1. Who we are
This website, novovitabio.com, is operated by NovovitaBio ("we", "us", "our"). For the personal information described in this policy, NovovitaBio is the "controller", meaning we decide how and why it is used.
If you have any question about this policy or about your personal information, contact us at contact@novovitabio.com.
2. Information we collect
We collect only what we need to run this website and respond to you.
- Information you give us through the contact form: your name, email address, phone number (optional), organisation (optional), the service you are interested in, and your message. We also record the date and time of the submission.
- Information you send us by email or other correspondence, including anything you choose to include in it.
- Technical information collected automatically by our web server when you visit: your IP address, the pages requested, the date and time, and basic browser and device details (such as the user-agent string). This appears in standard server logs.
Please do not include patient-identifiable information, health records or other sensitive personal data in the contact form or in a first email. If your project involves such data, tell us in general terms and we will explain how it can be handled appropriately before anything is shared.
3. How we use your information and our legal bases
Where data protection law such as the EU or UK General Data Protection Regulation applies, we must have a lawful basis for using your personal information. Ours are:
- To read and respond to your enquiry and keep a record of it: your consent, which you give by ticking the box on the contact form, and, if you go on to ask for our services, taking steps at your request before entering into a contract.
- To keep the website and our systems secure, prevent spam and abuse, and fix faults: our legitimate interests in operating a safe and reliable website.
- To comply with legal obligations and to establish, exercise or defend legal claims: legal obligation and legitimate interests.
We do not use your information for automated decision-making or profiling, and we do not use it to send marketing messages unless you separately agree to receive them.
4. Spam protection and security monitoring
To protect the contact form we use automated measures, including limiting how many submissions can come from one network address in a given period, a hidden field that real visitors do not fill in, and a check on how quickly a form is submitted. These checks use technical signals such as your IP address and timing. They run automatically and do not involve any decision about you personally.
6. International transfers
Some of our service providers may process information in countries outside your own. Where personal information is transferred out of the UK or European Economic Area, we take steps to ensure it remains protected, for example by using providers that rely on approved transfer mechanisms such as standard contractual clauses or an adequacy decision.
7. How long we keep information
- Enquiries: kept for up to 24 months after our last communication with you, then deleted. If you become a client, we keep the information we need for the engagement and for as long as the law requires, for example for accounting and tax records.
- Server logs: kept for no longer than 90 days.
- Backups: our systems are backed up on a rolling basis, and deleted information is removed from backups within 30 days.
We may keep information for longer where we need it to resolve a dispute or comply with a legal obligation.
8. How we protect your information
We use technical and organisational measures appropriate to the risk, including encrypted connections (HTTPS) between your browser and this website, restricted access to stored enquiries, validation of everything submitted through the website, rate limiting, security headers, and regular software updates. Our database is not exposed to the public internet.
No system is completely secure, and we cannot guarantee the security of information sent over the internet. If a personal data breach occurs that is likely to put your rights at risk, we will notify you and the relevant authority as the law requires. If you find a security problem on this website, please report it to contact@novovitabio.com.
10. Your rights
Depending on where you live, you may have the right to:
- be told about and access the personal information we hold about you;
- have inaccurate information corrected;
- have your information erased;
- restrict or object to our use of your information;
- receive the information you gave us in a portable format;
- withdraw your consent at any time, without affecting the lawfulness of what we did before you withdrew it.
To exercise any of these rights, email contact@novovitabio.com. We may need to confirm your identity first, and we will respond within the time required by law, normally one month.
11. Complaints
We would like the chance to put things right, so please contact us first. You also have the right to complain to the data protection authority in the country where you live or work, for example the Information Commissioner's Office in the United Kingdom.
12. Children
This website and our services are intended for adults and organisations. We do not knowingly collect personal information from children. If you believe a child has sent us personal information, contact us and we will delete it.
13. Links to other websites
If this website links to other sites, we are not responsible for their content or privacy practices. Please read their policies before giving them any personal information.
14. Changes to this policy
We may update this policy from time to time. The current version is always the one published on this page, and we will make any significant change clear on this website.
15. Contact us
For any privacy question or request, email contact@novovitabio.com.