Privacy Policy: How We Handle Your Data

Last updated: October 6, 2026

Novatrix Digital ("Novatrix Digital", "we", "us", or "our") respects your privacy and is committed to protecting the personal data you share with us. This Privacy Policy explains what information we collect when you visit our website or use our services, how we use it, and the rights you have over your data.

1. Information We Collect

1.1 Information You Provide

When you contact us, request a quote, or engage our services, we may collect your name, company name, email address, phone number, website URL, and any details you include in your message or project description.

1.2 Information Collected Automatically

When you browse our website, we may automatically collect technical information such as your IP address, browser type, device information, pages visited, and the date and time of your visit. This data is collected through server logs. Our website is delivered and protected through Cloudflare, which processes this technical data to provide security, performance, and, where enabled, privacy-focused visitor analytics that do not use cookies. Our fonts and other site assets are hosted on our own servers, so loading our pages does not send your data to font or advertising services.

1.3 Client Project Data

In the course of providing web design, development, Shopify, and management services, we may process data stored within the systems we build and operate on your behalf, such as store, product, or customer records. This data remains the property of the client and is handled in accordance with our service agreements.

2. How We Use Your Information

To respond to your inquiries and provide quotes.
To deliver, maintain, and improve the services you have requested.
To communicate with you about your account, projects, or support requests.
To send service-related notices and, where you have consented, marketing communications.
To monitor and improve the security, performance, and reliability of our website and services.
To comply with our legal and regulatory obligations.

3. Legal Basis for Processing

Where applicable law (such as the EU/UK GDPR) requires it, we process personal data on the basis of your consent, the performance of a contract with you, our legitimate business interests, or compliance with a legal obligation.

4. Cookies & Tracking

We do not use advertising cookies, cross-site trackers, or third-party analytics cookies, and nothing on our public pages tracks you before you have given consent. The only cookies that may be set are strictly necessary ones: security cookies set by Cloudflare to protect the site from bots and abuse, and login cookies used only by our own staff in our admin area. Because we use no non-essential cookies, we do not show a cookie consent banner. If we ever add non-essential cookies, we will ask for your consent first, and rejecting them will be as easy as accepting them.

5. How We Share Information

We do not sell your personal data. We may share information with trusted third-party service providers (such as hosting, content delivery and security, analytics, and email providers) who process data on our behalf under appropriate confidentiality and data-protection obligations. We may also disclose information where required by law or to protect our legal rights.

We use AI-assisted tools to help deliver our services. We do not use the personal data you submit through our contact form to train AI models, and we limit any client data used with such tools to what is necessary for the work.

5.1 Service Providers (Subprocessors)

These are the providers that process personal data on our behalf:

Cloudflare, Inc.: content delivery, security, and DNS for our website.
Our web hosting provider: hosts this website, its database (including contact form submissions), and our email.
Platform and tool providers used for client work, such as Shopify and AI-assisted development tools, only where needed to deliver a project you have engaged us for.

We will update this list when our providers change. Contact us if you would like more detail about any provider.

6. Data Retention

We retain personal data only for as long as necessary to fulfil the purposes described in this policy, to comply with our legal obligations, resolve disputes, and enforce our agreements. Enquiries sent through our contact form that do not lead to a project are kept for up to 24 months and then deleted. Database backups are kept for a limited period and rotated automatically. When data is no longer needed, we securely delete or anonymize it.

7. Data Security

We implement appropriate technical and organizational measures to protect personal data against unauthorized access, alteration, disclosure, or destruction. However, no method of transmission or storage is completely secure, and we cannot guarantee absolute security.

8. Your Rights

Depending on your jurisdiction, you may have the right to access, correct, update, or delete your personal data, to object to or restrict certain processing, to withdraw consent, and to request a copy of your data in a portable format. To exercise any of these rights, email contact@novatrixdigital.com with the subject "Data request" and tell us what you would like us to do. We may ask you to confirm your identity, and we will respond within 30 days. If you ask for a copy of your data, we will send it in a common, machine-readable format (such as CSV or JSON). If you ask us to delete it, we will remove it from our systems, including our contact records, except where we must keep it to meet a legal obligation.

We only send marketing emails if you have agreed to receive them, and every marketing email includes an unsubscribe link.

8A. Data Processing Agreements

When we process personal data on behalf of a business client, for example customer records in a store we manage, we act as a data processor and handle that data only on the client's instructions. Business clients can request a data processing agreement (DPA) at any time by contacting us.

9. International Transfers

As a remote, internationally distributed team, we may process and store data in countries other than the one in which you reside. Where we transfer data internationally, we take steps to ensure it receives an adequate level of protection.

10. Children's Privacy

Our services are intended for businesses and are not directed at children. We do not knowingly collect personal data from anyone under the age of 16.

11. Changes to This Policy

We may update this Privacy Policy from time to time. The "Last updated" date at the top of this page reflects the most recent revision. We encourage you to review this page periodically.

12. Contact Us

If you have any questions about this Privacy Policy or how we handle your data, please contact us at contact@novatrixdigital.com.

This Privacy Policy is provided as general information and does not constitute legal advice. We recommend having it reviewed by qualified legal counsel to ensure it meets the specific requirements that apply to your business and jurisdiction.