What this website collects, and what it does not.

Who is responsible

NoviThea Ltd operates this website and decides how the information described below is handled. To reach us about anything on this page, use the contact form.

When you read a page

This site sets no cookies and runs no analytics, advertising or tracking scripts. Nothing is stored in your browser between visits. There is no consent banner because there is nothing to consent to.

The site runs on a web server like any other, so serving you a page involves your IP address, the page requested, the time, and the browser string your device sends. That handling sits with our hosting provider as part of running the server. We do not add any collection of our own on top of it, and we do not build profiles of visitors.

When you use the contact form

The form asks for your name, your email address, an enquiry type, a subject and your message. Organisation is optional. We use what you send to answer your enquiry, and for nothing else.

When you submit the form, the content is checked on our server and then sent as a plain-text email to a NoviThea mailbox. Your email address is used as the reply address on that email so we can write back. Nothing you send is written to a database, and nothing is published on this site.

To limit automated abuse, the server keeps a short-lived count in memory of how many submissions have come from a given IP address in the last fifteen minutes. That count holds no message content, is not written to disk, and disappears when the window passes or the server restarts.

Fields have length limits (120 characters for a name, 4000 for a message, with a minimum of 20). Submissions that exceed them, or that fail validation, are rejected without being sent anywhere.

Please do not use the form to send special category data, information about identifiable third parties, or anything confidential. Email is not a secure channel, and we cannot control how it travels between your provider and ours.

Who else is involved

Running the site and answering an enquiry involves two kinds of supplier. A hosting provider runs the web server that serves these pages and the server that processes a form submission. An email provider carries the resulting message and hosts the mailbox we read it in. At present both roles are filled by the same supplier.

Nobody else receives what you send. There is no analytics provider, no advertising network, no customer-relationship system and no third-party form service. We do not sell or share enquiry content.

Email is relayed between mail servers to reach us, so your message passes through the ordinary mail infrastructure in the same way as any other email you send.

How long we keep enquiries

General enquiries are retained for up to 12 months after the last substantive communication, unless an ongoing relationship, a legal obligation or a documented business need requires the correspondence to be kept for longer. Submissions that are clearly irrelevant, or are spam, are deleted sooner.

This is a policy we apply, not an automated mechanism. Enquiry emails sit in a mailbox and are reviewed and deleted by a person against that period. You can ask us to delete your enquiry before then, and we will.

Your rights

If you are in the United Kingdom or the European Union, data protection law gives you rights over personal data an organisation holds about you, including the right to ask what we hold, to have it corrected, and to have it erased. Ask through the contact form and we will deal with it.

If you are not satisfied with how we have handled a request, you can complain to the Information Commissioner’s Office in the United Kingdom, or to your own supervisory authority in the EU.

Changes to this page

This page describes the site as it is now. It will be updated when the site changes — for example, when a product is published, or when a supplier changes. We do not keep a change log of earlier versions.