Privacy Policy
1. Who we are
This Privacy Policy explains how Onnova Growth Studio (Onnova) collects, uses and protects personal data when you visit onnova.co.uk (the Site) or contact Onnova. Onnova acts as the data controller for the personal data described in this policy.
2. Personal data collected
Onnova may collect and process: (a) identity and contact details that you provide, such as your name, email address, company name and role; (b) information you choose to provide in the contact form or in subsequent correspondence; and (c) technical data such as your IP address, browser type and version, device information, time zone setting and information about how you interact with the Site, which may be collected through cookies and similar technologies.
3. How personal data is used
Onnova uses personal data for the following purposes: (a) to respond to enquiries, assess potential engagements and propose advisory services; (b) to operate, administer and improve the Site, including monitoring its performance and security; and (c) to comply with legal and regulatory obligations, including record-keeping requirements. Where required by applicable law, Onnova may also use personal data for marketing communications, but only with your consent or where another lawful basis applies. The main legal bases relied upon are the performance of pre-contractual steps at your request, Onnova's legitimate interests in operating and developing its advisory business and the Site, compliance with legal obligations, and consent where applicable.
4. Cookies and analytics
The Site may use cookies and similar technologies that are necessary for it to function and, where permitted and subject to your consent, to analyse usage and improve the Site. You can manage cookie preferences through the cookie banner, where displayed, and through your browser settings.
5. Sharing of personal data
Onnova does not sell personal data. Personal data may be shared with service providers that support the operation of the Site and of Onnova's business, such as website hosting, analytics, email and professional services providers; these providers act on Onnova's instructions and are required to protect personal data. Personal data may also be disclosed where required by law or to protect legal rights.
6. International transfers
Where personal data is transferred outside the United Kingdom or the European Economic Area, Onnova takes steps to ensure that an appropriate safeguard is in place, such as an adequacy decision or standard contractual clauses, as required by applicable law.
7. Retention
Personal data is kept only for as long as necessary for the purposes described in this policy, including to satisfy legal, accounting or reporting requirements; the period depends on the nature of the data and the purpose for which it is held.
8. Security
Onnova applies appropriate technical and organisational measures to protect personal data against unauthorised access, loss or alteration. No method of transmission over the internet is completely secure, and absolute security cannot be guaranteed.
9. Your rights
Subject to applicable law, you may have the right to request access to your personal data; to request correction or erasure; to restrict or object to processing; to request data portability; and to withdraw consent at any time where processing is based on consent. To exercise these rights, please contact Onnova through the contact form on the Site.
10. Complaints
If you have concerns about how personal data is handled, please contact Onnova first so that the matter can be addressed. You also have the right to lodge a complaint with the Information Commissioner's Office (ico.org.uk) or with your local data protection authority.
11. Changes to this policy
Onnova may update this policy from time to time. The latest version will be published on this page, with the date of the most recent update shown at the top.