Privacy Policy

1. Who we are

Novaratech Ltd, trading as NovaraTech, is the controller of the personal data described in this policy.

Company number: 16741821

Registered office: Piccadilly Business Centre, Unit C Aldow Enterprise Park, Blackett Street, Manchester, England, M12 6AE

Privacy contact: info@novaratech.co.uk

2. Personal data we collect

Please do not send special-category personal data or confidential production data through the website enquiry form.

3. How and why we use personal data

To respond to enquiries and take pre-contract steps

We use contact and enquiry information to understand your requirements, arrange discussions and prepare proposals. Our lawful basis is taking steps at your request before entering a contract and, for business contacts, our legitimate interest in developing and managing our business.

To deliver and manage services

We use project, user and business information to provide consulting, ERP implementation, automation, training, hosting and support. Our lawful bases are performance of a contract and our legitimate interests in delivering and administering services.

To invoice, keep records and meet legal duties

We use billing and transaction information to administer payments, maintain accounts and comply with tax, legal and regulatory requirements. Our lawful bases are performance of a contract and compliance with legal obligations.

To operate and secure our systems

We may use technical and account information to maintain availability, prevent misuse, investigate incidents and protect our systems and users. Our lawful basis is our legitimate interest in operating secure and reliable services and, where applicable, compliance with legal obligations.

Business communications

We may send relevant service or business communications to existing business contacts where permitted by law. Our lawful basis is legitimate interests. Where consent is required, we will ask for it. You may opt out of marketing at any time by emailing us.

4. Sharing personal data

We do not sell personal data. We may share it only where necessary with:

• hosting, cloud, email, communications and IT-security providers;
• professional advisers, insurers, auditors and payment or banking providers;
• authorised delivery personnel and subcontractors working under confidentiality and data-protection obligations;
• public authorities, regulators, courts or law-enforcement bodies where required by law; and
• a purchaser or adviser involved in a genuine corporate transaction, subject to suitable safeguards.

Where we process personal data contained in a client system solely on that client's instructions, the client will normally be the controller and Novaratech Ltd will act as processor under the relevant service agreement or data processing agreement.

5. International transfers

Our service providers or authorised delivery personnel may access personal data from outside the UK where this is necessary for service delivery. When UK data-protection law requires a safeguard, we use an applicable adequacy regulation, the UK International Data Transfer Agreement, the UK Addendum to approved standard contractual clauses, or another lawful mechanism. You may request further information about relevant safeguards by contacting us.

6. Retention and security

We retain enquiry records for up to 24 months after the last meaningful contact. Contract, project and support records are normally kept for the contract term and up to six years afterwards. Accounting and tax records are normally kept for six years after the relevant financial year, or longer where law or a dispute requires it. Technical security logs are retained only for as long as reasonably necessary for security and operational purposes.

We use proportionate organisational and technical measures designed to protect personal data. No online system can be guaranteed completely secure.

7. Your rights

Depending on the circumstances, you may have rights to access, correct, erase or restrict your personal data, object to its use, and receive certain data in a portable format. Where processing relies on consent, you may withdraw that consent at any time without affecting earlier lawful processing.

Your right to object: you may object at any time to direct marketing. You may also object to processing based on legitimate interests, although we may continue where we have compelling lawful grounds.

We do not use personal data to make solely automated decisions that produce legal or similarly significant effects. To exercise a right, email info@novaratech.co.uk. We may need to verify your identity.

8. Cookies and third-party links

Our current use of cookies and similar technologies is explained in our Cookie Policy. Our website may link to third-party websites. Their privacy practices are controlled by them, so you should review their notices.

9. Complaints and changes

Please contact us first if you have a concern. You also have the right to complain to the UK Information Commissioner's Office at ico.org.uk/make-a-complaint or by calling 0303 123 1113.

We may update this policy when our services, technology or legal obligations change. The effective date at the top identifies the current version.