Who we are
Novus Projects Ltd ("we", "us") is the controller of the personal data described in this policy. Registered in England and Wales, company number 13629950. Registered office: 27 Old Gloucester Street, London WC1N 3AX, United Kingdom. Registered with the Information Commissioner's Office (ICO), registration reference ZB304701. Contact for any privacy question or request: slt@novus-projects.uk.
Our representative in the EU, the EEA and Switzerland
We have appointed DataRep (Data Protection Representative Limited) as our representative under Article 27 of the EU GDPR and under the Swiss Federal Act on Data Protection.
- Address: DataRep, 3rd Floor, Kilmore House, Park Lane, Spencer Dock, Dublin 1, D01 YE64, Ireland.
- Email: novusprojects@datarep.com, quoting Novus Projects Ltd.
- Online form: datarep.com/data-request.
- DataRep also has local addresses in the EU, the EEA and Switzerland, listed at datarep.com/locations. Letters to a local address must be addressed to DataRep, not to us.
What we collect
- Details you send us through our forms, by email or by telephone: name, company, job title, email address, telephone number, project location and the information about your project, including drawings and specifications you send us.
- Details needed to deliver a contract: delivery addresses, site contacts, invoicing and payment details.
- Technical data when you visit the website, such as pages visited and device type, only where you accept analytics cookies.
Why we use it, and our lawful basis
- To answer your enquiry and prepare a quotation: steps taken at your request before entering into a contract, and our legitimate interests in responding to business enquiries.
- To deliver and manage a contract, including invoicing: performance of a contract.
- To meet legal, tax and accounting obligations: legal obligation.
- To contact businesses about our products and services: legitimate interests, and consent where the law requires it. You can opt out at any time.
- To improve the website through analytics: consent, given through our cookie banner.
Who we share it with
- Our suppliers and subcontractors, only as far as needed to prepare a quotation or deliver your project.
- Service providers that host our website, email, forms and business systems, under contracts that protect your data.
- Professional advisers and authorities where the law requires it.
- We do not sell personal data.
International transfers
We process personal data mainly in the United Kingdom and the European Union. Where a service provider processes it in another country, we rely on adequacy regulations or decisions of the UK Government or the European Commission, or on appropriate safeguards such as the UK International Data Transfer Agreement and the EU Standard Contractual Clauses.
How long we keep it
- Enquiries that do not lead to a contract: up to 2 years.
- Business contacts we have not worked with: 12 months from the last interaction.
- Contract, invoicing and accounting records: 6 years after the end of the contract.
- Email and commercial correspondence: 7 years.
- Marketing preferences: until you withdraw consent, then a record of the withdrawal for 3 years.
- Website analytics: 26 months.
- Records of your cookie choice: 12 months.
- Security and audit logs: 12 months.
Automated decisions
We do not make decisions with legal or similarly significant effects about you based solely on automated processing. Some of our website videos are produced with AI and are labelled as such.
Your rights
You can ask to access, correct or delete your data, to restrict or object to its use, including for direct marketing, and to receive it in a portable format. Where we rely on consent, you can withdraw it at any time. Contact slt@novus-projects.uk, or DataRep if you are in the EU, the EEA or Switzerland. We reply within one month.
Complaints
You can complain to the Information Commissioner's Office at ico.org.uk. In the EU or the EEA you can complain to the data protection authority in your country, listed at edpb.europa.eu. In Switzerland you can complain to the Federal Data Protection and Information Commissioner at edoeb.admin.ch. We would appreciate the chance to resolve your concern first.
Children
Our website and services are for businesses and adults. We do not knowingly collect personal data from children.
Last updated: October 2026