Last updated: 04/12/2025
Novara (“we”, “our”, “us”) is committed to protecting your personal data and complying with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.
Company details
Company name: Novara
Registered address: [Your Registered Address]
Email: [Your Support Email]
What data we collect
We collect and process the following categories of personal data:
-
Name, email address, postal address
-
IP address and basic usage logs
-
Account credentials
-
Billing and transaction references
-
Support communications
We do not store full card numbers or CVV codes.
How payments are processed (Stripe)
All payments are processed securely by Stripe Payments Europe Ltd. When you submit payment information, it is transmitted directly to Stripe and is handled under Stripe’s own security and compliance standards. Stripe acts as an independent data controller for payment processing.
Stripe may process data outside the UK and EEA. Where this occurs, appropriate safeguards are applied in accordance with UK GDPR.
Why we process your data
We process your data to:
-
Create and manage your hosting account
-
Provide shared, VPS, and WordPress hosting services
-
Take payments and prevent fraud
-
Provide technical and billing support
-
Comply with legal and regulatory obligations
Lawful basis for processing
Our lawful bases include:
-
Performance of a contract
-
Legal obligation
-
Legitimate business interests
-
Consent, where required
Data retention
We retain personal data only for as long as necessary for:
-
Service delivery
-
Legal, tax, and accounting requirements
-
Dispute resolution and fraud prevention
Your rights under UK GDPR
You have the right to:
-
Access your data
-
Request correction
-
Request erasure
-
Object to processing
-
Data portability
Requests should be sent to: [Your Email]
You may also lodge a complaint with the Information Commissioner’s Office (ICO):
https://www.ico.org.uk
Third-party processors
We use third-party service providers including:
-
Stripe (payments)
-
Data centre and infrastructure providers
-
Backup and security services
Each processor is contractually bound to comply with UK GDPR.
