Privacy policy.

Who we are

What data we collect

When you fill in our contact form

When you visit the website

When you become a client

How we use your data

Lawful basis

Who we share data with

Cookies and tracking

How long we keep it

Your rights

Changes to this policy

Contact and complaints

How NovaStory collects, uses and protects your personal data. This policy is written for UK GDPR (the Data Protection Act 2018 and UK GDPR) and the Privacy and Electronic Communications Regulations (PECR).

We only collect what we need to respond to enquiries, deliver our service, and run our website.

We will never sell your data. We will not use it for purposes you haven't agreed to.

We rely on the following lawful bases under UK GDPR:

We only share data with trusted processors who help us run the business:

The specific list of processors is reviewed regularly. If you'd like the current list, email us, we'll share it.

We use only essential cookies by default, strictly what's needed to make the website work. Non-essential cookies (analytics, advertising, social) are loaded only after you give consent via our cookie banner.

You can change your cookie preferences at any time from the cookie banner footer link. You can also block or delete cookies through your browser settings.

We use Google Tag Manager to load our analytics and advertising tags. When you consent, this may include Google Analytics, Google Ads, Meta Pixel and LinkedIn Insight Tag.

Under UK GDPR you have the right to:

We may update this policy from time to time. The "last updated" date at the top of this page reflects the most recent revision. If we make material changes we'll make that clear on the site.