Last updated: 30 June 2025
1. Who We Are
IterNova Ltd
Company No. 16546141
Top Flat, 40 Kensington Place, Brighton, BN1 4EJ, UK
Privacy contact: hello@iternova.co.uk
2. Personal Data We Collect
- Website visitors – via contact form: name, email address.
- Clients – any personal data you supply or we access under your security procedures during consultancy/project work; processed only as instructed and not retained beyond contract.
3. How We Collect Your Data
- Online – you enter your name & email via our website contact form (Microsoft Forms).
- Telephone – you may provide your name & email when you call us.
4. Purposes of Processing & Legal Bases
| Purpose | Data Type | Legal Basis (UK GDPR) |
|---|---|---|
| Responding to enquiries | Name, email address | Necessary to take steps at your request prior to a contract (Art 6(1)(b)) |
| Consultancy/project delivery | Personal data you supply | Performance of a contract (Art 6(1)(b)) |
| Website analytics | IP address, cookie identifiers | Legitimate interests: improve site content & performance (Art 6(1)(f)) |
We do not send marketing emails or newsletters at this time.
5. Cookies & Tracking
We use Google Analytics to understand website usage. A cookie-consent banner appears on first visit; you can opt in/out or withdraw consent at any time.
| Cookie Name | Purpose | Expiry | Basis |
|---|---|---|---|
| _ga | Distinguishes users | 14 months | Legitimate interests (Art 6(1)(f)) |
| _gid | Distinguishes users | 24 hours | Legitimate interests (Art 6(1)(f)) |
| _gat/_gt* | Throttles request rate | 1 minute | Legitimate interests (Art 6(1)(f)) |
6. Third-Party Processors & Data Sharing
- Google LLC (Analytics) – under Google’s EU-UK Data Processing Addendum.
- Microsoft Corp. (Forms, Azure, SharePoint, OneDrive) – under Microsoft’s Data Protection Addendum.
We do not share contact-form data with marketing or CRM platforms. All data resides within our UK/EEA Azure tenancy. Any client-supplied personal data is processed per client procedures and deleted after project completion.
7. International Transfers
All personal data remains within the UK or EEA. No transfers to third countries occur.
8. Automated Decision-Making & Profiling
We do not use automated decision-making or profiling in our services or on this website.
9. Data Retention
| Data Category | Retention Period | Disposal Method |
|---|---|---|
| Contact-form submissions & leads | 12 months from receipt | Permanently deleted from Forms & SharePoint |
| Website analytics data | 14 months per GA default | Automatic purge by Google Analytics |
| Client project personal data | No retention post-contract | Secure deletion / return to client |
| Non-personal project documents | As per Data Retention & Disposal Policy | Standard deletion or archiving |
10. Your Rights
Under UK GDPR, you have the right to:
- Access your personal data
- Rectify inaccurate data
- Erase your data (“right to be forgotten”)
- Restrict processing
- Object to processing
- Data portability
To exercise any right or submit a Subject Access Request, email hello@iternova.co.uk. We will respond within one month, per ICO guidelines.
11. Security Measures
- Encryption at rest (Azure Storage Service Encryption) and in transit (TLS 1.2+).
- Multi-factor authentication and strong, unique passwords for all accounts.
- Role-based access controls in SharePoint/OneDrive.
- Regular backups, retention-label enforcement, and disaster-recovery procedures.
- Mandatory annual GDPR & data-security training for staff.
12. Children’s Data
Our services and site target businesses. We do not knowingly collect data from anyone under 16.
13. Changes to This Policy
We may update this policy to reflect changes in practices or legal requirements. The “Last updated” date above will change accordingly. Please review periodically.
14. Contact & Complaints
If you have questions or concerns, contact: hello@iternova.co.uk
If you remain dissatisfied, you may lodge a complaint with the UK Information Commissioner’s Office (ICO):
https://ico.org.uk / 0303 123 1113