Privacy policy
This policy explains what data we collect, why, on what legal basis, and what your rights are. Final wording is pending counsel review.
Draft — pending counsel review
Controller
Novalure CLG, contactable at hello@novalure.eu, is the data controller for personal data processed via novalure.eu.
Data we collect
Contact form and audit booking submissions: name, company, email, phone, region, role, marketing budget range, message content.
Lead-magnet downloads: first name, work email.
Site analytics: anonymized event data via Google Analytics 4 (EU tenant), Microsoft Clarity, and Vercel Analytics. Where consent is required, tracking is loaded only after consent.
Why we collect it
To respond to your enquiry, deliver the audit call, send the lead-magnet PDF and the related five-mail nurture sequence, and operate the site.
Legal basis (GDPR Art. 6)
Performance of pre-contractual measures and contract (Art. 6(1)(b)) for audit bookings and contracted services.
Consent (Art. 6(1)(a)) for marketing emails and non-essential analytics.
Legitimate interest (Art. 6(1)(f)) for security, fraud prevention and basic site operation.
Recipients and processors
HubSpot Ireland Limited (CRM and meetings; EU data centre).
Resend (transactional email).
Vercel Inc. (hosting; Frankfurt region).
Cloudflare Inc. (DNS).
Meta, Google, LinkedIn, Microsoft (analytics and advertising — only after consent).
A Data Processing Agreement is in place with each processor before any campaign starts.
Retention
Audit and contact submissions: stored in HubSpot for the duration of the customer relationship plus statutory retention periods.
Lead-magnet email list: until you unsubscribe.
Analytics: per the analytics tool’s own retention settings (currently 14 months in GA4).
Your rights
You have the right of access, rectification, erasure, restriction, portability, and objection (GDPR Articles 15–21).
To exercise any of these, email hello@novalure.eu. We respond within one month.
You can complain to the Data Protection Commission (Ireland) or any other EU supervisory authority.
Cookies and consent
Essential cookies are set to operate the site and remember your locale.
Non-essential cookies (analytics, advertising) are loaded only after you accept them via the consent banner. You can revisit your choice any time at the bottom of any page.