Privacy notice

Last updated: 17 October 2026 · Preview notice pending company and privacy review before public launch.

Who handles your information

NOVALYNT LTD handles information submitted through this website to respond to business enquiries. You can contact the site owner at contact@novalynt.co.uk.

What we collect

The enquiry form collects your name, work email, organisation, service category and project overview. You may also provide a timeframe and phone number. We record the page from which you first arrived. Campaign attribution is recorded only when optional analytics have been allowed.

Please do not include patient records, identifiable health information or other sensitive personal information. The visual examples use synthetic information only.

Why we use it

We use enquiry information to understand your request, communicate with you and explore a potential project. We do not treat an enquiry as marketing consent. The company will confirm its lawful basis and controller details before public launch.

Storage and service providers

Enquiries are stored in an access-controlled database provided through the hosting platform. When email delivery is configured, a transactional email provider sends a notification to the business inbox and an acknowledgement to your address. For this deployment, the site and controlled lead log are hosted through Netlify and Netlify Blobs. Hosting geography and any transfer arrangements require review before use for sensitive or regulated information.

Retention

The website assigns enquiries a 90-day expiry. Expired records are removed on subsequent enquiry submissions or when the authenticated maintenance process runs. Anonymous analytics events are retained for up to 90 days under the same maintenance process. Any separate email correspondence remains subject to the business’s mailbox retention process.

Novi website assistant

Novi is an AI assistant for business service enquiries. Messages you choose to send are processed by OpenAI to generate a reply. The conversation stays in the current page’s memory and is cleared when you reload or start again; we do not save a full chat transcript in the website database. Requests are sent with provider response storage disabled, although provider processing and retention still depend on account settings and policies. Please do not share patient information, passwords, financial details or other sensitive records.

If you ask the team to follow up, you can review and edit a project summary, enter your contact details and explicitly submit an enquiry. We store only those submitted details, selected services and the source page, with a 90-day retention expiry, and use Resend to notify contact@novalynt.co.uk. Chat messages are not automatically emailed to the team. Submitting an enquiry does not subscribe you to marketing. Rate-limit identifiers are hashed, and short-lived delivery records support retries. We check enquiry email domains for known disposable providers and mail-server records using DNS; a separate validation service does not receive your full email address.

Spoken wellbeing demonstration

Requesting wellbeing-demo access collects your name and email address separately from the conversation. Eligible addresses receive a six-digit invitation automatically through Resend, and the Novalynt business inbox receives a separate access-request notification. Known disposable domains and email domains without suitable mail records are screened using the same controls as Noor. Each email address receives one wellbeing code for the testing programme, valid for 24 hours and one connection attempt. These invitations are separate from Noor’s. Access-request and delivery records have a 30-day expiry; a keyed email hash and issuance marker remain during testing to prevent further codes. No raw name, email or code is stored in those persistent quota markers. Mailbox correspondence follows its own retention process. This is not a marketing subscription.

This optional English-language demonstration is for UK and UAE adults aged 18 and over. Before starting, you confirm your age, its nonclinical demonstration purpose, and your consent to temporary voice and transcript processing by this website and OpenAI. Please use fictional situations, avoid names and sensitive personal details, and do not use it for real patient care. Voice can identify you, and anything you choose to say about health may be sensitive health information even when it is not saved. The demonstration is not monitored for care or emergencies and cannot contact anyone.

Your microphone records short turns only after you choose to start. Audio passes through the website server to OpenAI for transcription. Temporary transcript context is used for content checks and a short general wellbeing response, which is checked before OpenAI generates spoken audio. This processing occurs even when the optional transcript is hidden. AI and transcription can make mistakes. Replies are not clinical assessments. The UK/UAE selection records the region you choose for this demonstration; it does not establish your location or determine where provider processing occurs.

The application does not save audio or transcripts to its database, browser storage, analytics events or notification emails, and does not transfer conversations to Novi or use them for sales profiling. Access-request contact details and invitation records remain separate and are not included in voice-model context. Conversation context is encrypted into a short-lived continuation token held in the current page’s memory. Choosing “End & clear”, leaving or reloading clears local conversation state. Short-lived random session, usage and replay-prevention records contain no conversation text or audio. Network allowance identifiers are hashed. Ordinary hosting security/request logs and provider processing may still apply.

You can withdraw consent for further recording and processing by choosing “End & clear”. This stops the microphone and cancels pending requests where possible; it cannot undo processing already completed by the provider. OpenAI processing locations and retention depend on account settings, policies and applicable arrangements. Response storage is disabled for text-model requests, which does not establish zero provider retention, local hosting or anonymity. The demo is not a patient-data service. Help information remains available without starting.

Noor receptionist voice demonstration

Requesting demonstration access collects your name and email address. We store the request separately from the fictional clinic data and use Resend to automatically email a six-digit invitation code to eligible customers and send a separate notification to the Novalynt business inbox. We screen known disposable domains and check the email domain’s mail-server records using DNS; the full email address is not sent to a separate validation service. This is not a marketing subscription. Each code is tied to the submitted email, expires after 24 hours and can be redeemed once. Each email address receives one test code. Access requests and related notification records receive a 30-day retention expiry and are removed by the maintenance process. A keyed hash of the email address and an issuance marker remain during the testing programme to prevent further codes after the original request expires. These markers contain no raw name, email or code. You can contact us about this information. Correspondence in the business mailbox follows its separate retention process.

Starting the Noor demo sends microphone audio to OpenAI to generate live responses. We do not save raw audio or transcripts in this application. The optional automated transcript stays in the current page’s memory and clears on reset or when you leave. OpenAI processing and retention depend on the account configuration and provider policies; we do not promise zero provider retention. Only use fictional details, and do not share medical information.

The clinic, clinicians, appointments and callbacks are simulated. Short-lived server records contain synthetic appointment actions, session identifiers and call-control metadata. Access to demo records expires with the session. Expired records are physically removed by the configured maintenance process; provider call-control records can be retained briefly for shutdown retries. Rate-limit records use a one-way hash of the network identifier and expire under the same maintenance process. Demo records are separate from business enquiries. Nobody is monitoring the demo for emergency assistance.

Optional analytics

If you choose “Allow analytics”, this site records page paths and a small set of interaction events, such as a service click or successful form submission. Analytics do not include your name, email, phone, project overview or patient information. We do not use advertising cookies. Change your choice using “Cookie preferences” in the footer.

Your choices and rights

You can ask about your information, request correction or deletion, or raise a privacy concern using the contact address above. Rights may depend on the applicable law and circumstances. You can withdraw optional analytics permission at any time through the footer.

Security

We use encrypted transport, server-side validation, access controls and spam protection. Avoid sending confidential clinical information through a general business enquiry form.

Changes

This notice will be updated when our company details, providers or information-handling practices change. See our cookie notice for the storage used on your device.