Nova understands that your privacy is important to you and that you care about how your personal data is used. We respect and value the privacy of everyone who visits our websites at https://novalaw.co.uk and https://novaforlawyers.novalaw.co.uk collectively known as "Our Site" and will only collect and use personal data in ways that are described here, and in a way that is consistent with our obligations and your rights under the UK General Data Protection Regulation ("GDPR") and the Data Protection Act 2018 ("DPA'18") jointly referred to as "Data Protection Legislation".
Please read this Privacy Policy carefully and ensure that you understand it.
In this Policy the following terms shall have the following meanings:
| "Account" | means an account required to access and/or use certain areas and features of Our Site; |
| "General Visitor(s)" | means a visitor to Our Site other than defined below as a "Nova Platform User". |
| "Nova Platform" | Means a web-based platform hosting software, automated systems, algorithms, generative artificial intelligence or other technologies that help deliver, personalize, or improve the services on Our Site. |
| "Nova Applications" | Means a collective term for the web-based services on the Nova Platform available to Nova Platform Users. |
| "Nova Platform User(s)" | means a member of the public, most likely a current or potential client of a law firm wishing to access Nova Applications including, but not limited to, our client onboarding application called "Nova Engage". |
| "Law Firms" | A law firm who contracts with Nova to use the Nova Platform. |
2.1 Our Site is owned and operated by Nova Law Trading Limited, a legal services technology company registered in England under company number 14139589 ("Nova").
Registered address: Preston Park House, South Road, Brighton BN1 6SB.
Data Protection Officer: Alan Larkin.
Email address: alan@novalaw.co.uk.
Telephone number: 01273 077126.
Postal address: 5 Clifton Mews, Clifton Hill, Brighton, BN1 3HR.
2.2 Nova's Privacy Policy is set out below in relation to the generality of Our Site. Nova facilitates services for members of the public who arrive directly at this site and are defined above as "General Visitor(s)". General Visitors who access Nova Applications on Our Site will be defined as "Nova Platform Users". Additionally, Nova facilitates services for selected law firms and individuals introduced by selected law firms defined above as "Law Firms". Those visitors introduced by such Law Firms will fall under the definition of "Nova Platform Users".
2.3 For the purposes of Data Protection Legislation, Nova is the data controller in relation to all personal data collected on Our Site.
3.1 This Privacy Policy applies to your use of Our Site, whether you are a General Visitor a Nova Platform User or a Law Firm. Our Site may contain links to other websites. Please note that we have no control over how your data is collected, stored, or used by other websites and we advise you to check the privacy policies of any such websites before providing any data to them.
4.1 Depending upon your use of Our Site, we may collect and hold some or all of the personal and non-personal data set out in the table below, using the methods also set out in the table. We have broken this down, depending on the type of user below:
| Data Collected, Includes, But Is Not Limited To | How We Collect the Data |
|---|---|
|
|
| Data Collected, Includes, But Is Not Limited To | How We Collect the Data |
|---|---|
| Specific functionality including, but not limited to, our Nova Applications |
| Data Collected, Includes, But Is Not Limited To | How We Collect the Data |
|---|---|
|
|
4.2 We may also collect the following technical information about your device when you use Our Site. This information helps us ensure the security and proper functioning of our services and to improve their performance.
The technical information we collect may include:
We collect this information automatically through our servers and similar technologies (for example, server logs and security monitoring tools).
Where this information could identify you (for example, your IP address), we treat it as personal data in accordance with applicable data protection laws.
5.1 As highlighted above, during the course of using Our Site Nova Platform Users may disclose special category personal data including, but not limited to, racial and ethnic origin, religious or philosophical beliefs and health or sexual orientation.
5.2 It may also be necessary, in some circumstances, to collect information about children and minors, defined under Data Protection Legislation as individuals who are below the age of 13.
5.3 Nova shall ensure that additional safeguards are in place to protect such special category and sensitive data, such as information collected in relation to children.
6.1 Under the Data Protection Legislation, we must always have a lawful basis for collecting your personal data. The following table describes how we may use your personal data, and our lawful bases for doing so depending on the type of user:
| What We Do | What Data we Use | Our Lawful Basis |
|---|---|---|
| Registering you on Our Site. | Name, business name, business address, business email and telephone number. | Contract, for the purpose of delivering our services. |
| Sending marketing materials. | Contact details such as your name, email address, business address and telephone number. | Specific, informed consent. |
| Supplying our products AND/OR services to you. | As above and including business bank account and card details. | Contract, for the purpose of delivering our services. |
| For Nova Platform Users, allowing access to, and use of, our Nova Applications. | Sensitive information personally identifying you. | Contract, for the purpose of delivering our services. |
| For Nova Platform Users, allowing access to, and continued use of our Nova Applications | Special category data which may include details of health, children or convictions. | Contract, for the purpose of delivering our services. |
| What We Do | What Data we Use | Our Lawful Basis |
|---|---|---|
| Providing and managing your Account. | Name, business name, business address, business email and telephone number. | Contract, for the purpose of delivering our services. |
| Supplying our products AND/OR services to you. | As above and including business bank account and card details. | Contract, for the purpose of delivering our services. |
6.2 For Nova Platform Users, sensitive information (that identifies you) will be obtained from your use of our Nova Applications, but this information will not be accessible to other site visitors. Nor will it be accessible to site administrative or technical support staff except for specified individuals who will access it only for the following purposes:
6.3 We will only use your personal data for the purpose(s) for which it was originally collected unless we reasonably believe that another purpose is compatible with that or those original purpose(s) and need to use your personal data for that purpose
6.4 If we need to use your personal data for a purpose that is unrelated to, or incompatible with, the purpose(s) for which it was originally collected, we will inform you and explain the legal basis which allows us to do so.
6.5 In some circumstances, where permitted or required by law, we may process your personal data without your knowledge or consent. This will only be done within the bounds of the Data Protection Legislation and your legal rights.
7.1 Although we use automated system(s) we do not do so for the carrying out of certain kinds of decision-making and/or profiling.
8.1 We will not keep your personal data for any longer than is necessary in light of the reason(s) for which it was first collected. Your personal data will therefore be kept for the following periods (or, where there is no fixed period, the following factors will be used to determine how long it is kept):
| Type of Data | How Long We Keep It |
|---|---|
| For Nova Platform Users, identifying information such as names, date of birth and gender | In an identifiable state for two years and thereafter anonymised. |
9.1 We will only store your personal data in the UK.
9.2 We hold your personal data in a combination of hard copy and electronic files for the period necessary to support Our Site, comply with our legal obligations, resolve disputes, or otherwise fulfill the purposes outlined in this Policy.
9.3 We may also retain backup information on our servers for some time in order to comply with applicable laws and regulations, and our internal security policies and procedures. Where applicable, we do not always remove or delete all of your personal data for a number of reasons including due to technical and system constraints, contractual requirements or legal requirements.
9.4 At the end of the above data retention periods, all of the data stored, including personal data, will be reviewed and securely delete/destroyed.
9.5 Please note that no method of transmission over the internet, method of electronic storage or other security methods are 100% secure. Therefore, while we strive to use commercially acceptable means of security, such as firewalls, encrypted databases with limited physical and electronic access, and other encryption methods, to protect your personal data against unauthorised use, disclosure or modification, we cannot guarantee its absolute security.
10.1 The security of your personal data is essential to us, and to protect your data, we take a number of important measures, including the following:
11.1 We may share the personal data of General Visitors or Law Firms with the below third-party processors, for more information on this, please review the third party privacy policies below:
We use LinkedIn Marketing Solutions, including the LinkedIn Insight Tag, Lead Gen Forms, Matched Audiences, and Conversions API, to measure campaign performance and show relevant ads. For personal data collected via these tools, LinkedIn acts as an independent controller and processes that data for its own purposes such as ad delivery, reporting, and improving its services.
These tools may set cookies or use similar technologies on our pages. Where required by law, we obtain your consent before activating non-essential cookies. You can manage your preferences via our cookie banner at any time.
We remain the controller of any data we collect directly from you (e.g., form submissions on our site and CRM records). To exercise your rights in relation to data processed by us, contact our Data Protection Officer (details in paragraph 2 above). To exercise your rights in relation to data processed by LinkedIn, please contact LinkedIn directly via its privacy resources.
Where LinkedIn transfers personal data internationally, it relies on appropriate safeguards (e.g., Standard Contractual Clauses/UK IDTA) as described in LinkedIn's privacy documentation.
11.2 If we sell, transfer, or merge parts of our business or assets, your personal data may be transferred to a third party. Any new owner of our business may continue to use your personal data in the same way(s) that we have used it, as specified in this Privacy Policy.
11.3 In some limited circumstances, we may be legally required to share certain personal data, which might include yours, if we are involved in legal proceedings or complying with legal obligations, a court order, or the instructions of a government authority.
11.4 If you are a Nova Platform User your data will be shared with your chosen lawyers (if applicable) via our Nova Applications and we will take steps to ensure that your personal data is handled safely, securely, and in accordance with your rights, and our obligations.
12.1 Under the Data Protection Legislation, you have the following rights, which we will always work to uphold. Should you wish to exercise any of the below rights please contact us using the contact details set out at the top of this policy
12.2 For more information about our use of your personal data or exercising your rights as outlined above, please contact us using the details provided at the start of this Privacy Policy.
12.3 If you have a concern about your privacy or would like to know more about how your personally identifiable information is collected or used, please contact us using the information at the top of this policy. We ask that when you contact us with a complaint, please include contact information and clearly describe your complaint.
12.4 We will respond to your request or complaint within a reasonable time and will let you know the next steps in resolving your complaint. If you are not satisfied with our response, you may also contact your local and federal data protection authorities to lodge a complaint.
13.1 You may access certain areas of Our Site without providing any personal data at all. However, to use all features and functions available on Our Site you may be required to submit or allow for the collection of certain data.
13.2 You may restrict our use of Cookies. For more information, please refer to our Cookie Policy.
14.1 We may change this Privacy Policy from time to time. This may be necessary, for example, if the law changes, or if we change our business in a way that affects personal data protection.
14.2 Any changes will be immediately posted on Our Site and you will be deemed to have accepted the terms of the Privacy Policy on your first use of Our Site following the alterations. We recommend that you check this page regularly to keep up-to-date.
14.3 This Privacy Policy was last updated on 25 October 2025.
15.1 For the avoidance of doubt, the services on Our Site, including but not limited to the services utilised by Nova Platform Users, do not constitute legal advice and should not be relied upon as the basis for any action subsequently taken by a site visitor or user.