Nova Privacy & Cookies Policy

1. Introduction

Nova ("we", "us", or "our") is committed to protecting and respecting your privacy. This policy explains how we collect, use, and protect your personal data when you use our AI-enabled job matching platform (the "Services").

This policy is compliant with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018. For the purpose of this legislation, the data controller is Nova of Charlotte Norman.

2. What Information We Collect

We may collect and process the following data about you:

• For Candidates: Name, contact details (email, phone number), professional history (CV, employment history, skills), qualifications, job preferences, and any other information you provide in your profile.
• For Clients:Company name, business address, contact person's name and contact details, and information about job roles you wish to fill.
• Technical Data: IP address, browser type and version, time zone setting, operating system, and platform, and information about how you use our website and Services.

3. How We Use Your Personal Data

We use your personal data for the following purposes:

• To provide, operate, and maintain our Services.
• To create and manage your user account.
• To process payments and manage billing.
• To communicate with you about the Services, including updates and support.
• For AI-Enabled Job Matching: We use the personal data provided by Candidates and the job role data provided by Clients as inputs for our proprietary AI algorithms. The AI analyses this data to identify and suggest potential matches between Candidates and Clients. This processing is essential to the core functionality of our Services.
• To Improve Our Services: We may use your data, including on an aggregated and anonymised basis, to analyse usage patterns and to improve and train our AI models and the overall Service.

4. Our Lawful Basis for Processing

Under UK GDPR, we must have a lawful basis for processing your personal data. We rely on the following:

• Performance of a Contract: We process your data to provide the Services to you and to fulfil our obligations under our Terms of Service.
• Legitimate Interests: We process your data for our legitimate interests, such as improving our AI models and Services, provided that your rights and interests do not override our interests.
• Consent: Where required by law, for example, for sending direct marketing communications, we will ask for your consent.

5. Data Sharing and Disclosure

We may share your data with:

• Clients and Candidates: We share Candidate profile information with Clients to facilitate job matching. We will inform you before your full profile is shared.
• Third-Party Service Providers: Such as payment processors, cloud hosting providers, and analytics providers who support our business operations. These providers are contractually bound to protect your data.
• Legal Requirements: If required by law, we may disclose your information to law enforcement or other government bodies.

6. International Data Transfers

Your personal data may be transferred to, and stored at, a destination outside the United Kingdom (UK). Where we transfer your data outside the UK, we will ensure it is protected by implementing appropriate safeguards, such as relying on UK Adequacy Regulations or entering into Standard Contractual Clauses approved by the UK's Information Commissioner.

7. Data Security

We have implemented appropriate technical and organisational security measures to prevent your personal data from being accidentally lost, used, or accessed in an unauthorised way. Access to your personal data is limited to those employees and third parties who have a business need to know.

8. Data Retention

We will only retain your personal data for as long as is necessary to fulfil the purposes we collected it for, including for the purposes of satisfying any legal, accounting, or reporting requirements. Typically, we will retain your account data for as long as you have an active account with us.

9. Your Data Protection Rights

Under UK data protection law, you have the following rights:

• The right to be informed: About how we collect and use your personal data.
• The right of access: To request a copy of the personal data we hold about you.
• The right to rectification: To have inaccurate personal data corrected.
• The right to erasure: To have your personal data deleted in certain circumstances.
• The right to restrict processing: To request the restriction of processing of your personal data.
• The right to data portability: To receive your data in a structured, commonly used format.
• The right to object: To processing based on legitimate interests or for direct marketing.
• Rights in relation to automated decision making and profiling: To be subject to human intervention where a decision has a legal or similarly significant effect on you.

To exercise any of these rights, please contact us at connect@nova-law.com.

10. Complaints

You have the right to make a complaint at any time to the Information Commissioner's Office (ICO), the UK supervisory authority for data protection issues (www.ico.org.uk).

11. Changes to This Policy

We may update this policy from time to time. We will notify you of any significant changes by posting the new policy on our website or by email.

12. Contact Us

If you have any questions about this Privacy Policy, please contact us at: connect@nova-law.com.