Privacy Policy
Last Updated: January 2026At NovaStudy, we take your privacy seriously. This policy explains how we collect, use, and protect your personal information when you interact with our career development services. We're committed to being transparent about our data practices and giving you control over your information.
Information We Collect
We gather different types of information depending on how you engage with our services. Some you provide directly, while other data comes from your use of our platform.
Personal Information You Provide
When you sign up for NovaStudy courses or contact us, we collect details like your name, email address, phone number, and postal address. If you enroll in paid programmes, we also receive payment information through our secure processors. We keep records of your communication with us, including support requests and feedback you share.
Automatically Collected Data
Our website collects technical information about your visits. This includes your IP address, browser type, device information, and which pages you view. We use cookies and similar technologies to understand how people navigate our site and what content resonates most.
| Data Type | Examples | Purpose |
|---|---|---|
| Contact Details | Name, email, phone, address | Communication and course delivery |
| Account Information | Username, password, preferences | Platform access and personalisation |
| Usage Data | Pages visited, time spent, interactions | Service improvement and analytics |
| Technical Data | IP address, browser type, device info | Security and technical support |
| Payment Information | Billing details, transaction records | Processing enrolments and refunds |
How We Use Your Information
Your data serves specific purposes that help us deliver quality career development services. We don't use your information for anything beyond what we outline here.
- Delivering the courses and services you've signed up for
- Sending you important updates about your enrolment or account
- Processing payments and managing your billing
- Responding to your questions and providing support
- Improving our course content based on how learners interact with materials
- Sending relevant career development resources if you've opted in
- Protecting against fraud and maintaining platform security
- Meeting legal obligations under UK data protection law
We only send marketing emails to people who've given us permission. You can unsubscribe anytime through the link at the bottom of any email.
Legal Basis for Processing
Under UK GDPR, we need a lawful reason to process your personal data. Here's what applies to different types of processing:
Contract Performance
When you enroll in a course, we process your data to deliver that service. This includes everything from sending course materials to tracking your progress and issuing certificates.
We also process data based on legitimate interests – like improving our services or preventing fraud – but only when this doesn't override your rights and freedoms. For marketing communications, we rely on your explicit consent, which you can withdraw at any time.
Sharing Your Information
We don't sell your personal data to anyone. That's not our business model, and it never will be. However, we do share information with specific third parties who help us run our services:
Service Providers
We work with companies that handle payment processing, email delivery, website hosting, and analytics. These providers only access data needed for their specific function and are contractually bound to protect your information.
Legal Requirements
Sometimes we're legally required to share information with authorities or regulators. We'll only do this when necessary to comply with UK law, respond to valid legal requests, or protect someone's safety.
Business Transfers
If NovaStudy were acquired or merged with another company, your data would transfer to the new owner. We'd notify you before this happens and explain any changes to how your information is handled.
Your Rights
UK data protection law gives you significant control over your personal information. Here's what you can do:
Access Your Data
Request a copy of the personal information we hold about you. We'll provide this in a readable format within one month.
Correct Inaccuracies
Ask us to update or fix any incorrect or incomplete information in your account or records.
Delete Your Data
Request deletion of your personal information when there's no valid reason for us to continue holding it.
Restrict Processing
Ask us to limit how we use your data in specific situations, like when you're questioning its accuracy.
Data Portability
Receive your data in a structured format that you can transfer to another service provider.
Object to Processing
Oppose certain types of processing, particularly for marketing or where we rely on legitimate interests.
To exercise any of these rights, email us at [email protected] with your request. We'll respond within 30 days and won't charge a fee unless your request is clearly unfounded or excessive.
Data Security
We've put technical and organisational measures in place to protect your information from unauthorised access, loss, or misuse. Our website uses SSL encryption to secure data transmission. We restrict access to personal data to employees and contractors who need it for their work.
While we take security seriously, no system is completely foolproof. If we experience a data breach that poses risks to your rights and freedoms, we'll notify you and the Information Commissioner's Office within 72 hours.
Cookies and Tracking
Like most websites, we use cookies to make our site work properly and understand how people use it. Some cookies are essential for basic functionality, while others help us improve the user experience or measure website performance.
Types of Cookies We Use
- Essential cookies that enable core site features like logging in
- Performance cookies that show us which pages are popular and where people encounter problems
- Functional cookies that remember your preferences and settings
- Analytics cookies that help us understand visitor behaviour and improve our content
You can control cookie settings through your browser preferences. However, disabling certain cookies might affect how well the site works for you.
Data Retention
We keep your personal information only as long as necessary for the purposes we collected it. How long that is depends on the type of data and what we're using it for.
| Information Type | Retention Period | Reason |
|---|---|---|
| Course enrolment records | 7 years after completion | Accreditation requirements and certificate verification |
| Payment records | 6 years | Tax and accounting obligations |
| Marketing consent | Until you withdraw consent | Ongoing communication preferences |
| Account information | Duration of account plus 2 years | Service delivery and support |
| Website analytics | 26 months | Understanding long-term usage patterns |
When we no longer need your data, we securely delete or anonymise it so it can't be linked back to you.
International Transfers
We primarily store and process data within the United Kingdom. Some of our service providers are based overseas, which means your information might be transferred outside the UK. When this happens, we ensure appropriate safeguards are in place through standard contractual clauses or adequacy decisions.
If you're accessing our services from outside the UK, your information will be transferred to us here. By using our platform, you're agreeing to this transfer.
Children's Privacy
Our services are designed for adults pursuing career development. We don't knowingly collect personal information from anyone under 16. If you're a parent or guardian and believe your child has provided us with personal data, please contact us so we can delete it.
Changes to This Policy
We review and update this privacy policy periodically to reflect changes in our practices or legal requirements. When we make significant changes, we'll notify you by email or through a prominent notice on our website.
The date at the top of this page shows when we last updated the policy. We encourage you to review it occasionally to stay informed about how we're protecting your information.
Complaints and Concerns
If you're unhappy with how we've handled your personal data, we want to hear about it. Contact our team first, and we'll do our best to resolve the issue.
You also have the right to lodge a complaint with the Information Commissioner's Office, the UK's data protection regulator. You can reach them through their website at ico.org.uk or by calling their helpline.
Questions About Your Privacy?
If anything in this policy is unclear or you have specific questions about how we handle your data, we're here to help.
Email: [email protected]
Phone: +44 191 271 6434
Post: 15 Limedale Ave, Oakwood, Derby DE21 2UE, United Kingdom