1. Who we are
Novera ITAD Ltd ("Novera", "we", "us") provides secure IT asset disposition services to businesses across the UK, covering collection, data destruction, reuse and WEEE recycling. We are registered in England and Wales and our registered office is at Bradford Chamber Business Park, New Lane, Bradford BD4 8BX.
For personal data described in this policy, we are the data controller unless stated otherwise. You can contact us about anything in this policy at hello@noveraitad.co.uk or on 07779 286946.
2. Personal data we collect
We collect and use the following personal data:
- Enquiry and quote details: your name, email address, phone number, company name and details of the equipment you want collected, when you contact us by email, phone or through this website.
- Booking and collection details: site addresses, on-site contact names and phone numbers, and signatures on collection manifests and waste transfer notes.
- Billing details: invoicing contacts, purchase order references and payment records.
- Technical data: our web server records standard access logs, including your IP address, browser type and the pages you visit, used for security and to keep the site running.
We do not knowingly collect personal data from anyone under 18, and our services are aimed at businesses rather than consumers.
3. Data on equipment we collect
The devices and storage media we collect may contain personal data belonging to your business, such as files, emails and customer records. For that residual data:
- You (our client) remain the data controller; we act only as a data processor, and only for the purpose of securely destroying the data.
- We do not access, browse, copy or use the contents of any device beyond what is technically necessary to sanitise it.
- Every drive is either erased in line with NIST 800-88 or physically destroyed, and a serialised certificate of destruction is issued for each device.
- Devices are held in access-controlled facilities and tracked by serial number from collection to destruction. All processing takes place in the UK.
Where required, we will enter into a data processing agreement with you covering this activity.
4. How we use your data and our lawful bases
- Responding to enquiries and providing quotes: our legitimate interest in running and promoting our business, and steps taken at your request before entering a contract.
- Delivering our services: performance of our contract with you, including scheduling collections, issuing certificates and processing rebates.
- Compliance paperwork: compliance with legal obligations, including waste transfer notes and records required under environmental and waste regulations.
- Site security and fraud prevention: our legitimate interest in protecting our website, premises and chain of custody.
- Service updates and marketing: we may email existing clients about similar services; you can opt out at any time, and we will stop.
5. Cookies and third-party resources
This website uses only essential cookies, which are needed for it to function securely (for example a session cookie and a cross-site request forgery token). We do not currently use analytics or advertising cookies.
Some resources on this site, namely web fonts served by Google Fonts and icons served by the unpkg content delivery network, are loaded from third-party servers. When your browser requests them, those providers receive your IP address as part of the request. You can block these requests in your browser; the site will remain usable.
6. Who we share data with
We do not sell personal data. We share it only with:
- Service providers who support our business, such as website hosting, email and accounting providers, under contracts that protect your data.
- Accredited downstream recycling partners, where documentation for a collection (such as waste transfer notes) necessarily includes contact details.
- Regulators, law enforcement or professional advisers where the law requires or permits it.
7. International transfers
Equipment and the data on it are processed entirely within the UK. Some of our business software suppliers may store contact or billing data outside the UK; where that happens we rely on UK adequacy regulations or the appropriate safeguards required by UK GDPR, such as the International Data Transfer Agreement.
8. How long we keep data
- Enquiries that do not become bookings: up to 12 months, then deleted.
- Contracts, collection records and certificates of destruction: 6 years after the end of the engagement, in line with limitation periods.
- Waste transfer notes: at least 2 years, and hazardous waste consignment notes at least 3 years, as required by waste regulations.
- Data on collected devices: destroyed as part of the service; we retain no copy.
- Server logs: typically no more than 90 days.
9. Your rights
Under UK GDPR you have the right to:
- access a copy of the personal data we hold about you;
- have inaccurate data corrected and, in certain circumstances, have data erased;
- restrict or object to our processing, including objecting to direct marketing at any time;
- receive data you provided to us in a portable format; and
- withdraw consent, where consent is the basis we rely on.
To exercise any of these rights, email hello@noveraitad.co.uk. We will respond within one month. If you are unhappy with how we handle your data, you can complain to the Information Commissioner's Office at ico.org.uk or on 0303 123 1113.
10. Changes to this policy
We may update this policy from time to time. The date at the top shows when it was last revised, and significant changes will be flagged on this page. Questions about this policy can be sent to hello@noveraitad.co.uk.