Privacy Policy

1. Who We Are and Who Controls Your Data

NOVE SOLIDA LTD is a digital marketing agency registered in England & Wales (Company No. 11578879). We provide search engine optimisation (SEO), paid advertising, website design and development, and conversion rate optimisation services to clients in the UK, the European Union and internationally.

For the purposes of UK data protection law, NOVE SOLIDA LTD is the “data controller” responsible for your personal data described in this policy. This means we decide how and why your personal data is processed.

If you have any questions about this policy or about how we handle your personal data, you can contact us by email at office@novesolida.com. We do not currently have a statutory obligation to appoint a Data Protection Officer, but all privacy enquiries are handled directly by our team.

2. Definitions

To make this policy easier to read, the following terms have the meanings set out below:

• “Personal Data” means any information relating to an identified or identifiable living individual, such as your name, email address or online identifiers.
• “Processing” means any operation performed on Personal Data, including collecting, storing, using, sharing, disclosing or deleting it.
• “Controller” means the organisation that determines the purposes and means of Processing Personal Data — in this case, NOVE SOLIDA LTD.
• “Processor” means a third party that Processes Personal Data on our behalf and under our instructions, such as a hosting or email provider.
• “Cookies” means small text files or similar technologies placed on your device when you visit a website. These are explained in full in our Cookie Policy.
• “UK GDPR” means the United Kingdom General Data Protection Regulation, as supplemented by the Data Protection Act 2018.
• “PECR” means the Privacy and Electronic Communications Regulations 2003.
• “ICO” means the Information Commissioner’s Office, the UK’s data protection regulator.

3. The Personal Data We Collect

We collect and process the following categories of Personal Data:

• Contact and enquiry data: when you complete our contact form or email us, we collect your name, email address, company or organisation name (if provided), the service you are interested in, and the contents of your message. We may also collect any other information you choose to include in your communications with us.
• Client and business data: if you become a client, we may process information needed to deliver our services and manage our relationship, such as billing contact details, account or campaign information, and correspondence. The exact data depends on the services we provide to you.
• Technical and usage data: when you visit our website, our hosting provider and servers may automatically collect technical information such as your IP address, browser type and version, operating system, referring website, the pages you view, and the date and time of your visit. This is recorded in standard server logs.
• Cookies and analytics data: we may collect information about how you use our website through cookies and similar technologies. Where these are non-essential (for example analytics or advertising cookies), we only set them with your consent. See our Cookie Policy for full details.
• Communications data: a record of any correspondence between you and us, including emails, form submissions and notes from calls or meetings.

We do not knowingly collect special category data (such as data about health, race, religion or political opinions). Please do not include such information in messages to us unless it is necessary.

4. How We Collect Your Personal Data

We collect Personal Data in the following ways:

• Directly from you, when you complete our contact form, email or call us, request a strategy call, or engage us to provide services.
• Automatically, through your interaction with our website — for example via server logs and, where you have consented, cookies and analytics technologies.
• From third parties, in limited circumstances, such as referrals from existing clients or partners, or publicly available business sources where we are assessing a potential working relationship.

5. Our Legal Bases for Processing

Under UK GDPR, we must have a valid lawful basis for processing your Personal Data. We rely on the following bases, each tied to a specific purpose:

• Consent (Article 6(1)(a)): for setting non-essential cookies (such as analytics and advertising cookies) and for sending you any marketing communications. You can withdraw your consent at any time.
• Contract (Article 6(1)(b)): where processing is necessary to take steps at your request before entering into a contract, or to perform a contract with you — for example to respond to your enquiry, prepare a proposal, and deliver and administer our services.
• Legitimate interests (Article 6(1)(f)): where processing is necessary for our legitimate business interests and these are not overridden by your rights — for example to respond to enquiries, operate and secure our website, keep business records, understand how our website is used, and grow our business responsibly. Where we rely on legitimate interests, we balance our interests against your rights and you have the right to object.
• Legal obligation (Article 6(1)(c)): where processing is necessary to comply with our legal and regulatory obligations — for example retaining accounting and tax records, or responding to lawful requests from authorities.

6. How We Use Your Personal Data

We use your Personal Data for the following purposes:

• To respond to your enquiries, answer questions and arrange strategy calls or meetings.
• To provide, manage and improve our services and to administer our relationship with you as a client.
• To operate, maintain, secure and improve our website and to ensure it functions correctly.
• To understand how visitors use our website and to measure the performance of our marketing — where you have given consent for analytics.
• To send you relevant updates or marketing communications where you have asked to receive them or have otherwise consented, and to manage your communication preferences.
• To keep accurate business, accounting and tax records and to comply with our legal obligations.
• To detect, prevent and address fraud, security issues, technical problems or misuse of our website.

7. Who We Share Your Personal Data With

We do not sell your Personal Data. We may share it with the following categories of recipients, only where necessary and subject to appropriate safeguards:

• Hosting and infrastructure providers, who host our website and store data on our behalf.
• Email and communication providers, which we use to receive enquiries and correspond with you.
• Google Fonts: our website loads fonts hosted by Google. This involves a request to a Google server, which may receive your IP address and browser information in order to deliver the fonts. No fonts cookies are set by this process.
• Analytics providers, such as Google Analytics, which we may use to understand website usage. These are only activated where you have given consent through our cookie banner.
• Advertising and marketing platforms, such as Google Ads, Meta and TikTok, which we may use in future to measure advertising performance and reach relevant audiences. Any associated cookies or pixels are only activated with your consent.
• Professional advisers and service providers, such as accountants, auditors, lawyers or IT support, where reasonably necessary.
• Regulators, law enforcement or other authorities, where we are required to do so by law or to protect our legal rights.
• Successors in the event of a sale, merger or reorganisation of our business, subject to appropriate confidentiality protections.

Where third parties process Personal Data on our behalf as Processors, we put in place written agreements requiring them to keep your data secure and to process it only on our instructions and in line with data protection law.

8. International Data Transfers

We work with clients in the UK, the EU and internationally, and some of our service providers (such as hosting, email, analytics and advertising platforms) may process Personal Data outside the United Kingdom.

Where we transfer Personal Data outside the UK, we ensure an appropriate level of protection by relying on one of the following safeguards: a transfer to a country covered by UK adequacy regulations; the International Data Transfer Agreement (IDTA) or the UK Addendum to the EU Standard Contractual Clauses; or another lawful transfer mechanism recognised under UK GDPR.

You can contact us at office@novesolida.com if you would like more information about the safeguards we use for international transfers.

9. How Long We Keep Your Personal Data

We keep your Personal Data only for as long as necessary for the purposes for which it was collected, including to satisfy any legal, accounting or reporting requirements. The retention period depends on the type of data and the reason we hold it:

• Enquiry and contact data: where an enquiry does not lead to an ongoing relationship, we typically retain it for up to 24 months so we can respond to follow-up correspondence, after which it is deleted or anonymised.
• Client records: we retain client and project data for the duration of our relationship and for a reasonable period afterwards to handle queries and protect our legal interests.
• Accounting and tax records: we retain financial records for at least six years, as required by UK law.
• Website and analytics data: technical logs and analytics data are retained for limited periods in line with our settings and our providers’ standard retention periods.

When Personal Data is no longer required, we will securely delete or anonymise it.

10. How We Keep Your Personal Data Secure

We take the security of your Personal Data seriously and use appropriate technical and organisational measures to protect it against unauthorised access, loss, misuse or alteration. These measures include encryption of data in transit (HTTPS), access controls, the use of reputable service providers, and limiting access to Personal Data to those who need it.

While we work hard to protect your information, no method of transmission over the internet or electronic storage is completely secure, so we cannot guarantee absolute security. If we become aware of a personal data breach that is likely to result in a risk to your rights, we will notify the ICO and, where required, you, in accordance with our legal obligations.

11. Your Data Protection Rights

Under UK GDPR, you have a number of rights in relation to your Personal Data. Subject to certain conditions and exemptions, these are:

• The right to be informed about how we use your Personal Data — which this policy is designed to provide.
• The right of access — to request a copy of the Personal Data we hold about you.
• The right to rectification — to ask us to correct inaccurate or incomplete data.
• The right to erasure — to ask us to delete your Personal Data in certain circumstances.
• The right to restrict processing — to ask us to limit how we use your data in certain circumstances.
• The right to data portability — to receive certain data in a structured, commonly used, machine-readable format, or to have it transferred to another controller.
• The right to object — to object to processing based on our legitimate interests, and to object to direct marketing at any time.
• The right to withdraw consent — where we rely on your consent (for example for non-essential cookies or marketing), you can withdraw it at any time, without affecting the lawfulness of processing carried out before withdrawal.
• Rights relating to automated decision-making — we do not make decisions about you based solely on automated processing that produce legal or similarly significant effects.

To exercise any of these rights, please contact us at office@novesolida.com. We will respond to your request within one month, although we may extend this period for complex requests, in which case we will let you know. We may need to verify your identity before acting on your request. Exercising your rights is free of charge in most cases, although we may charge a reasonable fee or refuse a request that is clearly unfounded, repetitive or excessive.

12. Your Right to Complain

If you have concerns about how we handle your Personal Data, we would encourage you to contact us first at office@novesolida.com so that we can try to resolve the matter.

You also have the right to lodge a complaint with the Information Commissioner’s Office (ICO), the UK supervisory authority for data protection. You can contact the ICO at www.ico.org.uk, by telephone on 0303 123 1113, or by post at: Information Commissioner’s Office, Wycliffe House, Water Lane, Wilmslow, Cheshire, SK9 5AF.

13. Cookies and Similar Technologies

Our website uses cookies and similar technologies to function correctly and, with your consent, to help us understand how the site is used and to support advertising. Strictly necessary cookies are essential for the website to work and do not require consent. Analytics and marketing cookies are only set where you have given your consent, in line with PECR and UK GDPR.

For full details of the cookies we use, the categories they fall into, and how to manage or withdraw your consent, please see our Cookie Policy. You can also change your cookie settings at any time.

14. Third-Party Links

Our website may contain links to third-party websites, platforms or services that are not operated by us. This Privacy Policy does not apply to those third-party sites. We are not responsible for their privacy practices, and we encourage you to review the privacy policy of any third-party site you visit.

15. Children’s Privacy

Our website and services are intended for businesses and individuals aged 18 and over. We do not knowingly collect Personal Data from children. If you believe that a child has provided us with their Personal Data, please contact us at office@novesolida.com and we will take appropriate steps to delete it.

16. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, technology, legal requirements or other factors. When we make changes, we will revise the “Last updated” date at the top of this policy. Where the changes are significant, we will take reasonable steps to bring them to your attention. We encourage you to review this policy periodically to stay informed about how we protect your Personal Data.

17. How to Contact Us

If you have any questions, requests or concerns about this Privacy Policy or about how we handle your Personal Data, please contact us:

NOVE SOLIDA LTD, a company registered in England & Wales, Company No. 11578879.
Registered office: 262 Uxbridge Road, Hatch End, England, HA5 4HS
Email: office@novesolida.com

Last updated: 22 June 2026