Privacy policy.

Last updated 11 October 2026

This is a working draft while our ISO 27001 certification is under way. The final wording will replace it.

This explains what personal information Nova collects through this website, why, who else handles it, and what you can ask us to do with it.

Who we are

Nova HCM Ireland Ltd is an HR technology advisory firm based in Sligo, Ireland. We decide how the information described here is used, which makes us the data controller under the GDPR.

If you have a question about your information, email cian@novahcm.ie.

What we collect

We only collect what you give us, in four places.

  • The contact form: your name, work email, company size and whatever you tell us about where you are with your HR technology.
  • The newsletter: your email address.
  • The scorecard: your answers, and your email address if you ask for the full report.
  • The booking calendar on our contact page: your name, your email and anything else the booking asks for. Calendly runs it for us.

Like every website, our hosting provider, and Calendly when the booking calendar loads, also record basic technical details when you visit, such as your IP address, browser and the pages requested. We use these only to keep the site running and secure.

Why we use it

  • To reply to your enquiry and, if you want, to talk about working together. We rely on our legitimate interest in answering people who contact us, and on taking steps you ask for before any contract.
  • To send you the newsletter. We rely on your consent, which you can withdraw at any time using the unsubscribe link in every email.
  • To give you your scorecard result and report. We rely on our legitimate interest in providing the service you asked for.
  • To keep the website working and secure. We rely on our legitimate interest in running a safe website.

We do not sell your information, and we do not use it for automated decisions about you.

Who we share it with

A small number of companies handle information for us, only to provide their service and under contracts that require them to protect it.

  • Klaviyo, which sends our newsletter.
  • Attio, where we keep our records of the people and companies we talk to.
  • Vercel, which hosts this website.
  • Calendly, which runs the booking calendar on our contact page.
  • Our email provider, when you write to us or we write to you.

Some of these companies are based outside the European Economic Area. Where information leaves the EEA, it is protected by safeguards recognised under EU law, such as the European Commission's standard contractual clauses or the EU-US Data Privacy Framework.

We will also share information if the law requires it.

How long we keep it

  • Newsletter: until you unsubscribe.
  • Enquiries and scorecard answers: for up to two years after we last hear from you, unless we go on to work together.
  • Technical records: for as long as our hosting provider keeps them to run the service.

How we keep it safe

Access to personal information is limited to the people at Nova who need it, and the services we use encrypt it in transit. We are working towards ISO 27001, the international standard for information security.

Your rights

Under the GDPR you can ask us to:

  • give you a copy of the information we hold about you
  • correct anything that is wrong
  • delete it
  • stop or limit how we use it
  • give it to you in a format you can take elsewhere

Where we rely on your consent, you can withdraw it at any time. Email cian@novahcm.ie and we will reply within one month.

If you are unhappy with how we have handled your information, you can complain to the Data Protection Commission at dataprotection.ie.

Cookies

This website does not set tracking or advertising cookies itself. The booking calendar on our contact page is run by Calendly, which may set its own. Our cookie notice has the detail.

Changes to this policy

When we change this policy we will update the date at the top of this page.

Contact

Nova HCM Ireland Ltd, Sligo, Ireland. Email cian@novahcm.ie.