Privacy policy

NovaScale AI Ltd ("NovaScale", "we", "us") is the controller of the personal data described in this policy. We build and run AI receptionists, call agents, website chat, lead generation, email campaigns, content and ads, websites and automation for businesses, and we sell Google review stands.

• Company: NovaScale AI Ltd, registered in England and Wales, company number 16139762
• Registered office: 167-169 Great Portland Street, 5th Floor, London, W1W 5PF
• Email: hello@novascaleai.com
• Website: novascaleai.com

For any question about this policy or your personal data, email hello@novascaleai.com with "Privacy" in the subject line, or write to our registered office. We are not required to appoint a data protection officer. Our director handles data protection questions.

This policy explains how we handle personal data when you:

• visit our website or see our ads
• send us an enquiry through our website, a Facebook or Instagram lead form, phone, email or messaging
• use our missed-call calculator
• buy Google review stands from us
• hear from us about our services as a business contact
• become a client, or work for a client or supplier
• speak to us on a call

Websites we build for clients are run by those clients, and their own privacy notices apply. Some privacy notices we host on our website for client businesses belong to those businesses, not to us. Services we run under a different brand name have their own privacy notices.

We do not ask for special category data, such as health information, ethnicity or religious beliefs. Please do not send it to us.

• You: through our forms, checkout, calls, emails, messages and meetings.
• Meta (Facebook and Instagram): when you submit a lead form in one of our ads, Meta passes us the details in that form. Meta may pre-fill some fields from your profile, and you can edit them before you submit.
• Our payment provider: when you buy review stands, it confirms your payment and passes us the contact and delivery details you enter at checkout.
• Your browser: technical details such as your IP address and browser type, which every website receives when it is visited.
• Public and business sources: your business website, Companies House, online directories, professional networking sites, and business data providers we use to find relevant business contacts.
• Our clients: when they give us their staff details to set up or run a service.

Where we rely on legitimate interests, we have weighed our interests against yours, and you can object at any time (see section 13).

• Calls: we may call business numbers about our services. We check numbers against the Telephone Preference Service and the Corporate Telephone Preference Service before calling, unless you have told us you are happy to hear from us.
• Emails to companies: we may email business addresses at limited companies, LLPs and other corporate bodies about services relevant to your role. Every email says who we are and gives you a simple way to opt out.
• Emails and texts to sole traders and partnerships: we only send these with your consent, or where you have enquired about or bought similar services from us and did not opt out.
• Messages about your enquiry or order: confirmations, and calls, texts and emails following up your own enquiry or order, are service messages, not marketing.

To stop marketing at any time, reply STOP to a text, use the unsubscribe link in any email, tell us on a call, or email hello@novascaleai.com. We then add you to a suppression list so we do not contact you again, keeping only the minimum details needed to do this.

When you send an enquiry, use our calculator or place an order, we email you to confirm we have it, and we send the details to our team. These emails are sent through our email delivery provider, which records whether each email was delivered so we can put problems right.

Every email includes an unsubscribe link. If you use it, we will not send you further emails of that kind, but we will still reply to you if you contact us.

Our website only uses what it needs to work. We do not currently use analytics cookies, advertising cookies or tracking pixels.

If we add analytics or advertising tools in future, we will ask for your consent first and update this policy. You can also block cookies in your browser settings.

We do not sell your personal data. We share it only with:

• Service providers who help us run the business, under contracts that require them to protect your data and use it only on our instructions: website hosting and databases, email delivery, email and office software, customer relationship management, telephone, text messaging and AI voice providers, business data providers, email sending platforms, AI tools we use to design and write content, payment providers, postal and delivery services, and our accountant.
• Meta, for our ads and lead forms, as described in section 4.
• Professional advisers, such as lawyers and insurers, where needed.
• Authorities, such as HMRC or the police, where the law requires it.
• A buyer or investor, if we sell or restructure our business, under confidentiality terms.

Some of our service providers store or access data outside the UK, including in the European Economic Area and the United States. When this happens, we make sure your data stays protected by using one of these safeguards:

• countries or frameworks the UK government has recognised as providing adequate protection
• the UK International Data Transfer Agreement, or the UK Addendum to the EU Standard Contractual Clauses

Email us if you would like more detail about a specific transfer.

When data is no longer needed, we delete it or make it anonymous.

Security. We protect your data with access controls, strong passwords, two-factor authentication where available, encryption in transit, and reputable providers. Only people who need your data can access it. If a breach is likely to put your rights at risk, we will tell you and the ICO as the law requires.

Children. Our services are for businesses and are not aimed at anyone under 18. We do not knowingly collect children's data.

Automated decisions. We do not make decisions about you using only automated means that have legal or similarly significant effects. Our lead forms may close early if you tell us you do not run a business, and a person reviews every enquiry we receive.

Under UK data protection law you have the right to:

• get a copy of your personal data
• have inaccurate data corrected
• have your data deleted, in some circumstances
• restrict how we use your data, in some circumstances
• object to our use of your data based on legitimate interests, and stop direct marketing at any time
• receive data you gave us in a portable format, in some circumstances
• withdraw your consent at any time where we rely on it, without affecting what we did before

To use any of these rights, email hello@novascaleai.com. We may ask you to confirm your identity. We will reply within one month, or tell you within that month if a complex request needs longer. There is normally no charge.

If you are unhappy with how we have handled your data, please email hello@novascaleai.com first so we can put it right. We will acknowledge your complaint within 30 days.

You can also complain to the Information Commissioner's Office (ICO), the UK data protection regulator:

• Online: ico.org.uk/make-a-complaint
• Phone: 0303 123 1113
• Post: Information Commissioner's Office, Wycliffe House, Water Lane, Wilmslow, Cheshire, SK9 5AF

We may update this policy when our services or the law change. The date at the top shows when it was last updated. If a change significantly affects you, we will tell you before it takes effect.

Buying from us online is also covered by our terms.