This Privacy Policy describes Our policies and procedures on the
collection, use and disclosure of Your information when You use the
Service and tells You about Your privacy rights and how the law protects
You.
We use Your Personal data to provide and improve the Service. By using
the Service, You agree to the collection and use of information in
accordance with this Privacy Policy.
Interpretation and Definitions
Interpretation
The words of which the initial letter is capitalized have meanings
defined under the following conditions. The following definitions shall
have the same meaning regardless of whether they appear in singular or
in plural.
Definitions
For the purposes of this Privacy Policy:
Account means a unique account created for You to
access our Service or parts of our Service.
Affiliate means an entity that controls, is
controlled by or is under common control with a party, where "control"
means ownership of 50% or more of the shares, equity interest or other
securities entitled to vote for election of directors or other
managing authority.
Company (referred to as either "the Company", "We",
"Us" or "Our" in this Agreement) refers to NodeNova.
Cookies are small files that are placed on Your
computer, mobile device or any other device by a website, containing
the details of Your browsing history on that website among its many
uses.
Country refers to: United Kingdom
Device means any device that can access the Service
such as a computer, a cellphone or a digital tablet.
Personal Data is any information that relates to an
identified or identifiable individual.
Service refers to the Website.
Service Provider means any natural or legal person
who processes the data on behalf of the Company. It refers to
third-party companies or individuals employed by the Company to
facilitate the Service, to provide the Service on behalf of the
Company, to perform services related to the Service or to assist the
Company in analyzing how the Service is used.
Usage Data refers to data collected automatically,
either generated by the use of the Service or from the Service
infrastructure itself (for example, the duration of a page visit).
You means the individual accessing or using the
Service, or the company, or other legal entity on behalf of which such
individual is accessing or using the Service, as applicable.
Collecting and Using Your Personal Data
Types of Data Collected
Personal Data
While using Our Service, We may ask You to provide Us with certain
personally identifiable information that can be used to contact or
identify You. Personally identifiable information may include, but is
not limited to:
Email address
Usage Data
Usage Data
Usage Data is collected automatically when using the Service.
Usage Data may include information such as Your Device's Internet
Protocol address (e.g. IP address), browser type, browser version, the
pages of our Service that You visit, the time and date of Your visit,
the time spent on those pages, unique device identifiers and other
diagnostic data.
When You access the Service by or through a mobile device, We may
collect certain information automatically, including, but not limited
to, the type of mobile device You use, Your mobile device unique ID, the
IP address of Your mobile device, Your mobile operating system, the type
of mobile Internet browser You use, unique device identifiers and other
diagnostic data.
We may also collect information that Your browser sends whenever You
visit our Service or when You access the Service by or through a mobile
device.
Cookies and Similar Technologies
We use a small number of cookies. Only the essential ones are set
without your permission; analytics and marketing cookies are set only
if you allow them. The Cookies section below
lists each one and explains how to change your choice.
Use of Your Personal Data
The Company may use Personal Data for the following purposes:
To provide and maintain our Service, including to
monitor the usage of our Service.
To manage Your Account: to manage Your registration
as a user of the Service. The Personal Data You provide can give You
access to different functionalities of the Service that are available
to You as a registered user.
For the performance of a contract: the development,
compliance and undertaking of the purchase contract for the products,
items or services You have purchased or of any other contract with Us
through the Service.
To contact You: To contact You by email, telephone
calls, SMS, or other equivalent forms of electronic communication,
such as a mobile application's push notifications regarding updates or
informative communications related to the functionalities, products or
contracted services, including the security updates, when necessary or
reasonable for their implementation.
To provide You with news, special offers and general
information about other goods, services and events which we offer that
are similar to those that you have already purchased or enquired about
unless You have opted not to receive such information.
To manage Your requests: To attend and manage Your
requests to Us.
For business transfers: We may use Your information
to evaluate or conduct a merger, divestiture, restructuring,
reorganization, dissolution, or other sale or transfer of some or all
of Our assets, whether as a going concern or as part of bankruptcy,
liquidation, or similar proceeding, in which Personal Data held by Us
about our Service users is among the assets transferred.
For other purposes: We may use Your information for
other purposes, such as data analysis, identifying usage trends,
determining the effectiveness of our promotional campaigns and to
evaluate and improve our Service, products, services, marketing and
your experience.
We may share Your personal information in the following situations:
With Service Providers: We may share Your personal
information with Service Providers to monitor and analyze the use of
our Service, to contact You.
For business transfers: We may share or transfer Your
personal information in connection with, or during negotiations of,
any merger, sale of Company assets, financing, or acquisition of all
or a portion of Our business to another company.
With Affiliates: We may share Your information with
Our affiliates, in which case we will require those affiliates to
honor this Privacy Policy. Affiliates include Our parent company and
any other subsidiaries, joint venture partners or other companies that
We control or that are under common control with Us.
With business partners: We may share Your information
with Our business partners to offer You certain products, services or
promotions.
With other users: when You share personal information
or otherwise interact in the public areas with other users, such
information may be viewed by all users and may be publicly distributed
outside.
With Your consent: We may disclose Your personal
information for any other purpose with Your consent.
Retention of Your Personal Data
The Company will retain Your Personal Data only for as long as is
necessary for the purposes set out in this Privacy Policy. We will
retain and use Your Personal Data to the extent necessary to comply with
our legal obligations (for example, if we are required to retain your
data to comply with applicable laws), resolve disputes, and enforce our
legal agreements and policies.
The Company will also retain Usage Data for internal analysis purposes.
Usage Data is generally retained for a shorter period of time, except
when this data is used to strengthen the security or to improve the
functionality of Our Service, or We are legally obligated to retain this
data for longer time periods.
Transfer of Your Personal Data
Your information, including Personal Data, is processed at the Company's
operating offices and in any other places where the parties involved in
the processing are located. It means that this information may be
transferred to, and maintained on, computers located outside of Your
state, province, country or other governmental jurisdiction where the
data protection laws may differ than those from Your jurisdiction.
Your consent to this Privacy Policy followed by Your submission of such
information represents Your agreement to that transfer.
The Company will take all steps reasonably necessary to ensure that Your
data is treated securely and in accordance with this Privacy Policy and
no transfer of Your Personal Data will take place to an organization or
a country unless there are adequate controls in place including the
security of Your data and other personal information.
Delete Your Personal Data
You have the right to delete or request that We assist in deleting the
Personal Data that We have collected about You.
Our Service may give You the ability to delete certain information about
You from within the Service.
You may update, amend, or delete Your information at any time by signing
in to Your Account, if you have one, and visiting the account settings
section that allows you to manage Your personal information. You may
also contact Us to request access to, correct, or delete any personal
information that You have provided to Us.
Please note, however, that We may need to retain certain information
when we have a legal obligation or lawful basis to do so.
Disclosure of Your Personal Data
Business Transactions
If the Company is involved in a merger, acquisition or asset sale, Your
Personal Data may be transferred. We will provide notice before Your
Personal Data is transferred and becomes subject to a different Privacy
Policy.
Law enforcement
Under certain circumstances, the Company may be required to disclose
Your Personal Data if required to do so by law or in response to valid
requests by public authorities (e.g. a court or a government agency).
Other legal requirements
The Company may disclose Your Personal Data in the good faith belief
that such action is necessary to:
Comply with a legal obligation
Protect and defend the rights or property of the Company
Prevent or investigate possible wrongdoing in connection with the
Service
Protect the personal safety of Users of the Service or the public
Protect against legal liability
Security of Your Personal Data
The security of Your Personal Data is important to Us, but remember that
no method of transmission over the Internet, or method of electronic
storage is 100% secure. While We strive to use commercially acceptable
means to protect Your Personal Data, We cannot guarantee its absolute
security.
Cookies
Cookies are small files a website stores in your browser. This
section covers cookies and similar technologies, such as browser
storage and tracking pixels, on nodenova.co.uk. The law (the Privacy
and Electronic Communications Regulations and UK GDPR) lets us set
essential cookies without asking; everything else needs your
permission first.
When you first visit, we ask whether you allow analytics and
marketing cookies. Until you choose, and if you choose "Essential
only", no analytics or advertising code from Google or Meta loads on
the page at all. You can change your choice at any time from "Cookie
settings" at the foot of every page, or here:
Essential
Always on, because the site needs them to work or to respect your
choice.
Name
Set by
Purpose
Kept for
nn_consent
NodeNova
Remembers your cookie choice, so we do not ask on every page.
Holds your choice and the time you made it, nothing else.
6 months
Calendly cookies
Calendly
Pages with a booking calendar embed Calendly, which sets its
own cookies inside the calendar to run the booking and protect
it from abuse. See
Calendly's cookie notice.
Set by Calendly
Analytics
Only if you allow analytics. We use Google Analytics to see which
pages are visited, how people move between them and which features
are used, so we can improve the site. We do not send Google your
name, email address or anything you type into a form.
Name
Set by
Purpose
Kept for
_ga
Google Analytics
Tells one visitor's browser apart from another's.
2 years
_ga_656VD8DGH0
Google Analytics
Keeps track of the current visit.
2 years
Marketing
Only if you allow marketing. We use these to learn whether our
adverts on Google and Meta (Facebook and Instagram) lead to visits,
completed assessments and booked calls, so we spend on the adverts
that work. We do not use them to build a profile of you or to show
you personalised adverts on our behalf.
Name
Set by
Purpose
Kept for
_gcl_au
Google Ads
Links a click on one of our Google adverts to what happens
next on the site.
90 days
_fbp
Meta Pixel
Tells one visitor's browser apart from another's, to measure
our Meta adverts.
90 days
_fbc
Meta Pixel
Keeps the click id when you arrive from one of our Meta
adverts.
90 days
dac_attribution (browser storage)
NodeNova
Assessment page only, and only with analytics or marketing
allowed: keeps the campaign details from the link you
followed if you reload part way through, so a completed
assessment is credited to the right campaign.
We rely on your consent for analytics and marketing cookies, and on
our legitimate interest in running a working website for essential
ones. With your consent, Google and Meta receive details of your
visit: the pages you view, your browser and device type, an
approximate location derived from your IP address, and events such
as a completed assessment or a booked call. Google and Meta may
process this data in the United States, under the UK Extension to
the EU-US Data Privacy Framework or the standard contractual
clauses in their data processing terms. Google Analytics keeps this
data for no longer than 14 months.
Changing your mind
Use "Cookie settings" at the foot of any page. If you withdraw
consent, we stop loading the tags straight away and delete the
analytics and marketing cookies listed above from our domain. We ask
again after 6 months, or sooner if we add a new kind of cookie. You
can also block or delete cookies in your browser settings; blocking
essential cookies means we cannot remember your choice.
Delegated Authority Control Assessment
This section covers the assessment at
nodenova.co.uk/products/remit/assessment.
The controller is NOVA AI SW LIMITED, trading as NodeNova, company
number 16962401, registered office 5 Den Road, Teignmouth, Devon,
TQ14 8AR. Contact:
info@nodenova.co.uk.
What we collect
Your details: name, work email address, company
and role, and your answer to the optional question about how many
delegated relationships you oversee.
Your answers and result: the answers you gave, the
score and band they produce, and whether you allowed benchmark use.
How you arrived: campaign parameters (such as
utm_source) and ad click identifiers (such as gclid) from the link
you followed, the referring site and the page you landed on.
Abuse prevention: a keyed hash of your IP address,
never the address itself, and your browser type.
Email history: which emails we sent you and when,
and whether you unsubscribed, booked a call or an email bounced. Our
emails contain no tracking pixels and no tracked links.
Why we use it
To send your result, and to follow up with four
short emails over the next two weeks about evidencing delegated
decisions, then stop. Lawful basis: our legitimate interest in
following up with people who asked for this result at work. Every
email has a one-click unsubscribe link.
Benchmark research, only if you ticked the box: your
answers, without your details, in aggregated benchmark figures.
Lawful basis: your consent, which you can withdraw at any time by
emailing us.
To keep the form from being misused and to learn
which campaigns lead to completed assessments and booked calls.
Lawful basis: our legitimate interests.
The score is calculated automatically from your answers. It is an
estimate for your own use, and we make no decision about you based
on it. We do not sell your data or share it for anyone else's
marketing.
Who processes it for us
Hetzner hosts the website and the database on
servers in Finland.
Google Workspace sends and stores our emails.
Calendly handles bookings, if you book a call.
Google Analytics and Google Ads receive page events
such as a completed assessment, with your score, band and campaign
identifiers, but only if you allowed analytics or marketing cookies
(see Cookies). They do not receive your name,
email address, company, role or answers.
Google and Calendly may process data outside the UK, under the
safeguards in their own data processing terms.
How long we keep it
We keep your details, answers and email history for 24 months after
your last contact with us, then delete them. If you unsubscribe, we
keep only your email address, so that we do not email you again.
Deleted records leave our backups within 14 days.
Your rights
You can ask for a copy of your data, ask us to correct or delete it,
object to or restrict our use of it, and withdraw consent for
benchmark research, by emailing
info@nodenova.co.uk. If you
are unhappy with how we handle your data, you can complain to the
Information Commissioner's Office at
ico.org.uk.
Children's Privacy
Our Service does not address anyone under the age of 13. We do not
knowingly collect personally identifiable information from anyone under
the age of 13. If You are a parent or guardian and You are aware that
Your child has provided Us with Personal Data, please contact Us. If We
become aware that We have collected Personal Data from anyone under the
age of 13 without verification of parental consent, We take steps to
remove that information from Our servers.
If We need to rely on consent as a legal basis for processing Your
information and Your country requires consent from a parent, We may
require Your parent's consent before We collect and use that
information.
Links to Other Websites
Our Service may contain links to other websites that are not operated by
Us. If You click on a third party link, You will be directed to that
third party's site. We strongly advise You to review the Privacy Policy
of every site You visit.
We have no control over and assume no responsibility for the content,
privacy policies or practices of any third party sites or services.
Changes to this Privacy Policy
We may update Our Privacy Policy from time to time. We will notify You
of any changes by posting the new Privacy Policy on this page.
We will let You know via email and/or a prominent notice on Our Service,
prior to the change becoming effective and update the "Last updated"
date at the top of this Privacy Policy.
You are advised to review this Privacy Policy periodically for any
changes. Changes to this Privacy Policy are effective when they are
posted on this page.
Contact Us
If you have any questions about this Privacy Policy, You can contact us:
