Privacy policy

Who we are

IOVA LTD is the controller responsible for the personal information described here. For privacy questions or requests, email info@iova.co.uk.

This policy covers our website and enquiries. If we process information on behalf of a client within a separate product or project, the relevant service agreement and privacy notice apply.

Information we receive

• Enquiries: your email address, your name if you choose to provide it, your project description and any other information you include in messages or follow-up correspondence.
• Technical information: our hosting and delivery providers may process your IP address, browser and device information, requested pages and request times to deliver and protect the website.

The contact form requires an email address and a message so we can understand and respond to your enquiry. Your name is optional. Please do not include passwords, payment details or sensitive personal information in the form.

How and why we use information

We use enquiry information to reply, discuss requirements and prepare proposals. Where you ask us to take steps towards a contract with you, our lawful basis is taking those steps. For other business enquiries, we rely on our legitimate interest in responding to people who contact us and developing business relationships.

Delivering the website, preventing abuse and troubleshooting rely on our legitimate interest in running a reliable, secure service. Where records must be kept or disclosed to meet a legal requirement, the basis is compliance with that legal obligation.

The website does not use your enquiry to make solely automated decisions that have legal or similarly significant effects on you.

Service providers and sharing

Information is handled by the providers needed to operate this website and respond to you:

• Vercel hosts and delivers the website and may process technical request information. See Vercel's privacy policy.
• FormSubmit receives the information you send through our contact form and forwards it to us by email. See FormSubmit's privacy policy (PDF). You can email us directly if you prefer not to use the form.
• Email providers handle delivery and storage of our correspondence with you.
• Google Fonts supplies the fonts used on this website. Your browser contacts Google to load them, sending technical connection information such as your IP address and browser headers. See Google's privacy policy.

Information may also be shared with professional advisers or public authorities where necessary to comply with the law or establish, exercise or defend legal claims.

These providers may process information outside the UK. Where a transfer is subject to UK data protection law, an appropriate transfer mechanism is required, such as UK adequacy regulations or approved contractual safeguards. Contact us for information about the arrangements relevant to your data.

Cookies and external links

The website's own code does not set cookies or use browser storage, advertising pixels or analytics scripts. Third-party services have their own privacy practices, described in the policies linked above.

Links to LinkedIn, Facebook and other websites take you to services covered by their own privacy policies.

How long information is kept

Retention depends on the purpose of the information: whether an enquiry is still active, whether it leads to a client relationship, and whether records are needed for legal obligations or to resolve a dispute. Information should be deleted or anonymised when it is no longer needed for those purposes. Providers also apply their own retention arrangements to technical and delivery records.

To ask about information relating to a particular enquiry, or to request its deletion, contact info@iova.co.uk.

Your rights

Under UK data protection law, you may have rights to access your personal information, correct it, request deletion or restrict its use. You can object to processing based on legitimate interests and, where applicable, request a portable copy of your information. These rights depend on the circumstances and lawful basis. If processing relies on consent, you can withdraw it at any time without affecting earlier lawful processing.

Send requests to info@iova.co.uk. We may need to confirm your identity before responding.

You can also complain to the Information Commissioner's Office (ICO), the UK's data protection regulator.

Changes to this policy

Updates will be published on this page with a revised date. For questions about this policy, contact us by email.