// Legal

PRIVACY POLICY

Last updated: March 2026

1. Who We Are

Nova Blue Technologies Ltd is registered in England and Wales. We operate the website at www.nova-blue.com and provide defence cybersecurity services to UK and allied defence sector organisations.

For the purposes of UK GDPR, Nova Blue Technologies Ltd is the data controller. If you have any questions about how we handle your personal data, please contact us at notices@nova-blue.com.

2. What Data We Collect and Why

Data Source Purpose Legal Basis
Name, job title, company, work email Assessment request form To respond to your enquiry and arrange your free assessment Legitimate interests / Pre-contractual steps
Company stage, primary concern, additional context Assessment request form To tailor our response to your specific situation Legitimate interests
IP address Google Fonts (automatic on page load) Font delivery — your browser contacts Google's servers to load typefaces used on this site Legitimate interests
Cookie consent preference Cookie banner (stored locally in your browser) To remember whether you have accepted or declined non-essential cookies Legal obligation / Legitimate interests

We do not use advertising cookies, tracking pixels, or behavioural analytics tools. We do not sell or share your personal data with third parties for marketing purposes.

3. Third-Party Services

Google Fonts — This site loads fonts from Google's servers. When your browser requests a font, your IP address is transmitted to Google. This is a standard technical process. Google's privacy policy is available at policies.google.com/privacy.

Blockmark Tech — Our certification badges are served via iframes from registry.blockmarktech.com. Blockmark may process your IP address when these widgets load. Their privacy policy is available on their website at blockmarktech.com.

Calendly / Booking system — If you use our booking link to schedule a call, you will be directed to a third-party booking platform. Their own privacy policy applies from that point.

4. Cookies

We use a single first-party cookie preference stored in your browser's localStorage to remember your cookie consent choice. This is not a tracking cookie and does not leave your device.

If we introduce analytics or other cookies in future, we will update this policy and request your consent via the cookie banner before any such cookies are set.

You can clear your stored preferences at any time by clearing your browser's local storage or site data.

5. How Long We Keep Your Data

Data submitted via our assessment request form is retained for as long as necessary to respond to your enquiry and for a reasonable period thereafter in case of follow-up. We do not retain enquiry data for longer than 24 months from last contact unless we enter into a contractual relationship with you.

If you become a client, data related to our engagement is retained in line with our contractual obligations and applicable legal requirements, typically for 6 years following the end of the engagement.

6. Your Rights Under UK GDPR

You have the following rights in relation to your personal data:

To exercise any of these rights, please contact us at notices@nova-blue.com. We will respond within 30 days.

You also have the right to lodge a complaint with the Information Commissioner's Office (ICO) at ico.org.uk if you believe your data has been handled unlawfully.

7. Data Security

We take appropriate technical and organisational measures to protect your personal data against unauthorised access, loss, or disclosure. As a cybersecurity company, security is fundamental to how we operate — not an afterthought.

8. Changes to This Policy

We may update this policy from time to time. The date at the top of this page will always reflect the most recent version. Significant changes will be communicated where we have a means to do so.

9. Contact

For any privacy-related queries, please write to us at:

Nova Blue Technologies Ltd
Email: notices@nova-blue.com