Privacy Policy

This page is maintained by Novara Client Systems to explain how we handle personal data collected through this website, including our contact form, call booking system, and the Business Check quiz and report. It is written to meet UK GDPR and EU GDPR transparency requirements. It is not legal advice; if you have specific compliance requirements you should consult a qualified professional.

Who we are (data controller)

Novara Client Systems is the data controller for personal data collected through this website. You can reach us for any privacy matter using the contact form on our homepage, and we will reply by email.

What we collect and why

1. Contact form

• Name and email address.
• Business details you choose to share, such as business name, number of clients, and what you need help with.
• Any additional information you include in your message.

We use this only to reply to your enquiry and, if relevant, to scope the work you are asking about.

2. Booking a call

• Name, email address, and (optionally) phone number.
• The challenges or gaps you select, any notes you add, and the date and time slot you choose.

We use this to create the calendar event, generate the video call link, send your confirmation email, and prepare for the call. A calendar entry containing your name, email, and booking notes is created in our Google Calendar so the meeting and its video link exist.

3. Business Check quiz and report

• Name, email address, and (optionally) phone number.
• Your answers about your business — for example trade type, team size, main bottleneck, and how you currently handle quotes, jobs, and admin.
• The score and written report generated from those answers, which we store alongside your submission.

Your quiz answers are sent to a third-party AI provider (via the Lovable AI Gateway, which routes to models such as OpenAI's) to generate your personalised report. We do not send special category data, and you should not enter any. The report is automated feedback only: it produces no legal or similarly significant effect, and a real person reviews anything that leads to a proposal or engagement. If the AI service is unavailable we show a standard, non-personalised report instead. We email your report to you and a copy of your submission to us so we can follow up.

4. Technical data

When you visit the site we process standard technical information (such as IP-derived approximate location, device and browser type, and referring page) to keep the site secure and understand how it is used. See our Cookie Policy for details on cookies and similar technologies.

Legal bases for processing (UK/EU GDPR)

• Consent (Art. 6(1)(a)) — when you voluntarily submit the contact form, booking form, or Business Check quiz, and when you receive the report or follow-up email you asked for. You can withdraw consent at any time.
• Contract / pre-contractual steps (Art. 6(1)(b)) — to arrange and hold your call and to scope and deliver services you request.
• Legitimate interests (Art. 6(1)(f)) — to secure and maintain the website, prevent spam and abuse (including the hidden anti-spam field on our forms), keep records of enquiries, and understand aggregate site usage. We balance these interests against your rights.
• Legal obligation (Art. 6(1)(c)) — to keep records we are required by law to retain.

Providing your data is voluntary, but without a name and email we cannot reply to an enquiry, confirm a booking, or send you a report.

Who we share data with (processors)

We do not sell your personal data and we do not share it for third-party advertising. We use the following categories of service providers, acting on our instructions:

• Website hosting and database — to run this site and store form, booking, and quiz submissions.
• Email delivery — to send confirmation emails, reports, and our internal notifications.
• Google Calendar / Google Meet — to create your booked call and its video link.
• AI processing — to generate your Business Check report from the answers you provide.

We may also disclose data where required by law or to establish, exercise, or defend legal claims.

International transfers

Some of these providers process data outside the UK/EEA, including in the United States. Where that happens, transfers are covered by appropriate safeguards such as the UK International Data Transfer Addendum or the EU Standard Contractual Clauses, or an adequacy decision where one applies.

How long we keep it

• Contact and quiz submissions: up to 24 months from your last contact with us, unless you ask us to delete them sooner.
• Bookings and calendar entries: up to 24 months after the call, unless the enquiry becomes a client engagement.
• Client records: for the duration of the engagement plus any period we are legally required to keep them (for example tax and accounting records).

After these periods we delete the data or keep it only in aggregated, non-identifying form.

Automated decision-making

The Business Check score and report are generated automatically from your answers. This is informational feedback and is not used to make any decision producing legal or similarly significant effects about you. You can ask us to review or explain any part of your report.

Your rights

Under UK/EU GDPR you have the right to access your data, to have inaccurate data corrected, to have your data erased, to restrict or object to processing (including profiling), to data portability, and to withdraw consent at any time without affecting processing carried out before withdrawal. To exercise any of these rights, contact us using the form on our homepage. We respond within one month.

If you are unhappy with how we handle your data, you can complain to the UK Information Commissioner's Office (ico.org.uk) or to your local EU supervisory authority.

Security

We take reasonable technical and organisational measures to protect your information, including encrypted connections, access controls on our admin area, and restricting submission data to authorised administrators. No online service can be guaranteed 100% secure.

Children

This website is intended for business audiences and is not directed to children under 16. We do not knowingly collect their data.

Changes

We may update this policy from time to time. The date at the top reflects the latest revision.

Contact

For privacy questions, deletion requests, or any other data protection matter, please use the contact form on our homepage and mark your message "Privacy request".