product updates is entirely optional. It is not required to browse this website, and it has no effect on access to any Novalk product or app.
We collect your email address, the Novalk product you selected, the page you signed up from, the exact consent wording and its version, and the time your request reached our server. We do not collect your name, a message, a date of birth, or any other free text on this form.
We use that information only to send the product updates you asked for about the product you selected. Our lawful basis is your consent. Choosing one product never signs you up to general Novalk news, and we never sell personal information.
The information is handled by our website hosting and application-runtime provider, by our database, authentication and server-function infrastructure provider, by a bot-verification service that checks the request is not automated, and by a third-party email-marketing and subscription-management provider that processes the subscription and sends the confirmation email and product updates.
You can withdraw your consent at any time. Every update email includes an unsubscribe link, and you can also write to privacy@novalktechnologies.com. Unsubscribing is global: it stops every Novalk product update, not only the product you selected. Withdrawing consent does not affect anything done before you withdrew it.
If you never confirm your subscription, we delete the unconfirmed request within seven days. Once confirmed, we keep your registration for as long as you remain interested through the relevant launch or update campaign, and we delete or anonymise it within 90 days of the final update you asked for, subject to a review at 24 months at the latest.
After you withdraw consent we keep the minimum evidence needed to make sure you are not contacted again, and we review that record annually.
We do not track whether you open an update email or click a link in it, and this signup sets no cookie and raises no analytics event.
Who we share it with
A website hosting and application-runtime provider hosts and delivers this website and may process IP address, approximate location, browser and device information, requested pages, timestamps, and diagnostic or error information. That provider states that ordinary service log data is retained for up to 90 days unless law requires longer.
A database, authentication and server-function infrastructure provider operates the backend services behind this website and processes product-update registration data submitted through the signup form.
A business email provider carries correspondence that people choose to start with Novalk and processes sender and recipient addresses, message content, attachments, and delivery or security metadata. That provider states that residual backup copies of deleted service data may remain for up to three months.
Domain infrastructure
A domain registration and authoritative DNS provider holds Novalk’s registration, account and DNS configuration information. It does not receive the content of enquiries sent to Novalk’s mailboxes.
International transfers
Personal information may be transferred to the European Economic Area, which our business email provider states is where mailbox data is stored; India, in rare cases where business email provider personnel remotely access EU service data for technical support; the United States and other countries used by our website hosting, application-runtime and backend infrastructure providers.
Our business email provider states that mailbox data is stored in the European Economic Area, which is covered by UK adequacy regulations, and that its employees in India may, on rare occasions, remotely access EU service data for technical support under Standard Contractual Clauses, a transfer-impact assessment and supplementary measures. Our website hosting, application-runtime and backend infrastructure providers are based in the United States and state that transfers from the UK or EEA to non-adequate jurisdictions are protected using the EU Standard Contractual Clauses and UK International Data Transfer Addendum. These are the providers’ own published statements. Novalk cannot guarantee the country or region in which every provider processes information at a given moment, and personal information may therefore be processed outside the UK. Contact privacy@novalktechnologies.com for further information about these safeguards.
Retention
Routine email enquiries and related correspondence are kept for up to 12 months after the last contact. We may keep information for longer where reasonably necessary for an ongoing business relationship, contract, accounting requirement, dispute, or legal obligation, and delete it when that need ends.
How we protect it
Novalk limits access to its enquiry inboxes to the founder. The website has no visitor account registration, and the optional product-update signup is protected by a bot-verification check and rate limiting. Service providers apply their own access and security controls to the services they operate.
Your rights
You can ask what information we hold about you, ask for a copy of it, ask for it to be corrected or deleted, and ask us to restrict or stop using it.
You can also ask us to transfer certain information you gave us to you or to another organisation in a structured, commonly used, machine-readable format, where the legal conditions for data portability apply.
Where we rely on your consent, you can withdraw that consent at any time. Withdrawing consent does not affect anything done before you withdrew it.
We normally respond to rights requests without undue delay and within one month, subject to any extension permitted by law.
You also have the right to complain to the Information Commissioner’s Office (ICO).
Your right to object
You have the right to object to processing based on our legitimate interests. We will stop unless we have compelling legitimate grounds that override your interests, rights and freedoms, or the processing is needed for legal claims.
Raising a concern with us
Privacy complaints are handled by NOVALK TECHNOLOGIES LTD through privacy@novalktechnologies.com.
We acknowledge data-protection complaints within 30 days.
Without undue delay, we make appropriate enquiries, keep you informed of progress and tell you the outcome.
Children and our audience
This corporate website is not directed at children, and Novalk does not knowingly seek personal information from children through it.
Changes to this notice
We keep this privacy notice under review and may update it when our website, service providers, processing activities or legal obligations change. We will publish the revised notice on this page and update the “Last updated” date.
If we intend to use personal information already held for a new purpose, we will first assess whether that purpose is compatible with the original purpose and identify an appropriate lawful basis. We will update this notice and, where required, bring the change directly to affected people before the new processing begins. Where the law requires consent, we will obtain it first.
Contact
For privacy questions or to exercise any of these rights, contact privacy@novalktechnologies.com.