Privacy policy

Who we are

NovaEcon is run by Harii Nemal and Bilal Afzal as a private tutoring and application-support service based in the United Kingdom. For data protection purposes we are the data controller for the information you give us.

Contact us about anything in this policy at contact@novaecon.co.uk or through the WhatsApp link on the site.

What we collect

• Enquiries and matching requests: when you fill in a form on the site, we collect your name, email address, the stage you are at (for example Year 12, Year 13 or gap year), your current or predicted grades, your UCAS course choices, and anything you tell us about what you need help with.
• Interest signups: if you register interest for a feature that is coming soon, we store your email address so we can contact you when it is ready.
• Your account (when available): in the future we may offer accounts. If so, we will collect your email address and, if you set one, your name. Passwords will be stored only as a secure one-way hash — we will never see or store your actual password.
• Messages: anything you send us by email, WhatsApp or through a contact form.
• Technical data: our hosting provider processes standard server logs, which may include IP addresses, as part of serving and securing the site.

What we do NOT collect

• Your card details. Payments are handled entirely by Stripe. Your card number never touches our servers — we never see it or store it.
• Advertising and cross-site tracking. We run no ads, use no marketing cookies, and do not track you across other websites.

Cookies

We do not use non-essential cookies. If we add account sign-in in the future, we will use a strictly necessary session cookie to keep you signed in. Because that cookie is essential to provide a service you asked for, it will not require consent.

Why we're allowed to use your data (legal bases)

• Performance of a contract — to reply to your enquiry, arrange your consultation, and deliver the tutoring or support you have asked for.
• Legitimate interests — to keep the service secure, prevent abuse, respond to messages, and understand in aggregate how the site is used so we can improve it.
• Legal obligation — to keep records of transactions for tax and accounting purposes.
• Consent — where you explicitly agree, for example by signing up to hear about a new feature.

Who we share it with

We do not sell your data or share it for marketing. We use the following service providers, each of which handles data on our behalf:

• Lovable Cloud / Supabase — hosts the website and stores form and account data.
• Stripe — processes payments and stores your card details directly.
• WhatsApp / Meta — if you message us through WhatsApp, your message is handled by WhatsApp's platform.
• Calendly — if you book a call through our Calendly link, your booking details are processed by Calendly.

International transfers

Some of our providers are based in, or transfer data to, the United States and other countries outside the UK/EEA. Where data leaves the UK/EEA, those providers rely on legal safeguards such as Standard Contractual Clauses or the UK–US Data Bridge.

How long we keep it

We keep your enquiry and account data for as long as you are an active student or prospective student with us, or as long as needed to provide the service you asked for. If you ask us to delete your data, we will remove it unless we need to keep it for legal or tax reasons. Stripe retains payment records for its own legal and tax obligations.

Your rights

Under UK GDPR you have the right to:

• Ask for a copy of the personal data we hold about you.
• Ask us to correct anything that is wrong.
• Ask us to delete your data.
• Ask us to restrict or object to how we use it.
• Ask for your data in a portable format.

To exercise any of these, email contact@novaecon.co.uk from the address on your enquiry. We'll respond within one month.

If you're unhappy with how we've handled your data, you can complain to the Information Commissioner's Office (ICO) at ico.org.uk.

Security

The site is served over HTTPS. If we add passwords in the future, they will be stored only as secure hashes. No system is perfectly secure, but we take reasonable measures to protect your data.

Children

NovaEcon is intended for students preparing for A-Level and university admissions and is not directed at children under 13. If you believe a child under 13 has given us personal data, contact us and we'll delete it.

Changes

If we change this policy we'll update the date at the top of this page. Significant changes will be made clear on the site.