Last updated June 2025

This privacy notice explains how I collect, use, share, and protect your personal data in compliance with the UK General Data Protection Regulation (UK GDPR). If you have any concerns about how your data is handled, you have the right to lodge a complaint with the Information Commissioner’s Office (ICO), the UK’s supervisory authority for data protection (www.ico.org.uk). However, I’d appreciate the opportunity to address your concerns directly, so please don’t hesitate to contact me first to resolve any issues.

Data Controller:  Nova Locks

Call: +44 (0)7796 267547

Email: nova@novalocks.co.uk

Collected Personal Data

Personal data collected may include your full name, email address, postal address, phone number, and date of birth. I gather this information to deliver my services, communicate with you effectively, and provide a personalised experience.

Purpose of collecting data

I collect data to provide you with a personalised service, keep you informed about my offerings, and respond directly to your enquiries. As a small business, I deeply value your trust and am fully committed to handling your information responsibly and in compliance with data protection laws.

Data Sharing

Personal data may be shared with trusted third-party service providers who assist me in operating my website and delivering my services. These providers are contractually required to handle your data securely, use it solely for the purposes I specify, and comply with all applicable data protection laws.

Additionally, personal data may be disclosed if I am required to comply with legal or regulatory obligations.

Data Protection

Personal data is stored securely, and I take appropriate measures to protect it from accidental loss, unauthorized use or access, alteration, or disclosure. I have procedures in place to handle any suspected personal data breaches, and I will notify you and any applicable regulator of a breach if I am legally required to do so.

Data Retention

Personal data is retained only for as long as necessary to fulfil the purposes for which it was collected, including meeting any legal, accounting, or reporting obligations. By law, I am required to retain basic information (such as contact, financial, and transaction data) for a minimum of six years for tax purposes.

In some cases, personal data may be anonymised (so it can no longer be linked to you) and used for research or statistical purposes. In such instances, this anonymised data may be retained and used indefinitely without further notice.

Data Legal Rights

Under data protection laws, you have specific rights regarding your personal data. These include the right to request access to your data, request corrections, request erasure, object to processing, restrict processing, request data transfer, or withdraw consent where applicable. If you wish to exercise any of these rights, please contact me directly.

In some cases, I may need to request additional information to verify your identity before processing your request. This is a security measure to ensure that personal data is not disclosed to anyone who does not have the right to access it. I may also reach out for further details to help me respond to your request more efficiently. Please note that certain requests may be refused under specific circumstances, such as where legal obligations prevent me from complying.

Cookies and Tracking Technologies

My website may use cookies and similar tracking technologies to enhance your browsing experience and analyse website traffic.

Changes to the Privacy Policy

The Privacy Policy may be updated at any time to reflect changes to my data processes or legal requirements. The latest version will always be available on my website.