Novatus Website Privacy Policy

Introduction

At Novatus Global Ltd. (“we”, “us”, “our”), we are committed to safeguarding the privacy, security, and protection of your personal data. As a financial services technology and advisory services provider based in London, we understand the importance of transparency and compliance, particularly in relation to the UK General Data Protection Regulation (“UK GDPR”) and relevant national laws. This Website Privacy Policy explains how we collect, use, disclose, and protect your information when you visit our website, interact with our services, or submit information as part of our recruitment efforts. It also describes your rights and how you can exercise them.

Please read this policy carefully. By using our website, you acknowledge that you have read and understood this policy, and agree to the practices described herein.

1. Who We Are

Novatus Global Ltd is registered in England and Wales with its registered office in London. We provide technology and advisory services tailored to the financial services sector. For the purposes of UK data protection law, Novatus Global is the “data controller” of your personal data collected via this website.

If you have any questions or would like to exercise your data protection rights, please contact us:

• Email: legal@novatusglobal.com

• Postal Address: 2 London Wall Place, Barbican, London EC2Y 5AU

2. The Data We Collect

We may collect and process the following types of personal data about you:

• Personal Identification Information: Name, email address, phone number, address, and similar identifiers.
• Technical and Usage Data: IP address, browser type, device information, cookie data, pages visited, and time spent on our site.
• Recruitment Data: CVs, cover letters, employment history, references, qualifications, and any other information you submit as part of our recruitment process.
• AI-Related Data: Information submitted through or processed by AI-powered tools integrated into our website or recruitment processes.
• Communication Data: Records of your interactions with us via website forms, emails, or other channels.

3. How We Collect Your Data

• Direct Interactions: When you fill in forms on our website, contact us, request information, or apply for roles.
• Automated Technologies: As you interact with our site, we automatically collect technical data about your equipment and browsing actions via cookies and similar technologies.
• Third Parties: We may receive data from recruitment agencies, background check providers, employment referrals and analytics partners.

4. Legal Bases for Processing

We process your personal data lawfully, fairly, and transparently in accordance with the UK GDPR. The legal bases we rely on include:

• Consent: Where you have given explicit consent for us to use your data.
• Contractual necessity: Where data processing is required to enter into or perform a contract with you.
• Legal obligation: Where we need to comply with a legal or regulatory obligation.
• Legitimate interests: Where processing is necessary for our legitimate business purposes, provided your interests and rights do not override those interests.

5. Use of Your Data

We use your personal data for the following purposes:

• To operate and maintain our website
• To communicate with you and respond to your enquiries
• To assess and process recruitment applications
• To comply with legal and regulatory requirements
• To analyse how our website is used and optimise user experience
• To personalise content and services, where appropriate
• To improve our technology, advisory services, and recruitment processes, including the use of AI-powered tools

6. Cookies & Tracking Technologies

Our website uses cookies and similar tracking technologies to enhance your browsing experience, analyse site usage, and support marketing efforts. Cookies are small text files stored on your device when you visit our site.

• Essential Cookies: Required for website operation.
• Analytics Cookies: Help us understand how visitors interact with our site.
• Preference Cookies: Remember your settings and preferences.
• Marketing Cookies: Track your browsing habits to provide relevant content.

You may manage your cookie preferences through your browser settings or our website’s cookie banner.

7. Use of Artificial Intelligence (AI)

Novatus Global incorporates AI-powered tools to assist with certain processes. Where AI is used:

• We ensure all algorithms are subject to human oversight and regular review.
• We do not make fully automated decisions with legal or similarly significant effects without human intervention.
• Personal data processed by AI tools is handled in accordance with this privacy policy and the UK GDPR.

If your data is processed using AI tools, you have the right to request human involvement, express your point of view, and request a discussion on a decision or interpretation made.

8. Recruitment and Careers Data

When you submit your personal data as part of our recruitment efforts, we will process it solely for the purpose of evaluating your suitability for current or future roles at Novatus Global.

• We may collect information directly from you or from recruitment partners.
• We may request character references from previous employers.
• All recruitment data is stored securely and only accessible to authorised HR and hiring staff.
• We will not retain your recruitment data for longer than necessary, typically no more than 12 months from the closure of your application unless you provide consent for extended retention.
• If your application is unsuccessful, your data may be anonymised for statistical or analytical purposes.
• You may request access, correction, or deletion of your recruitment data at any time.

9. Sharing and Disclosure of Your Data

We may share your personal data with:

• Service providers and technology partners assisting us in website, recruitment, or business operations
• Legal, regulatory, or government authorities where required by law
• Third parties in the event of a merger, acquisition, or sale of all or part of our business (with prior notice and safeguards)

We do not sell your personal data to third parties.

10. International Data Transfers

If your data is transferred outside the UK, we will ensure adequate safeguards are in place, such as reliance on approved data transfer mechanisms, standard contractual clauses, or adequacy decisions in accordance with UK data protection law.

11. Data Security

We use appropriate organisational, technical, and administrative measures to safeguard your data against loss, theft, or unauthorised access, including:

• Data encryption
• Restricted access controls
• Regular security audits and staff training

However, no method of transmission over the internet or electronic storage is completely secure. We encourage you to contact us if you have reason to believe your data may have been compromised.

12. Your Rights Under the UK GDPR

You have a range of rights regarding your personal data:

• Access: Request a copy of the personal data we hold about you.
• Rectification: Request correction of inaccurate or incomplete data.
• Erasure: Request deletion of your personal data, subject to certain legal exceptions.
• Restriction: Request restriction of processing under certain circumstances.
• Objection: Object to processing based on legitimate interests or for direct marketing.
• Portability: Request the transfer of your personal data to another party.
• Withdraw Consent: Where processing is based on consent, you may withdraw it at any time.
• Human Review of Automated Decisions: Request human intervention for decisions made through automated means, including those involving AI.

To exercise your rights, please contact us at legal@novatus.global

14. Changes to This Privacy Policy

We may update this policy from time to time to reflect changes in legal requirements or our business practices. Any updates will be posted on this page with the effective date.

15. Contact Us

If you have any questions, concerns, or wish to exercise your data protection rights, please contact us:

• Email: legal@novatus.global
• Postal Address: 2 London Wall Place, Barbican, London EC2Y 5AU

This policy was last updated on 16th October 2025.