01
Who We Are
This website is operated by Novizna (Private) Limited, incorporated in Pakistan (CUIN 0271347), 37-A, Khayaban e Firdousi, Johar Town, Lahore 54000, Pakistan, together with its UK affiliate Novizna Ltd (Company No. 16083132), 124 City Road, London EC1V 2NX, United Kingdom (together with other group companies, "Novizna", "we", "us").
For personal data of visitors and clients in the UK/EEA, Novizna Ltd acts as the data controller; for other visitors, Novizna (Private) Limited is the controller. Contact: privacy@novizna.com.
02
Data We Collect
- Contact and enquiry data: name, email, phone, company, and message content when you contact us via forms, email (info@novizna.com), or phone;
- Enquiry screening data: when you submit our contact form we also record your IP address, browser, operating system, device type, language setting, and a spam-risk score from Google reCAPTCHA, so we can detect spam, fraud, and abuse;
- Enquiry source data: how you reached us — the referring website, campaign tags in the link you followed, the page you first landed on, and the last pages you visited before contacting us — sent with your enquiry. If you arrived through a link in one of our emails, we may link your visit to your email address;
- Business relationship data: contract, billing, and project information for clients and suppliers;
- Recruitment data: CVs, application details, and interview notes if you apply for a role;
- Technical data: IP address, browser type, device information, pages visited, collected via cookies and similar technologies (see our Cookie Policy);
- Marketing data: your preferences for receiving updates from us.
We do not knowingly collect data from children under 16, and this site is not directed at them.
03
How and Why We Use It
- Purpose
- Responding to enquiries and providing proposals
- Legal basis (UK/EU GDPR)
- Legitimate interests / pre-contract steps
- Purpose
- Screening form submissions for spam, fraud, and abuse
- Legal basis (UK/EU GDPR)
- Legitimate interests (keeping our site and inboxes secure)
- Purpose
- Understanding which channels bring us enquiries
- Legal basis (UK/EU GDPR)
- Legitimate interests / consent (non-essential cookies)
- Purpose
- Delivering services and managing client accounts
- Legal basis (UK/EU GDPR)
- Performance of a contract
- Purpose
- Billing, accounting, and legal compliance
- Legal basis (UK/EU GDPR)
- Legal obligation
- Purpose
- Website operation, analytics, and security
- Legal basis (UK/EU GDPR)
- Legitimate interests / consent (non-essential cookies)
- Purpose
- Marketing communications
- Legal basis (UK/EU GDPR)
- Consent (withdraw anytime via unsubscribe or privacy@novizna.com)
- Purpose
- Recruitment
- Legal basis (UK/EU GDPR)
- Pre-contract steps / legitimate interests
| Purpose | Legal basis (UK/EU GDPR) |
|---|---|
| Responding to enquiries and providing proposals | Legitimate interests / pre-contract steps |
| Screening form submissions for spam, fraud, and abuse | Legitimate interests (keeping our site and inboxes secure) |
| Understanding which channels bring us enquiries | Legitimate interests / consent (non-essential cookies) |
| Delivering services and managing client accounts | Performance of a contract |
| Billing, accounting, and legal compliance | Legal obligation |
| Website operation, analytics, and security | Legitimate interests / consent (non-essential cookies) |
| Marketing communications | Consent (withdraw anytime via unsubscribe or privacy@novizna.com) |
| Recruitment | Pre-contract steps / legitimate interests |
04
Automated Spam Screening
Contact-form submissions are checked automatically (reCAPTCHA score, hidden anti-bot field, and request details) and likely spam is set aside rather than forwarded to our team. This does not produce legal or similarly significant effects for you. If you think your message did not reach us, email info@novizna.com directly.
05
Client Project Data
When we develop, host, or maintain systems for clients, we may process personal data contained in those systems as a processor on the client's instructions, governed by our contract with that client. That data is not covered by this policy; enquiries about it should go to the relevant client (the controller).
07
International Transfers
We operate from Pakistan and the UK, so your data may be transferred between these locations and to our service providers' locations, including the United States (for example, Google). For UK/EEA personal data transferred to countries without an adequacy decision (including Pakistan), we use appropriate safeguards such as the UK International Data Transfer Agreement / EU Standard Contractual Clauses. Transfers to the United States rely on the EU-US Data Privacy Framework and its UK Extension where the recipient is certified, or on Standard Contractual Clauses.
08
Retention
We keep personal data only as long as needed:
- enquiry data: up to 24 months after last contact;
- enquiry screening data (IP address, browser and device details): 90 days;
- submissions flagged as spam: 30 days;
- client and billing records: for the period required by tax and company law (typically 6 years);
- unsuccessful applicant data: up to 12 months unless you consent to longer;
- analytics data: per the cookie lifetimes in our Cookie Policy.
09
Security
We apply technical and organizational measures including encryption in transit, access controls, MFA on our systems, and staff confidentiality obligations. No internet transmission is completely secure; please avoid sending sensitive information through the contact form.
10
Your Rights
Wherever you live, we give you the same core rights, subject to applicable law (including UK/EU GDPR for UK/EEA residents). You may request: access to your data, correction, deletion, restriction, portability, and objection to processing based on legitimate interests; and you may withdraw consent at any time. Contact privacy@novizna.com — we respond within one month. See Regional Information below for how to complain to a regulator.
11
Regional Information
- United Kingdom: Novizna Ltd is the controller. You can complain to the Information Commissioner's Office (ICO), ico.org.uk.
- European Economic Area: Novizna Ltd is the controller. You can complain to the data protection authority in the EEA country where you live or work, or where you think an infringement happened.
- Pakistan: Novizna (Private) Limited is the controller and handles personal data in line with applicable Pakistani law, including the Prevention of Electronic Crimes Act 2016.
- Other countries: Novizna (Private) Limited is the controller, and the rights in section 10 apply to you. If your local law gives you further rights, contact privacy@novizna.com and we will honour them.
13
Changes
We may update this policy; the "Last updated" date will change and material changes will be highlighted on this page. Questions: privacy@novizna.com.