Privacy policy
Who we are
Noevus Technologies Ltd is a platform studio that designs and builds software products for clients, and operates its own platforms. We are registered in England and Wales under company number 17116068.
For the purposes of UK data protection law, we are the controller of the personal data described in this policy.
- Registered office: 31a Nottingham Road, Nottingham NG16 1DH
- Contact: hello@noevustech.com
- Data protection contact: hello@noevustech.com
What this policy covers
This policy explains what we do with personal data collected through noevustech.com.
It does not cover personal data we process on behalf of a client within a platform we have built for them. In those cases the client is the controller and their own privacy policy applies; we act as their processor under a written contract.
The personal data we collect
We collect only what you give us, plus a minimal record of pages viewed.
Enquiries
When you use the contact form we collect your name, email address, company (if you give one), the type of enquiry, and the message you write.
Job applications
When you apply for a role we collect your name, email address, phone number (if you give one), a link to your professional profile (if you give one), your CV file, and anything you write in your covering note.
Analytics
We record page views without cookies and without tracking you across websites. Each view is stored with the page address, the referring site, a coarse device type, and a session identifier derived by a one-way hash that changes every day. The hash cannot be reversed, and because it changes daily it cannot be used to follow you from one day to the next.
Information we do not collect
We do not collect special category data, we do not use advertising or profiling cookies, and we do not buy personal data from third parties.
Why we use it, and our lawful basis
- Replying to your enquiry — our legitimate interests in responding to people who contact us about our services. You would reasonably expect a reply.
- Assessing a job application — legitimate interests in recruiting for an open role, and taking steps prior to entering into a contract of employment at your request.
- Keeping an application on file after a decision — your consent, which you give on the application form and may withdraw at any time.
- Measuring how the site is used — legitimate interests in understanding which pages are useful. Because the measurement is cookieless and does not identify you, it does not require consent under PECR.
- Meeting our legal and accounting obligations — legal obligation.
Where we rely on legitimate interests, we have considered whether our interest is overridden by your rights and concluded it is not, because the data is limited, expected, and used only for the purpose described.
How long we keep it
- Job applications are automatically anonymised and the CV deleted six months after they are received, unless we have a specific, recorded reason to keep them longer — for example an ongoing recruitment process. You can ask us to delete an application sooner.
- Enquiries — hello@noevustech.com
- Analytics records — hello@noevustech.com
Who we share it with
We do not sell personal data and we do not share it for anyone else's marketing.
We use the following service providers, who process personal data on our instructions under a written contract:
- Supabase — database, file storage and authentication. Hosted in the EU.
- Vercel — website hosting.
- Resend — sending transactional email, such as a reply to your enquiry.
- Anthropic — AI assistance used only on our own administrative content. Enquiries, applications and CVs are not sent to it.
We may also disclose personal data where we are required to by law, or to establish or defend legal claims.
Transfers outside the UK
Some of these providers may process data outside the UK. Where that happens we rely on the safeguards permitted by UK data protection law.
Cookies
We set only two cookies, both strictly necessary:
- one that remembers your cookie preference, so we do not ask again on every page;
- one that keeps an administrator signed in to the private admin area. It is never set for ordinary visitors.
We set no advertising, analytics or cross-site tracking cookies, which is why the banner offers no non-essential options to accept. Our separate cookie policy explains this in more detail.
Your rights
Under UK data protection law you have the right to:
- be told how your data is used — this policy;
- access a copy of the personal data we hold about you;
- have inaccurate data corrected;
- have data erased in certain circumstances;
- restrict or object to our use of it, including objecting to anything based on legitimate interests;
- receive certain data in a portable format;
- withdraw consent at any time where we rely on it, without affecting anything done before you withdrew it.
To exercise any of these, email hello@noevustech.com. We will respond within one month. We may ask you to confirm your identity first, so that we do not disclose your data to someone else.
Complaints
If you are unhappy with how we have handled your personal data, please tell us first so we can put it right.
You also have the right to complain to the Information Commissioner's Office, the UK supervisory authority for data protection, at ico.org.uk.
Security
Access to personal data is restricted to those who need it. The admin area is protected by email-based sign-in and an explicit allowlist, database access is governed by row-level security, and CV files are held in private storage that is never publicly readable and is only ever reachable through a short-lived link issued to a signed-in administrator.
No system is perfectly secure, but we take these measures seriously and review them as the site changes.
Changes to this policy
When we change this policy we publish the new version here with its effective date. The version you are reading is the one in force.