{"id":336,"date":"2026-08-06T01:42:03","date_gmt":"2026-08-06T01:42:03","guid":{"rendered":"https:\/\/www.novalythsystems.com\/?page_id=336"},"modified":"2026-08-21T15:54:19","modified_gmt":"2026-08-21T15:54:19","slug":"privacy-policy","status":"publish","type":"page","link":"https:\/\/www.novalythsystems.com\/?page_id=336","title":{"rendered":"Privacy Policy"},"content":{"rendered":"\t\t<div data-elementor-type=\"wp-page\" data-elementor-id=\"336\" class=\"elementor elementor-336\" data-elementor-post-type=\"page\">\n\t\t\t\t<div class=\"elementor-element elementor-element-38cdbe1c e-flex e-con-boxed e-con e-parent\" data-id=\"38cdbe1c\" data-element_type=\"container\" data-e-type=\"container\" data-settings=\"{&quot;background_background&quot;:&quot;classic&quot;}\">\n\t\t\t\t\t<div class=\"e-con-inner\">\n\t\t\t\t<div class=\"elementor-element elementor-element-558a95bf elementor-invisible elementor-widget elementor-widget-heading\" data-id=\"558a95bf\" data-element_type=\"widget\" data-e-type=\"widget\" data-settings=\"{&quot;_animation&quot;:&quot;fadeInUp&quot;,&quot;_animation_delay&quot;:400}\" data-widget_type=\"heading.default\">\n\t\t\t\t\t<h4 class=\"elementor-heading-title elementor-size-default\">PRIVACY &amp; COOKIE POLICY<\/h4>\t\t\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t<div class=\"elementor-element elementor-element-792c6859 e-flex e-con-boxed e-con e-parent\" data-id=\"792c6859\" data-element_type=\"container\" data-e-type=\"container\">\n\t\t\t\t\t<div class=\"e-con-inner\">\n\t\t<div class=\"elementor-element elementor-element-35031c81 e-con-full e-flex e-con e-child\" data-id=\"35031c81\" data-element_type=\"container\" data-e-type=\"container\">\n\t\t<div class=\"elementor-element elementor-element-4343a4c e-con-full e-flex e-con e-child\" data-id=\"4343a4c\" data-element_type=\"container\" data-e-type=\"container\">\n\t\t\t\t<div class=\"elementor-element elementor-element-6330cb elementor-invisible elementor-widget elementor-widget-text-editor\" data-id=\"6330cb\" data-element_type=\"widget\" data-e-type=\"widget\" data-settings=\"{&quot;_animation&quot;:&quot;fadeInUp&quot;,&quot;_animation_delay&quot;:1000}\" data-widget_type=\"text-editor.default\">\n\t\t\t\t\t\t\t\t\t<h1>PRIVACY &amp; COOKIE POLICY<\/h1><p><strong>Novalyth Systems<\/strong><br \/><strong>Last Updated: 19 August 2026<\/strong><\/p><hr \/><h2>1. Introduction<\/h2><p>Novalyth Systems (\u201cNovalyth\u201d, \u201cwe\u201d, \u201cus\u201d, or \u201cour\u201d) provides enterprise workflow and managed application services from London, United Kingdom.<\/p><p>This Privacy &amp; Cookie Policy explains how we collect, use, disclose, retain and protect personal data when you:<\/p><ul><li><p>Visit <strong>novalythsystems.com<\/strong><\/p><\/li><li><p>Contact or contract with us<\/p><\/li><li><p>Use services we provide directly<\/p><\/li><li><p>Interact with systems we operate for clients<\/p><\/li><\/ul><p>A client-, partner- or product-specific notice may provide additional information. If that notice conflicts with this policy for a particular service, the more specific notice applies to that processing.<\/p><hr \/><h2>2. Company and Privacy Contact Details<\/h2><p><strong>Company:<\/strong> Novalyth Systems<br \/><strong>Headquarters:<\/strong> London, United Kingdom<br \/><strong>Privacy Email:<\/strong> <a href=\"mailto:privacy@novalythsystems.com\">privacy@novalythsystems.com<\/a><\/p><hr \/><h2>3. Our Role in Data Processing<\/h2><p>When we provide hosted workflow platforms, integrations or managed application support for a client, we normally act as the client\u2019s <strong>data processor<\/strong>.<\/p><p>We act as <strong>data controller<\/strong> for our website, sales, supplier, security and account-administration records.<\/p><p>If we process personal data for a client, requests concerning that data should normally be directed to the client. We will assist the client as required by contract and applicable law.<\/p><hr \/><h2>4. Personal Data We Collect<\/h2><p>Depending on your relationship with us, the people concerned may include client personnel, authorised platform users, suppliers and business contacts.<\/p><p>We may collect:<\/p><ul><li><p><strong>Business and relationship data:<\/strong> names, organisation, role, work contact details, correspondence, meeting information, contracts and billing records.<\/p><\/li><li><p>Workflow user names, work email addresses, roles and permissions.<\/p><\/li><li><p>Workflow records, approval history, form submissions and content entered into client environments.<\/p><\/li><li><p>API and integration identifiers, system events, access logs, support tickets, audit trails and backup records.<\/p><\/li><li><p><strong>Website and technical data:<\/strong> IP address, browser and device details, pages viewed, referral source, approximate location derived from IP, cookie choices, timestamps and security logs.<\/p><\/li><li><p>Information you choose to provide in enquiries, support requests, applications, surveys or other communications.<\/p><\/li><\/ul><p>Please do not provide sensitive or unnecessary personal data.<\/p><p>Where sensitive information is genuinely required, we limit its use to the stated purpose and apply any additional legal safeguards, including explicit consent where required.<\/p><hr \/><h2>5. How We Collect Personal Data<\/h2><p>We may collect personal data:<\/p><ul><li><p>Directly from you, your employer, a client, group organiser, authorised user or account administrator.<\/p><\/li><li><p>Automatically from the website, applications, devices, integrations and security systems you use.<\/p><\/li><li><p>From service providers and business partners involved in an authorised transaction or service.<\/p><\/li><li><p>From public or licensed sources where lawful and relevant to due diligence, research, professional services or business development.<\/p><\/li><\/ul><hr \/><h2>6. Why We Process Personal Data<\/h2><p>We may process personal data to:<\/p><ul><li><p>Configure, host, integrate and support enterprise workflows.<\/p><\/li><li><p>Authenticate users, administer permissions and preserve auditability.<\/p><\/li><li><p>Monitor availability, investigate incidents and improve platform reliability.<\/p><\/li><li><p>Respond to enquiries, prepare proposals, contract with clients and manage suppliers.<\/p><\/li><li><p>Protect people, information, systems and services.<\/p><\/li><li><p>Prevent fraud, misuse and security incidents.<\/p><\/li><li><p>Comply with applicable laws and regulations.<\/p><\/li><li><p>Resolve disputes and establish or defend legal claims.<\/p><\/li><li><p>Maintain required business, accounting and operational records.<\/p><\/li><\/ul><p><strong>Novalyth Systems does not sell personal data for money.<\/strong><\/p><p>We also do not use client-controlled data for our own unrelated advertising purposes.<\/p><hr \/><h2>7. Legal Bases<\/h2><p>Where the UK GDPR and Data Protection Act 2018 require a legal basis, we rely, as appropriate, on:<\/p><ul><li><p><strong>Performance of a contract<\/strong> or steps requested before entering into a contract.<\/p><\/li><li><p><strong>Legitimate interests<\/strong>, such as delivering and improving services, securing systems, administering our business and communicating with business contacts, balanced against individual rights.<\/p><\/li><li><p><strong>Compliance with legal obligations.<\/strong><\/p><\/li><li><p><strong>Consent<\/strong>, including for non-essential cookies or sensitive data when the law requires consent.<\/p><\/li><li><p><strong>Protection of vital interests<\/strong> in a genuine emergency, where applicable.<\/p><\/li><\/ul><p>Where we rely on consent, you may withdraw it at any time without affecting processing already carried out.<\/p><p>Where we rely on legitimate interests, you may request information about the relevant balancing assessment.<\/p><hr \/><h2>8. Sharing Personal Data<\/h2><p>We disclose personal data only where reasonably necessary.<\/p><p>Recipients may include:<\/p><ul><li><p>Hosting, cloud, connectivity, security, analytics, communications, customer-support and professional-service providers.<\/p><\/li><li><p>Payment, identity, logistics, travel, marketplace, platform, research or other operational partners relevant to the requested service.<\/p><\/li><li><p>Our clients or their authorised administrators when we process data on their behalf.<\/p><\/li><li><p>Professional advisers, insurers, auditors, potential transaction counterparties and successors, subject to appropriate confidentiality requirements.<\/p><\/li><li><p>Courts, regulators, law-enforcement bodies or other recipients where disclosure is legally required or necessary to protect rights and safety.<\/p><\/li><\/ul><p>Service providers are selected with regard to confidentiality, security and data-protection obligations.<\/p><p>Third parties acting for their own purposes are responsible for their own privacy practices and privacy notices.<\/p><hr \/><h2>9. International Transfers<\/h2><p>Because our clients, users, suppliers and infrastructure may be located in different countries, personal data may be transferred outside the United Kingdom.<\/p><p>Where transfer restrictions apply, we use recognised safeguards such as:<\/p><ul><li><p>Adequacy decisions<\/p><\/li><li><p>Approved contractual clauses<\/p><\/li><li><p>Binding contractual commitments<\/p><\/li><li><p>Other lawful transfer mechanisms<\/p><\/li><li><p>Supplementary safeguards where appropriate<\/p><\/li><\/ul><hr \/><h2>10. Retention<\/h2><p>We retain personal data only for as long as necessary for the purpose for which it was collected.<\/p><p>We take into account contract duration, client instructions, account activity, security and backup cycles, dispute periods and applicable legal, tax, audit or regulatory requirements.<\/p><h3>Typical Retention Periods<\/h3><ul><li><p><strong>Website enquiries and unsuccessful proposals:<\/strong> generally up to 24 months after the last substantive contact.<\/p><\/li><li><p><strong>Client, supplier, transaction and accounting records:<\/strong> for the duration of the engagement and any applicable statutory limitation or record-keeping period that follows.<\/p><\/li><li><p><strong>Client-controlled service data:<\/strong> for the period specified in the relevant contract, after which it is deleted or returned in accordance with agreed instructions, subject to secure backup rotation and legal holds.<\/p><\/li><li><p><strong>Security logs:<\/strong> for a proportionate period based on risk, unless they are required for an incident investigation, dispute or legal claim.<\/p><\/li><\/ul><hr \/><h2>11. Security<\/h2><p>We use proportionate technical and organisational measures designed to protect personal data.<\/p><p>These measures may include:<\/p><ul><li><p>Role-based access controls<\/p><\/li><li><p>Authentication controls<\/p><\/li><li><p>Encryption where appropriate<\/p><\/li><li><p>Logging and monitoring<\/p><\/li><li><p>Secure development and change-management processes<\/p><\/li><li><p>Vulnerability management<\/p><\/li><li><p>Incident-management procedures<\/p><\/li><li><p>Backup and recovery controls<\/p><\/li><li><p>Confidentiality obligations<\/p><\/li><li><p>Supplier security reviews<\/p><\/li><\/ul><p>No information system can be guaranteed to be completely secure. We therefore review and adapt our controls in light of identified risks, legal requirements and service needs.<\/p><hr \/><h2>12. Your Privacy Rights<\/h2><p>Subject to applicable law, you may have the right to:<\/p><ul><li><p>Request access to your personal data.<\/p><\/li><li><p>Request a copy of your personal data.<\/p><\/li><li><p>Correct inaccurate or incomplete personal data.<\/p><\/li><li><p>Request deletion of personal data.<\/p><\/li><li><p>Request restriction of processing.<\/p><\/li><li><p>Object to processing based on legitimate interests.<\/p><\/li><li><p>Object to direct marketing.<\/p><\/li><li><p>Request portability of personal data you provided in a structured, commonly used format.<\/p><\/li><li><p>Withdraw consent.<\/p><\/li><li><p>Change your cookie preferences.<\/p><\/li><li><p>Appeal the refusal of a privacy request where applicable law provides that right.<\/p><\/li><li><p>Exercise your privacy rights without unlawful discrimination.<\/p><\/li><\/ul><p>To submit a request, contact:<\/p><p><strong><a href=\"mailto:privacy@novalythsystems.com\">privacy@novalythsystems.com<\/a><\/strong><\/p><p>We may need to verify your identity and authority before responding to a request.<\/p><p>An authorised agent may act on your behalf where permitted by law and properly verified.<\/p><p>You may also complain to the <strong>UK Information Commissioner\u2019s Office (ICO)<\/strong>.<\/p><p>If the relevant personal data is controlled by one of our clients, please contact that client first.<\/p><hr \/><h2>13. Cookies and Similar Technologies<\/h2><p>Cookies are small files or similar technologies placed on or read from your device.<\/p><p>Our website may use the following categories of cookies:<\/p><h3>Strictly Necessary Cookies<\/h3><p>These cookies support essential website functionality, including:<\/p><ul><li><p>Security<\/p><\/li><li><p>Network management<\/p><\/li><li><p>Website navigation<\/p><\/li><li><p>Forms<\/p><\/li><li><p>Remembering privacy and cookie choices<\/p><\/li><\/ul><p>These cookies may operate without consent where permitted by law because they are necessary for the website to function properly.<\/p><h3>Preference Cookies<\/h3><p>Preference cookies remember settings or choices you make to improve your experience on the website.<\/p><h3>Analytics Cookies<\/h3><p>Analytics cookies help us understand how visitors interact with our website and allow us to improve website content and performance.<\/p><p>Where consent is required by law, analytics cookies operate only after you have provided consent.<\/p><h3>Marketing Cookies<\/h3><p>Marketing cookies are used only where clearly disclosed through our cookie banner or preference centre and where any consent required by law has been obtained.<\/p><p>We do not state that marketing cookies are active unless they are identified in the website&#8217;s cookie-management interface.<\/p><h3>Managing Your Cookie Preferences<\/h3><p>Our cookie banner or preference centre provides current information about:<\/p><ul><li><p>Cookies in use<\/p><\/li><li><p>Their purposes<\/p><\/li><li><p>Cookie providers<\/p><\/li><li><p>Cookie durations<\/p><\/li><li><p>Your available choices<\/p><\/li><\/ul><p>You can reject non-essential cookies or withdraw previously provided consent through the cookie preference centre.<\/p><p>You can also block or delete cookies through your browser settings.<\/p><p>Please note that disabling strictly necessary cookies may affect the operation or availability of some website functions.<\/p><hr \/><h2>14. Direct Marketing<\/h2><p>We may send relevant business communications where permitted by applicable law.<\/p><p>You can opt out of marketing communications at any time by:<\/p><ul><li><p>Using the unsubscribe option provided in the communication; or<\/p><\/li><li><p>Contacting us directly.<\/p><\/li><\/ul><p>Service, security, administrative and transaction-related communications are not marketing communications and may still be sent where necessary.<\/p><hr \/><h2>15. Children<\/h2><p>Our website and business services are not directed to children.<\/p><p>We do not knowingly collect personal data from children except where information is lawfully provided by a parent, guardian or authorised organisation and is necessary to provide a requested service.<\/p><hr \/><h2>16. Changes to This Policy<\/h2><p>We may update this Privacy &amp; Cookie Policy from time to time to reflect changes in:<\/p><ul><li><p>Our services<\/p><\/li><li><p>Technology<\/p><\/li><li><p>Applicable laws or regulations<\/p><\/li><li><p>Our data-processing practices<\/p><\/li><\/ul><p>The latest version will be published on our website with an updated revision date.<\/p><p>Where required, material changes may also be communicated using an appropriate additional method.<\/p><hr \/><h2>17. Contact Us<\/h2><p>For questions about this Privacy &amp; Cookie Policy or to exercise your privacy rights, please contact:<\/p><p><strong>Novalyth Systems<\/strong><br \/>London, United Kingdom<br \/><strong>Email:<\/strong> <a href=\"mailto:privacy@novalythsystems.com\">privacy@novalythsystems.com<\/a><\/p>\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t","protected":false},"excerpt":{"rendered":"<p>PRIVACY &amp; COOKIE POLICY PRIVACY &amp; COOKIE POLICY Novalyth SystemsLast Updated: 19 August 2026 1. Introduction Novalyth Systems (\u201cNovalyth\u201d, \u201cwe\u201d, \u201cus\u201d, or \u201cour\u201d) provides enterprise workflow and managed application services from London, United Kingdom. This Privacy &amp; Cookie Policy explains how we collect, use, disclose, retain and protect personal data when you: Visit novalythsystems.com Contact [&hellip;]<\/p>\n","protected":false},"author":1,"featured_media":0,"parent":0,"menu_order":0,"comment_status":"closed","ping_status":"closed","template":"elementor_header_footer","meta":{"footnotes":""},"class_list":["post-336","page","type-page","status-publish","hentry"],"_links":{"self":[{"href":"https:\/\/www.novalythsystems.com\/index.php?rest_route=\/wp\/v2\/pages\/336","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/www.novalythsystems.com\/index.php?rest_route=\/wp\/v2\/pages"}],"about":[{"href":"https:\/\/www.novalythsystems.com\/index.php?rest_route=\/wp\/v2\/types\/page"}],"author":[{"embeddable":true,"href":"https:\/\/www.novalythsystems.com\/index.php?rest_route=\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/www.novalythsystems.com\/index.php?rest_route=%2Fwp%2Fv2%2Fcomments&post=336"}],"version-history":[{"count":12,"href":"https:\/\/www.novalythsystems.com\/index.php?rest_route=\/wp\/v2\/pages\/336\/revisions"}],"predecessor-version":[{"id":728,"href":"https:\/\/www.novalythsystems.com\/index.php?rest_route=\/wp\/v2\/pages\/336\/revisions\/728"}],"wp:attachment":[{"href":"https:\/\/www.novalythsystems.com\/index.php?rest_route=%2Fwp%2Fv2%2Fmedia&parent=336"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}