Privacy Policy
Last updated:
This policy explains what happens to personal information when you use novita.digital. It covers this website only. Our own products, including Sourca, have their own policies.
Who we are
novità (“we”, “us”) is a software studio based in Sri Lanka, working with clients worldwide.
- Legal entity:
- Registration number:
- Registered address:
- Contact:
For UK and EU visitors, we are the data controller for the information described below.
What we collect
When you send an enquiry
Our enquiry forms ask for:
| Field | Required |
|---|---|
| Name | Yes |
| Email address | Yes |
| Phone number | Only on some forms |
| Business or brand name | No |
| Type of business | No |
| What you need, budget or plan of interest, timeline | No |
| Anything you write in the message box | No |
We also record which form you used, so we know where an enquiry came from.
Please do not send confidential or sensitive information through the form. If you need to share something sensitive, ask us and we will arrange a better way.
Technical information
- Anti-spam rate limiting. When a form is submitted we store a one-way hash of the sender’s IP address for 10 minutes, purely to stop the form being flooded. The hash is deleted automatically and is not used for anything else.
- Server logs. Our host keeps standard web server logs, which include IP addresses. We do not use these for analytics.
- Cookies. This site sets no tracking or advertising cookies. WordPress sets a session cookie only for people who log in to administer the site.
Why we use it, and our lawful basis
| Purpose | Lawful basis (UK/EU GDPR) |
|---|---|
| Replying to your enquiry and discussing the work | Steps taken at your request before entering a contract |
| Keeping a record of enquiries and clients | Legitimate interests, running and accounting for the business |
| Preventing spam and abuse of the form | Legitimate interests, keeping the site usable |
We do not use your details for marketing unless you separately ask us to, and we do not sell or rent them to anyone.
Who else sees it
- Our own CRM. Enquiries are sent from this website to a system we operate at `erp.novita.digital` and are handled there. They are not published, and access is limited to people working on your enquiry.
- Hosting. The site and that system are hosted by Hostinger, who process data on our behalf as our hosting provider.
- Google Fonts. This site loads its typeface from Google’s font servers (`fonts.googleapis.com` and `fonts.gstatic.com`). When a page loads, your browser requests the font directly from Google, and Google therefore receives your IP address and basic request information. Google states that it does not use these requests to build advertising profiles; their handling of the data is covered by Google’s own privacy policy.
- Professional advisers and authorities, where we are legally required to disclose something.
Where your information goes
We are based in Sri Lanka, and our hosting and systems may process data outside your country. If you are in the UK or EU, this means your information may be transferred outside the UK/EEA. [YOUR LAWYER SHOULD CONFIRM WHICH SAFEGUARD YOU RELY ON, E.G. STANDARD CONTRACTUAL CLAUSES WITH YOUR HOST.]
How long we keep it
- Enquiries that do not become work: up to months, then deleted.
- Client records: for the life of the engagement and afterwards for as long as we are required to keep business and tax records. [CONFIRM THE PERIOD YOUR ACCOUNTANT REQUIRES.]
- Rate-limit hashes: 10 minutes.
Your rights
Depending on where you live, you may have the right to ask us to give you a copy of your information, correct it, delete it, restrict or object to how we use it, or provide it in a portable form. You can also withdraw consent where we relied on it.
Email and we will respond within days. If you are in the UK or EU and are unhappy with our response, you can complain to your data protection authority.
Children
This site is aimed at businesses and is not intended for children. We do not knowingly collect information about anyone under 16.
Security
Enquiries are sent over an encrypted connection and relayed to our systems from our server rather than from your browser, so the destination is not exposed publicly. No system is perfectly secure, but we take reasonable measures to protect what we hold.
Changes
If we change this policy we will update the date at the top. Material changes will be noted on this page.
