Privacy Policy

Last updated: June 2026

1. Who We Are

The Nova Edit Ltd is a limited company registered in England and Wales. We provide AI-powered marketing, technology strategy, and CRM solutions to independent hospitality businesses.

Contact email: hello@thenovaedit.io Website: www.thenovaedit.io Location: London, UK

2. What This Policy Covers

This Privacy Policy explains how The Nova Edit Ltd ("we", "us", or "our") collects, uses, stores, and protects personal data when you:

Visit and interact with our website at www.thenovaedit.io
Submit an enquiry or book a discovery call via our contact form
Subscribe to our newsletter or marketing communications
Purchase an audit or membership service through our site
Onboard as a client and share business or guest data with us
Access any client portal or login area we provide

We are committed to processing personal data in accordance with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

3. Personal Data We Collect

3.1 Data You Provide Directly

When you interact with us, we may collect the following:

Contact details: name, email address, phone number, business name
Enquiry and message content submitted via our contact form
Payment information (processed securely via Stripe; we do not store your card details)
Login credentials for any client portal or secure area you access
Business and guest data you share with us during client onboarding or service delivery (e.g. CRM data, customer lists, reservation data)

3.2 Data Collected Automatically

When you visit our website, we and our hosting provider (Squarespace) may automatically collect:

IP address and approximate location
Browser type and device information
Pages visited and time spent on site
Referral source (how you found us)

This data is collected via cookies and similar tracking technologies. Please see Section 9 for our Cookie Policy.

4. How We Use Your Personal Data

To respond to your enquiries and manage your discovery call booking Legal basis: Legitimate interests (responding to a direct contact request).

To fulfil your purchase and deliver our services Legal basis: Performance of a contract.

To send you our newsletter and marketing communications (where you have opted in) Legal basis: Consent. You may unsubscribe at any time via the link in any email.

To onboard you as a client and deliver agreed work, including AI-powered tools and CRM services Legal basis: Performance of a contract and legitimate interests.

To provide and maintain any client login or portal access Legal basis: Performance of a contract.

To comply with legal obligations Legal basis: Legal obligation.

5. Sharing Your Data

We do not sell your personal data. We may share it with trusted third parties only where necessary to deliver our services, including:

Squarespace (website hosting and analytics)
Stripe (secure payment processing)
Email marketing platform (to be confirmed — we will update this policy when confirmed)
AI tool providers used in the course of delivering client work (we will always inform you of relevant tools used on your account)
Professional advisers (legal, accounting) under strict confidentiality obligations

All third-party processors are required to handle your data in compliance with applicable data protection law.

6. Client Data and Confidentiality

Where you share business or guest data with us as part of an onboarding or service engagement (for example, customer records, reservation data, or CRM exports), we treat this as confidential and use it solely for the purpose of delivering the agreed services.

We will not access, use, or share this data beyond what is necessary to carry out your instructions. On completion or termination of services, we will return or securely delete this data upon your written request.

7. How Long We Keep Your Data

Contact and enquiry data: up to 2 years from last contact, unless you request earlier deletion
Client contract and financial records: 7 years in accordance with HMRC requirements
Newsletter subscriber data: until you unsubscribe
Client onboarding and project data: for the duration of the engagement plus 12 months, unless otherwise agreed
Login data: for the duration of your active access, then deleted within 30 days of account closure

8. Your Rights

Under UK GDPR, you have the right to:

Access the personal data we hold about you
Correct inaccurate or incomplete data
Request deletion of your data ("right to be forgotten")
Object to or restrict our processing of your data
Withdraw consent at any time (where processing is based on consent)
Data portability — receive your data in a structured, machine-readable format
Lodge a complaint with the Information Commissioner's Office (ICO) at www.ico.org.uk

To exercise any of these rights, please contact us at hello@thenovaedit.io. We will respond within 30 days.

9. Cookies

Our website uses cookies to improve your experience and help us understand how the site is used. Cookies we use include:

Essential cookies: required for the website to function
Analytics cookies: help us understand visitor behaviour (via Squarespace Analytics)
Marketing cookies: used to measure the effectiveness of any campaigns (if applicable)

You can manage or disable cookies through your browser settings. Note that disabling certain cookies may affect the functionality of the site.

10. Data Security

We take data security seriously. Personal data is stored on secure, access-controlled systems. We use HTTPS encryption on our website and apply appropriate technical and organisational measures to protect against unauthorised access, loss, or misuse.

In the event of a data breach that poses a risk to your rights and freedoms, we will notify you and the ICO as required by law.

11. International Data Transfers

Some of our third-party service providers may process data outside the UK or EEA. Where this occurs, we ensure appropriate safeguards are in place, such as Standard Contractual Clauses or adequacy decisions, in accordance with UK GDPR requirements.

12. Children's Privacy

Our services are directed at business owners and professionals. We do not knowingly collect personal data from individuals under the age of 18. If you believe we have inadvertently collected such data, please contact us immediately.

13. Changes to This Policy

We may update this Privacy Policy from time to time. The date at the top of this document reflects when it was last revised. We encourage you to review this page periodically.

14. Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy or how we handle your data, please contact:

The Nova Edit Ltd Email: hello@thenovaedit.io Website: www.thenovaedit.io Location: London, UK

You also have the right to contact the Information Commissioner's Office (ICO) if you are unhappy with how we handle your data: www.ico.org.uk | 0303 123 1113.