Privacy policy

What this document covers

This policy describes the personal data novascriptsolutions.com collects, why, how long it is kept, who can reach it and what rights you have over it. It covers this website only, and not any separate agreement for work, which would have its own terms.

The site is static. It has one interactive feature — the enquiry form on the contact page — and no account, login, basket, payment, newsletter or advertising. If you read the site without submitting the form, the only data involved is described under server logs below.

What the enquiry form collects

The form has three fields, all of them required:

• Name — so a reply can be addressed to a person
• Email address — the only channel a reply can use
• Your message — whatever you choose to write about your enquiry

What is transmitted alongside what you type

Submitting a form transmits more than the fields you filled in, and this is stated plainly rather than left to assumption. With each submission the following are transmitted and recorded:

• Your IP address, taken from the connecting-IP header, which indicates the network you are connecting from and approximately where it is
• Your browser's user-agent string, which identifies your browser and operating system
• The date and time of the submission

Why the IP address and user agent are collected

For security and abuse prevention only — distinguishing a person from an automated submission, and identifying a source that submits repeatedly. They are not used to identify you for any other purpose, not combined with other data about you, and not used for marketing or analytics.

The form also contains a hidden field that a human never sees or fills in. A submission that fills it is discarded as automated. This is the site's only anti-automation measure; it stores nothing in your browser and does not profile you.

Where your submission goes

The form posts to a function running on this site's own domain. That function validates the submission and forwards it, server to server, to a central collector operated by the same operator as this website. The collector stores the submission in a database and appends it to a spreadsheet.

That collector and that spreadsheet are shared across the several websites this operator runs. Your name, email address, message, IP address and user agent are therefore stored alongside enquiries sent through the operator's other sites, and anyone with access to the shared store can read your enquiry. This is stated because you are entitled to know it before writing anything into the form, and because it is not what most people assume a contact form does.

No credentials for the collector are held by this website; the forwarding is server side, so your submission is not exposed to any third party in your browser.

Processors

The following organisations process data on the operator's behalf in the course of running this site and its form:

• Cloudflare, Inc. — hosts the site, serves every page, and runs the function that receives the form. Your IP address necessarily reaches Cloudflare in order for a page to be delivered to you.
• Google LLC — provides the spreadsheet service the collector appends enquiries to.
• Resend — an email delivery provider. It is not used: enquiries go to the collector described above, and a collector failure returns an error to you rather than sending your message anywhere else.

Lawful basis

Your name, email address and message are processed to read your enquiry and reply to it, including asking follow-up questions and preparing a scope. The basis is the legitimate interest of both parties in responding to an enquiry you initiated, or the steps preliminary to a contract where the exchange moves that way.

The IP address and user agent are processed on the basis of the legitimate interest in keeping the form usable and free of automated abuse.

Your data is not used for marketing. You will not be added to a mailing list and no profile is built from your enquiry.

Server logs and hosting

Serving a page to you involves your IP address reaching the hosting provider. Providers of this kind keep short-lived request logs containing the IP address, the time, the page requested and the user-agent string, in order to deliver content, mitigate attacks and produce aggregate traffic counts. Those logs are created by the provider's network, not by code on this site.

No analytics script, tag manager, advertising pixel, session recorder or heat-mapping tool is loaded by this site. There is no third-party JavaScript of any kind.

How long data is kept

Enquiry correspondence is kept for as long as the exchange is live and for a period afterwards so a later enquiry can be understood in context. Because the shared spreadsheet is not automatically pruned, an enquiry may remain in it indefinitely unless deletion is requested.

That is a real limitation rather than an intended retention period, and it is written here instead of a tidier figure that would not be true. If you would prefer your enquiry not to persist, say so in your message or exercise the erasure right below.

Your rights

You have the right to be told what personal data about you is held and to receive a copy; to have inaccurate data corrected; to have data erased where there is no continuing reason to keep it; to restrict or object to processing; to receive your data in a portable form; and to complain to a supervisory authority.

To exercise any of them, reply to the correspondence your enquiry started, or send a new message through the form stating what you want done. A request to erase an enquiry covers the copy in the shared spreadsheet and the collector's database as well as any email copy.

International transfers

The hosting and spreadsheet providers named above operate globally, so your submission may be processed on servers outside your own country, including in the United States. Both operate under the standard contractual arrangements their services provide for such transfers.

Children

This site addresses organisations buying professional services. It is not directed at children and does not knowingly collect their data.

Changes to this policy

This policy is updated whenever the site's data handling changes — a new processor, a different destination for the form, or the addition of anything that stores data in your browser. A change that widens what is collected is made here before the feature ships, not after.