Privacy notice

Privacy, plainly.

Last updated 1 October 2026 · Applies under the UK GDPR and the EU GDPR.

Who we are

Novalis Innovations (“we”) is the controller for personal data collected through this website.

What we collect

• Visit logs. When you load a page we record your IP address, approximate location derived from it (country, region, city, postcode area, coordinates, time zone), network provider or organisation, the page, referrer, browser user-agent and time.
• What you send us. Names, company, email and messages submitted through our forms, and demo access-code attempts (stored masked, never in full).

Cookies

Our analytics are cookieless. We only set strictly necessary cookies: one to remember a region choice if you ask to stay on this domain, and one to keep an authorised demo session signed in.

Why, and on what basis

Visit logs are processed for security (abuse and fraud prevention) and for analytics about how our site is used, on the basis of our legitimate interests (Art. 6(1)(f)). Form submissions are processed to reply to you and to take steps at your request (Art. 6(1)(b) and (f)).

Retention

Visit logs and form data are kept for 12 months and then deleted automatically.

Who processes it

Our site runs on Cloudflare (hosting, database) and email is delivered by Resend. Both act as processors under data-processing terms; transfers outside the UK/EEA rely on appropriate safeguards such as Standard Contractual Clauses and the UK Addendum.

Your rights

You may request access, correction, erasure, restriction or a copy of your data, and object to processing based on legitimate interests. Write to [email protected]. You may also complain to the UK Information Commissioner’s Office (ico.org.uk) or your local EU supervisory authority.