Privacy Policy

• When you apply for a job with us
  • What personal data do we collect, why do we collect it, and what legal basis do we rely on?

    Personal data is anything that can identify an individual, either on its own or through combining it with other factors that could eventually identify an individual.

    When you apply for a job with us, we need some information about you in order to manage your recruitment process, such as your name, CV, email address, phone number, interview notes and references from previous employers. The legal grounds we rely on for this processing are Article 6(1)(f) of the GDPR - Legitimate Interests.

  • Where do we store it?

    The information we will collect during the recruitment stage will be stored in Workable, which is the platform we use for recruitment. You can find their privacy policy here. The data that we collect may be transferred to, and stored at, a destination outside the UK, Switzerland or the European Economic Area ("EEA"). A Data Processing and Transfer Agreement has been signed between the entities of the Workable Group of Companies, and between Workable and each of its data processors.

  • How long do we keep it for?

    If you are not shortlisted for an interview, we would like to keep your details on file for 6 months, just in case other opportunities become available. Please let us know if you would not want NovaFori to retain this information. If you are offered a job with NovaFori, we will retain your data during your employment and remove it in line with our obligations under the law. Otherwise, we will keep your data during the interview process and remove it after 6 months.

    If you are offered a job with NovaFori, we will retain your data during your employment and remove it in line with our obligations under the law. Otherwise we will keep your data during the interview process and remove it after 12 months.

• When you join NovaFori as an employee
  • What personal data do we collect, why do we collect it, and what legal basis do we rely on?
    Personal data is anything that can identify an individual, either on its own or through combining it with other factors that could eventually identify an individual.
    When you join us as a member of staff, we'll need some information about you, such as your name, date of birth, qualifications, payroll information, P45, pensions information, share options information, ethnicity, next of kin contact details, telephone number, annual leave details, sick leave details and health information and rely on Article 6(1)(b) of the GDPR - Contractual Obligation and Article 6(1)(c) of the GDPR - Legal Obligation for this processing.
  • Where do we store it?
    We store HR data on Microsoft Office products including Sharepoint, One Drive and Outlook. Microsoft are based in the US and you can read their privacy policy here.
    We also use a product called HiBob and they are based in the US. You can read their privacy policy here.
    Our pensions provider is Hargreaves Landsdown. Data may be stored outside the EEA. You can read their privacy policy here.
    Our health insurance and life insurance are provided by Axa and you can read their privacy policy here.

• When you become a customer of NovaFori
  • What personal data do we collect, why do we collect it, and what legal basis do we rely on?

    Personal data is anything that can identify an individual, either on its own or through combining it with other factors that could eventually identify an individual.

    When you join us as a customer, we'll need some information about you, such as your name, email address, contact details and payment details and we will rely on Article 6(1)(b) of the GDPR - Contractual Obligation and Article 6(1)(f) of the GDPR - Legitimate Interest for this processing.

  • Where do we store it?

    We use Hubspot as our Customer Relationship Management platform. You can find out more about them here. We also use AWS and Pendo for our customer communication. You can read AWS’s privacy policy here and Pendo’s privacy policy here.

  • How long do we keep it for?

    We will retain customer records for 3 years.

• When you sign up to our Newsletter
  • What personal data do we collect, why do we collect it, and what legal basis do we rely on?

    Personal data is anything that can identify an individual, either on its own or through combining it with other factors that could eventually identify an individual.

    When you sign up to our Newsletter, we'll collect your name and email address, and we will rely on Article 6(1)(a) of the GDPR - Consent for this processing.

  • Where do we store it?

    We use Hubspot as our Customer Relationship Management platform. You can find out more about them here.

  • How long do we keep it for?

    We will retain these records only while the Newsletters are requested.

• When we market our product
  • What personal data do we collect, why do we collect it, and what legal basis do we rely on?

    Personal data is anything that can identify an individual, either on its own or through combining it with other factors that could eventually identify an individual.

    When we market our produce, we'll collect details such as name, company, job title, work email, work address and we will rely on Article 6(1)(f) of the GDPR - Legitimate Interest for this processing.

  • Where do we store it?

    We use Hubspot as our Customer Relationship Management platform. You can find out more about them here.

  • How long do we keep it for?

    We keep these records for as long as you subscribe; if you wish to remove yourself from these records please email us at contact@novafori.com

• When you visit our website

  Our website uses cookies and other similar technologies of which you should be aware.

  • What cookies do we collect, why do we collect them, and what legal basis do we rely on?

    Cookies are text files placed on your hard drive by a web page server when you visit a website and are saved in your browser's history. They allow the website to recognise your device and store some information about your preferences or past actions. Cookies cannot be used to run programs or deliver viruses to your computer; they are uniquely assigned to you and can only be read by a web server in the domain that issued the cookie.

    When you use our website, the cookies can be stored on your device are either first party cookies, which are placed and read by us directly while you are using our website or third party cookies, which are set by other third parties we have partnered with.

    Below is a list of the cookies we use and the purposes for which they are used:

• The right to be informed

  You have the right to be informed about the collection and use of your personal data, the purposes for processing, retention periods for that personal data and who it will be shared with. We have set this information out in this privacy notice.

• The right of access

  You have the right to ask us for copies of the data we hold about you. If you ask us, we'll confirm whether we're processing your personal information and, if so, provide you with a copy of that personal information.

• The right to object

  You have the right to ask us to stop processing your personal information in some circumstances, such as when we are relying on our own (or someone else's) legitimate interests to process your personal information, when we are processing your personal information for direct marketing or when we are processing your personal information for research.

• The right to rectification

  You have the right to ask us to rectify the personal information you think is inaccurate or to complete information you think is incomplete. When you ask us to rectify your information, if we've shared your personal information with others, we'll let them know about the rectification where possible.

• The right to erasure

  You have the right to ask us to erase your personal information, in some circumstances, such as where we no longer need it or you withdraw your consent (where applicable).

• The right to restrict processing

  You have the right to ask us to restrict the processing of your personal information for a period of time in some circumstances, such as where you contest the accuracy of that personal information or object to us processing it. This right is separate from the right to object and will only stop us from using your personal information further, not from processing it. If we've shared your personal information with others, we'll let them know about the restriction where possible.

• The right to data portability

  You have the right to ask that we transfer the personal information you gave us to another organisation, or to someone else, in some circumstances.

If you have any concerns about our use of your personal information, please let us know by:

Emailing us at contact@novafori.com or

Writing to us at 15 Bermondsey Square, London, SE1 3UN, United Kingdom

If you are not satisfied with our response or you are unhappy with how we have used your data, you can complain to the Information Commissioner's Office (ICO). You can find the ICO contact details below:

ICO Address: Information Commissioner's Office, Wycliffe House, Water Lane, Wilmslow, Cheshire, SK9 5AF, Helpline number: 0303 123 1113.

ICO Website: https://www.ico.org.uk

Powered By Trust Keith