Privacy Policy of Nova House Publications Limited

(“Privacy Policy”)
Last Updated: February 2026
1. Introduction

1.1. Nova House Publications Limited ("we", "us", "our") is a company registered in England and Wales under company number 14561787. Our registered office is at 71-75 Shelton Street, Covent Garden, London, WC2H 9JQ.

1.2. We are committed to protecting and respecting your privacy. This Privacy Policy (together with our terms and conditions and any other documents referred to in it) sets out the basis on which any personal data we collect from you, or that you provide to us, will be processed by us. Please read the following carefully to understand our views and practices regarding your personal data and how we will treat it.

1.3. For the purposes of UK data protection law, including the UK General Data Protection Regulation ("UK GDPR") and the Data Protection Act 2018, we are the "data controller" of your personal data.

1.4. This Privacy Policy applies to the website novaeducation.uk and all related subdomains (the "Website"), and to any services or systems provided through it (the "Services").
2. Information We Collect About You

We may collect and process the following categories of personal data about you:
2.1. Information You Give Us. This is information you provide by filling in forms on our Website, creating an account ("Account"), purchasing products or services, or by corresponding with us (by phone, email, or otherwise). It may include:
  • Identity Data: such as your name, date of birth, title, and profession.
  • Contact Data: such as your billing/delivery address, email address, and telephone numbers.
  • Financial and Transaction Data: such as your payment card details (which are processed by our third-party payment processors) and details of purchases you make.
  • Profile Data: such as your username and password, purchases or orders made by you, your interests, preferences, feedback, and survey responses.
  • Marketing and Communications Data: your preferences in receiving marketing from us.

2.2. Information We Collect Automatically.
As you interact with our Website, we may automatically collect technical data about your equipment, browsing actions, and patterns. This is collected using cookies, server logs, and similar technologies. It may include:
  • Technical Data: such as your Internet Protocol (IP) address, browser type and version, time zone setting and location, browser plug-in types and versions, operating system and platform, and other technology on the devices you use to access the Website.
  • Usage Data: information about how you use our Website and Services, including the full Uniform Resource Locators (URL) clickstream to, through and from our Website (including date and time), pages you viewed or searches you made, page response times, download errors, length of visits to certain pages, and page interaction information.

2.3. Information We Receive From Other Sources.
We may receive personal data about you from third parties and public sources, such as analytics providers (like Google) or from publicly available sources (e.g., Companies House).
3. How We Use Your Personal Data (Our Lawful Bases)

We will only use your personal data when the law allows us to. Most commonly, we will use it in the following circumstances:
  • To perform a contract with you (e.g., to process and deliver your order, manage your account).
  • For our legitimate interests (e.g., to administer and protect our business and Website, to improve our services, for marketing our own similar products/services, provided your interests and fundamental rights do not override those interests).
  • To comply with a legal obligation (e.g., retaining financial records for tax purposes).
  • Where you have given us your consent (e.g., for certain types of direct marketing). You have the right to withdraw consent at any time.The table below describes our purposes for processing and the lawful bases we rely on.
Purpose / Activity Type of Data Lawful Basis for Processing
To register you as a new customer Identity, Contact Performance of a contract
To process and deliver your order Identity, Contact, Financial, Transaction Performance of a contract, Legitimate interests (to recover debts)
To manage our relationship with you (e.g., notify of policy changes, ask for feedback) Identity, Contact, Profile, Marketing Performance of a contract, Legal obligation, Legitimate interests (to keep records updated)To administer and pro
To administer and protect our business and WebsiteIdentity, Contact, TechnicalLegitimate interests (for running our business, IT security, fraud prevention)
To deliver relevant website content and advertisements to you, and measure effectivenessIdentity, Contact, Profile, Usage, Marketing, TechnicalLegitimate interests (to study how customers use our products/services, to grow our business, to inform marketing strategy)
To use data analytics to improve our Website, products/services, marketingTechnical, UsageLegitimate interests (to define types of customers, keep site updated, develop business)
To make suggestions and recommendations about goods/services that may interest youIdentity, Contact, Technical, Usage, ProfileLegitimate interests (to develop products/services and grow our business) or Consent
4. Cookies

Our Website uses cookies to distinguish you from other users, to improve your experience, and to analyse how the Website is used. For detailed information on the cookies we use and their purposes, please see our separate Cookie Policy.
5. Disclosures of Your Personal Data

We may share your personal data with the following third parties for the purposes set out in this Privacy Policy:
  • Service Providers: Who provide IT, system administration, payment processing, delivery, marketing, and other services.
  • Professional Advisers: Including lawyers, bankers, auditors, and insurers.
  • HM Revenue & Customs, Regulators, and other authorities: Who require reporting of processing activities in certain circumstances.
  • Third Parties in a Business Transfer: If we sell, transfer, or merge parts of our business or assets. If this happens, the new owners may use your personal data in the same way as set out in this Privacy Policy.

6. International Transfers

We do not routinely transfer your personal data outside the UK. However, some of our external third-party service providers may be based outside the UK, so their processing of your personal data may involve such a transfer. 
7. Data Security

We take reasonable care to prevent your personal data from being accidentally lost, used, or accessed in an unauthorised way, altered, or disclosed. We limit access to your personal data to those employees, agents, contractors and other third parties who have a business need to know. They will only process your personal data on our instructions and are subject to a duty of confidentiality.

We have procedures in place to deal with any suspected personal data breach and will notify you and any applicable regulator of a breach where we are legally required to do so.
8. Data Retention

We will retain your personal data for as long as reasonably necessary to fulfil the purposes we collected it for, including for the purposes of satisfying any legal, regulatory, tax, accounting, or reporting requirements. To determine the appropriate retention period, we consider the amount, nature, and sensitivity of the data, the potential risk of harm from unauthorised use or disclosure, the purposes for which we process it, and applicable legal requirements.

In some circumstances we may anonymise your personal data so that it can no longer be associated with you, in which case we may use such information without further notice to you.

9. Your Legal Rights

Under certain circumstances, you have rights under data protection laws in relation to your personal data:
  • Request access to your personal data (commonly known as a "data subject access request").
  • Request correction of any inaccurate or incomplete data we hold about you.
  • Request erasure of your personal data (the "right to be forgotten").
  • Object to processing of your personal data where we are relying on a legitimate interest and you feel it impacts your fundamental rights, or for direct marketing.
  • Request restriction of processing your personal data.
  • Request transfer of your data to you or a third party (data portability).
  • Withdraw consent at any time where we are relying on consent to process your personal data.

If you wish to exercise any of these rights, please contact us using the details below. You will not usually have to pay a fee to access your personal data (or to exercise any of the other rights). We may need to request specific information from you to help us confirm your identity and ensure your right to access your personal data (or to exercise any of your other rights).

10. Marketing

We may use your Identity, Contact, Technical, Usage, and Profile Data to form a view on what we think you may want or need, or what may be of interest to you. This is how we decide which products, services, and offers may be relevant for you (marketing).

You will receive marketing communications from us if you have requested information from us or purchased goods or services from us and you have not opted out of receiving that marketing.

You can ask us to stop sending you marketing messages at any time by following the opt-out links on any marketing message sent to you or by contacting us.

11. Third-Party Links

Our Website may include links to third-party websites, plug-ins, and applications. Clicking on those links may allow third parties to collect or share data about you. We do not control these third-party websites and are not responsible for their privacy statements. When you leave our Website, we encourage you to read the privacy notice of every website you visit.

12. Changes to this Privacy Policy

We may update this Privacy Policy from time to time. Any changes we make will be posted on this page and, where appropriate, notified to you by email. The date of the last update will be revised at the top of this Privacy Policy. Please check back frequently to see any updates.

13. Governing law and jurisdiction

This Privacy Policy, the subject matter, and the formation and any non-contractual disputes or claims are governed by the laws of England and Wales and shall be subject to the exclusive jurisdiction of the courts of England and Wales.

14. Contact Us & Complaints

If you have any questions about this Privacy Policy, please contact us at:
Email: contact@novaeducation.uk
Post: Data Enquiries, Nova House Publications Limited, 71-75 Shelton Street, Covent Garden, London, WC2H 9JQ.

If you have any concerns about our use of your personal information, you have the right to make a complaint at any time to the Information Commissioner's Office (ICO), the UK regulator for data protection issues (www.ico.org.uk). We would, however, appreciate the chance to deal with your concerns before you approach the ICO, so please contact us in the first instance.

Created with