Who is responsible for your data
The business that runs Novotly is identified in our Legal notice, and it is responsible for your data. Because it is established in the European Union, the EU General Data Protection Regulation (GDPR) applies to the data we handle, wherever you live.
Contact for anything about your data: hello@novotly.com.
What we collect
- The contact form: your name, email address, venue name, city and state, Facebook page, Instagram or current website, and your message.
- Emails you send us, and the files you attach for your project (text, logo, photos of your venue).
- If you become a client: the details needed for quotes and invoices. Card payments go through our payment provider; we never see or store your card number.
- If we contacted you first: your venue name, business email address and public website or social media page, taken from public business listings or your own pages.
This website uses no cookies, no analytics and no advertising trackers. Fonts and images are served from the site itself. The only exception is the map on our two venue demo pages: to draw it, your browser loads map tiles from OpenFreeMap and, when the link names a town, looks it up with OpenStreetMap's Nominatim service. Those services receive your IP address, as with any web request.
Why we use it, and on what legal basis
- To reply to your request and prepare your preview and quote: steps taken at your request before a contract (GDPR art. 6(1)(b)).
- To build your website, invoice and keep accounting records: performance of the contract and our legal obligations (art. 6(1)(b) and (c)).
- To send a business owner a first email about our services: our legitimate interest in finding clients (art. 6(1)(f)). Every such email lets you opt out, and we stop after a single reply asking us to.
Who receives it
Only our studio, and the service providers we need to run the business:
- Netlify (website hosting and contact form storage), Netlify, Inc., 101 2nd Street, San Francisco, CA 94105, United States (privacy@netlify.com).
- Zoho Mail (Zoho Corporation), which stores our mailbox.
- Stripe, for client card payments.
Some of these providers process data in the United States. Those transfers rely on the EU-U.S. Data Privacy Framework or on the European Commission's standard contractual clauses, as each provider states in its own policy. We never sell your data.
How long we keep it
- Requests that don't lead to a project, and prospecting records: 3 years after our last exchange, then deleted.
- Client project files: for the length of our work together, then 3 years.
- Invoices and accounting records: 10 years, as accounting law requires.
Your rights
You can ask to see, correct or delete your data, to limit or object to its use (including any prospecting email), and to receive it in a portable format. Write to hello@novotly.com; we answer within one month.
If you think we haven't respected your rights, you can complain to the data protection authority of the country where the business is registered (see our Legal notice), or to the authority where you live.
Security
The site is served over HTTPS. Access to the mailbox, the hosting account and the form submissions is limited to our studio and protected by strong passwords.
Changes
If this policy changes, we update the date at the top of this page.