Privacy Policy

Last Updated: January 2026

At NovaStudy, we take your privacy seriously. This policy explains how we collect, use, and protect your personal information when you interact with our career development services. We're committed to being transparent about our data practices and giving you control over your information.

Information We Collect

We gather different types of information depending on how you engage with our services. Some you provide directly, while other data comes from your use of our platform.

Personal Information You Provide

When you sign up for NovaStudy courses or contact us, we collect details like your name, email address, phone number, and postal address. If you enroll in paid programmes, we also receive payment information through our secure processors. We keep records of your communication with us, including support requests and feedback you share.

Automatically Collected Data

Our website collects technical information about your visits. This includes your IP address, browser type, device information, and which pages you view. We use cookies and similar technologies to understand how people navigate our site and what content resonates most.

Data Type Examples Purpose
Contact Details Name, email, phone, address Communication and course delivery
Account Information Username, password, preferences Platform access and personalisation
Usage Data Pages visited, time spent, interactions Service improvement and analytics
Technical Data IP address, browser type, device info Security and technical support
Payment Information Billing details, transaction records Processing enrolments and refunds

How We Use Your Information

Your data serves specific purposes that help us deliver quality career development services. We don't use your information for anything beyond what we outline here.

  • Delivering the courses and services you've signed up for
  • Sending you important updates about your enrolment or account
  • Processing payments and managing your billing
  • Responding to your questions and providing support
  • Improving our course content based on how learners interact with materials
  • Sending relevant career development resources if you've opted in
  • Protecting against fraud and maintaining platform security
  • Meeting legal obligations under UK data protection law

We only send marketing emails to people who've given us permission. You can unsubscribe anytime through the link at the bottom of any email.

Legal Basis for Processing

Under UK GDPR, we need a lawful reason to process your personal data. Here's what applies to different types of processing:

Contract Performance

When you enroll in a course, we process your data to deliver that service. This includes everything from sending course materials to tracking your progress and issuing certificates.

We also process data based on legitimate interests – like improving our services or preventing fraud – but only when this doesn't override your rights and freedoms. For marketing communications, we rely on your explicit consent, which you can withdraw at any time.

Sharing Your Information

We don't sell your personal data to anyone. That's not our business model, and it never will be. However, we do share information with specific third parties who help us run our services:

Service Providers

We work with companies that handle payment processing, email delivery, website hosting, and analytics. These providers only access data needed for their specific function and are contractually bound to protect your information.

Legal Requirements

Sometimes we're legally required to share information with authorities or regulators. We'll only do this when necessary to comply with UK law, respond to valid legal requests, or protect someone's safety.

Business Transfers

If NovaStudy were acquired or merged with another company, your data would transfer to the new owner. We'd notify you before this happens and explain any changes to how your information is handled.

Your Rights

UK data protection law gives you significant control over your personal information. Here's what you can do:

Access Your Data

Request a copy of the personal information we hold about you. We'll provide this in a readable format within one month.

Correct Inaccuracies

Ask us to update or fix any incorrect or incomplete information in your account or records.

Delete Your Data

Request deletion of your personal information when there's no valid reason for us to continue holding it.

Restrict Processing

Ask us to limit how we use your data in specific situations, like when you're questioning its accuracy.

Data Portability

Receive your data in a structured format that you can transfer to another service provider.

Object to Processing

Oppose certain types of processing, particularly for marketing or where we rely on legitimate interests.

To exercise any of these rights, email us at [email protected] with your request. We'll respond within 30 days and won't charge a fee unless your request is clearly unfounded or excessive.

Data Security

We've put technical and organisational measures in place to protect your information from unauthorised access, loss, or misuse. Our website uses SSL encryption to secure data transmission. We restrict access to personal data to employees and contractors who need it for their work.

While we take security seriously, no system is completely foolproof. If we experience a data breach that poses risks to your rights and freedoms, we'll notify you and the Information Commissioner's Office within 72 hours.

Cookies and Tracking

Like most websites, we use cookies to make our site work properly and understand how people use it. Some cookies are essential for basic functionality, while others help us improve the user experience or measure website performance.

Types of Cookies We Use

  • Essential cookies that enable core site features like logging in
  • Performance cookies that show us which pages are popular and where people encounter problems
  • Functional cookies that remember your preferences and settings
  • Analytics cookies that help us understand visitor behaviour and improve our content

You can control cookie settings through your browser preferences. However, disabling certain cookies might affect how well the site works for you.

Data Retention

We keep your personal information only as long as necessary for the purposes we collected it. How long that is depends on the type of data and what we're using it for.

Information Type Retention Period Reason
Course enrolment records 7 years after completion Accreditation requirements and certificate verification
Payment records 6 years Tax and accounting obligations
Marketing consent Until you withdraw consent Ongoing communication preferences
Account information Duration of account plus 2 years Service delivery and support
Website analytics 26 months Understanding long-term usage patterns

When we no longer need your data, we securely delete or anonymise it so it can't be linked back to you.

International Transfers

We primarily store and process data within the United Kingdom. Some of our service providers are based overseas, which means your information might be transferred outside the UK. When this happens, we ensure appropriate safeguards are in place through standard contractual clauses or adequacy decisions.

If you're accessing our services from outside the UK, your information will be transferred to us here. By using our platform, you're agreeing to this transfer.

Children's Privacy

Our services are designed for adults pursuing career development. We don't knowingly collect personal information from anyone under 16. If you're a parent or guardian and believe your child has provided us with personal data, please contact us so we can delete it.

Changes to This Policy

We review and update this privacy policy periodically to reflect changes in our practices or legal requirements. When we make significant changes, we'll notify you by email or through a prominent notice on our website.

The date at the top of this page shows when we last updated the policy. We encourage you to review it occasionally to stay informed about how we're protecting your information.

Complaints and Concerns

If you're unhappy with how we've handled your personal data, we want to hear about it. Contact our team first, and we'll do our best to resolve the issue.

You also have the right to lodge a complaint with the Information Commissioner's Office, the UK's data protection regulator. You can reach them through their website at ico.org.uk or by calling their helpline.

Questions About Your Privacy?

If anything in this policy is unclear or you have specific questions about how we handle your data, we're here to help.

Email: [email protected]

Phone: +44 191 271 6434

Post: 15 Limedale Ave, Oakwood, Derby DE21 2UE, United Kingdom

Contact Us