Privacy policy

Last updated: 27 August 2026

Who we are

Nova Healthcare Solutions Ltd ("NovaHS", "we", "us") is the data controller for personal data collected through this website. We are registered in England & Wales (company no. 12552933), registered office: 71-75 Shelton Street, Covent Garden, London, WC2H 9JQ. We are registered with the Information Commissioner's Office (ICO). Contact: novahs.info@nhs.net or 0330 133 5380.

An important note about patient data

This policy covers visitors to this website and our business contacts. Clinical and patient data that we process when delivering services to GP practices, PCNs, Federations and ICBs is processed on behalf of those organisations as their data processor, under separate written agreements and NHS data standards (including the Data Security and Protection Toolkit). That processing is governed by those agreements and the relevant practice's own privacy notice, not by this policy.

What we collect and why

Enquiries and call bookings. When you contact us, book a call or request a calculator report we collect the details you provide — such as name, work email, telephone number, organisation name and type, your role, patient list size, clinical system used, preferred call dates and times, availability notes and your message — together with the page or calculator your enquiry came from. We use this to respond to you, prepare for calls, and provide the information or report you requested. Lawful basis: our legitimate interests in responding to business enquiries, and steps taken at your request prior to a contract.

Marketing. When you contact us, we will use your business contact details to send you occasional NovaHS news, service updates and relevant primary care insights by email (lawful basis: our legitimate interests in keeping NHS organisations informed of relevant services, and the "soft opt-in" for existing contacts). We will do this unless and until you tell us not to: you can opt out at any time by writing to novahs.info@nhs.net or by using the unsubscribe link included in every marketing email. If you are an existing client contact, we may also send updates about services similar to those you already use (the "soft opt-in"). Every message includes an unsubscribe link, and you can opt out at any time by using that link or emailing novahs.info@nhs.net — we will stop straight away. We do not sell or rent your details to anyone.

Website analytics. With your consent, we use Google Analytics 4 to understand how the website is used — pages visited, approximate location (city level), device and browser type, and how you found us. This helps us improve the site and our services (lawful basis: consent, via the cookie banner). Analytics is not loaded if you decline, and you can change your choice at any time via "Cookie settings" in the footer.

Correspondence records. We keep records of our correspondence with you to manage our relationship and, where necessary, to establish or defend legal claims (lawful basis: legitimate interests).

Who we share data with

We use a small number of service providers who process data on our instructions: a form-delivery provider that transmits website form submissions to our email; Google (analytics, where consented); our website hosting provider; and NHSmail for our email. We may also disclose information where required by law or regulation. We never sell personal data.

International transfers

Some providers (such as Google) may process data outside the UK. Where that happens, transfers are protected by UK adequacy regulations or the UK International Data Transfer Agreement/Addendum with appropriate safeguards.

How long we keep data

Enquiry and correspondence records are kept for up to 24 months after our last contact, unless a business relationship follows (in which case records are kept for the life of the relationship plus 6 years, in line with contractual limitation periods). Marketing preferences are kept until you opt out. Analytics data is retained per our Google Analytics settings (14 months) in aggregate form.

Your rights

Under UK GDPR you have the right to access your personal data; to have it corrected or erased; to restrict or object to processing (including an absolute right to object to direct marketing); to data portability; and to withdraw consent at any time without affecting prior processing. To exercise any right, email novahs.info@nhs.net. We respond within one month. If you are unhappy with our handling of your data you can complain to the Information Commissioner's Office at ico.org.uk or 0303 123 1113.

Cookies and similar technologies

This website sets no cookies at all unless you accept them. Our forms, calculators and call-booking work without cookies.

Strictly necessary storage. If you use the cookie banner, your choice is stored in your browser (localStorage, key "nhs_consent") so we do not ask again. This is essential storage and does not track you.

Analytics cookies (optional). If you click "Accept", Google Analytics 4 sets cookies (such as _ga, _ga_*) to measure how the site is used. These persist for up to 24 months. If you click "Decline", no analytics runs and no analytics cookies are set. You can change your mind at any time via "Cookie settings" in the footer, and you can also clear cookies in your browser settings.

We do not use advertising or cross-site tracking cookies.

Children

This website is intended for professionals in NHS primary care and is not directed at children. We do not knowingly collect data from anyone under 18 through this site.

Changes to this policy

We will post any changes on this page and update the date at the top. Significant changes will be highlighted on the website.