Skip to content

Legal

Privacy Policy

Last updated
22 September 2026
Sections
13
On this page · 13
  1. 01Who We Are
  2. 02Data We Collect
  3. 03How and Why We Use It
  4. 04Automated Spam Screening
  5. 05Client Project Data
  6. 06Sharing
  7. 07International Transfers
  8. 08Retention
  9. 09Security
  10. 10Your Rights
  11. 11Regional Information
  12. 12Cookies
  13. 13Changes

01

Who We Are

This website is operated by Novizna (Private) Limited, incorporated in Pakistan (CUIN 0271347), 37-A, Khayaban e Firdousi, Johar Town, Lahore 54000, Pakistan, together with its UK affiliate Novizna Ltd (Company No. 16083132), 124 City Road, London EC1V 2NX, United Kingdom (together with other group companies, "Novizna", "we", "us").

For personal data of visitors and clients in the UK/EEA, Novizna Ltd acts as the data controller; for other visitors, Novizna (Private) Limited is the controller. Contact: privacy@novizna.com.

02

Data We Collect

  • Contact and enquiry data: name, email, phone, company, and message content when you contact us via forms, email (info@novizna.com), or phone;
  • Enquiry screening data: when you submit our contact form we also record your IP address, browser, operating system, device type, language setting, and a spam-risk score from Google reCAPTCHA, so we can detect spam, fraud, and abuse;
  • Enquiry source data: how you reached us — the referring website, campaign tags in the link you followed, the page you first landed on, and the last pages you visited before contacting us — sent with your enquiry. If you arrived through a link in one of our emails, we may link your visit to your email address;
  • Business relationship data: contract, billing, and project information for clients and suppliers;
  • Recruitment data: CVs, application details, and interview notes if you apply for a role;
  • Technical data: IP address, browser type, device information, pages visited, collected via cookies and similar technologies (see our Cookie Policy);
  • Marketing data: your preferences for receiving updates from us.

We do not knowingly collect data from children under 16, and this site is not directed at them.

03

How and Why We Use It

  • Purpose
    Responding to enquiries and providing proposals
    Legal basis (UK/EU GDPR)
    Legitimate interests / pre-contract steps
  • Purpose
    Screening form submissions for spam, fraud, and abuse
    Legal basis (UK/EU GDPR)
    Legitimate interests (keeping our site and inboxes secure)
  • Purpose
    Understanding which channels bring us enquiries
    Legal basis (UK/EU GDPR)
    Legitimate interests / consent (non-essential cookies)
  • Purpose
    Delivering services and managing client accounts
    Legal basis (UK/EU GDPR)
    Performance of a contract
  • Purpose
    Billing, accounting, and legal compliance
    Legal basis (UK/EU GDPR)
    Legal obligation
  • Purpose
    Website operation, analytics, and security
    Legal basis (UK/EU GDPR)
    Legitimate interests / consent (non-essential cookies)
  • Purpose
    Marketing communications
    Legal basis (UK/EU GDPR)
    Consent (withdraw anytime via unsubscribe or privacy@novizna.com)
  • Purpose
    Recruitment
    Legal basis (UK/EU GDPR)
    Pre-contract steps / legitimate interests

04

Automated Spam Screening

Contact-form submissions are checked automatically (reCAPTCHA score, hidden anti-bot field, and request details) and likely spam is set aside rather than forwarded to our team. This does not produce legal or similarly significant effects for you. If you think your message did not reach us, email info@novizna.com directly.

05

Client Project Data

When we develop, host, or maintain systems for clients, we may process personal data contained in those systems as a processor on the client's instructions, governed by our contract with that client. That data is not covered by this policy; enquiries about it should go to the relevant client (the controller).

06

Sharing

We share personal data only with: our group companies (Novizna (Private) Limited, Pakistan; Novizna Ltd and Evnesoft Ltd, UK; and any future affiliates, listed on request) for the purposes above; service providers under contract; professional advisers; and authorities where legally required. We do not sell personal data.

Our main service providers for this website are:

  • Supabase — database hosting for enquiries;
  • Zoho ZeptoMail — delivery of enquiry notification emails;
  • Google — reCAPTCHA spam protection, and Tag Manager / Analytics (analytics only with your consent);
  • PostHog (EU-hosted) — website usage analytics.

A current list of all providers is available on request.

07

International Transfers

We operate from Pakistan and the UK, so your data may be transferred between these locations and to our service providers' locations, including the United States (for example, Google). For UK/EEA personal data transferred to countries without an adequacy decision (including Pakistan), we use appropriate safeguards such as the UK International Data Transfer Agreement / EU Standard Contractual Clauses. Transfers to the United States rely on the EU-US Data Privacy Framework and its UK Extension where the recipient is certified, or on Standard Contractual Clauses.

08

Retention

We keep personal data only as long as needed:

  • enquiry data: up to 24 months after last contact;
  • enquiry screening data (IP address, browser and device details): 90 days;
  • submissions flagged as spam: 30 days;
  • client and billing records: for the period required by tax and company law (typically 6 years);
  • unsuccessful applicant data: up to 12 months unless you consent to longer;
  • analytics data: per the cookie lifetimes in our Cookie Policy.

09

Security

We apply technical and organizational measures including encryption in transit, access controls, MFA on our systems, and staff confidentiality obligations. No internet transmission is completely secure; please avoid sending sensitive information through the contact form.

10

Your Rights

Wherever you live, we give you the same core rights, subject to applicable law (including UK/EU GDPR for UK/EEA residents). You may request: access to your data, correction, deletion, restriction, portability, and objection to processing based on legitimate interests; and you may withdraw consent at any time. Contact privacy@novizna.com — we respond within one month. See Regional Information below for how to complain to a regulator.

11

Regional Information

  • United Kingdom: Novizna Ltd is the controller. You can complain to the Information Commissioner's Office (ICO), ico.org.uk.
  • European Economic Area: Novizna Ltd is the controller. You can complain to the data protection authority in the EEA country where you live or work, or where you think an infringement happened.
  • Pakistan: Novizna (Private) Limited is the controller and handles personal data in line with applicable Pakistani law, including the Prevention of Electronic Crimes Act 2016.
  • Other countries: Novizna (Private) Limited is the controller, and the rights in section 10 apply to you. If your local law gives you further rights, contact privacy@novizna.com and we will honour them.

12

Cookies

See our Cookie Policy for what we set and how to control it.

13

Changes

We may update this policy; the "Last updated" date will change and material changes will be highlighted on this page. Questions: privacy@novizna.com.