Privacy Policy.
Last updated: 30 September 2026
This policy explains how Novum Marketing collects, uses, and protects your personal data. We are committed to your privacy and operate in full compliance with the General Data Protection Regulation (GDPR) and Maltese data protection law.
Who we are
Novum Marketing is a digital marketing agency based in Malta. We are the data controller for any personal data you provide to us through this website.
For any privacy-related queries, contact us at: contact@novum.mt
What data we collect
We only collect personal data that you voluntarily provide to us through our contact form. This includes:
- Your name
- Your email address
- Your company name (optional)
- The message or enquiry you submit
- The options you select in the form (the services you're interested in, how established your brand is online, and your budget range)
We only collect data automatically if you accept analytics cookies. See Cookies below.
Why we collect it
Your data is collected solely to respond to your enquiry. We do not use it for marketing purposes, share it with third parties for advertising, or add you to mailing lists without your explicit consent.
The legal basis for processing your data is legitimate interest (we need your contact details in order to reply to you) and, where applicable, your consent given at the time of submission.
How long we keep it
We retain your data only for as long as necessary to address your enquiry and for a reasonable period thereafter, not exceeding two years. After that period, your data is deleted.
Third-party services
This website uses the following third-party services:
- Web3Forms: contact form submissions are processed via Web3Forms, which forwards your message to our email inbox. Web3Forms does not permanently store your data after forwarding. See web3forms.com/privacy.
- Google Analytics (Google Ireland Limited): used, only with your consent, to measure how visitors use this site. Collects an anonymous identifier, a truncated IP address, page paths, referrer, and general device and browser information. Not loaded at all unless you accept analytics cookies.
- Vercel (Vercel Inc.): this website is hosted on Vercel. Vercel may process technical data such as IP addresses for hosting, delivery and security purposes. See Vercel's Privacy Notice.
All fonts used on this website are self-hosted and served directly from our domain. No font requests are made to Google or any other external server.
Cookies
We use Google Analytics to understand how visitors find and use this site. Google Analytics sets two cookies (_ga and _ga_LZHBTYJB9S) which record an anonymous identifier and session information. They expire after two years.
These cookies are only set if you accept them. When you first visit, a banner asks whether you consent to analytics cookies. Nothing is set, and no data is sent to Google, unless you choose "Accept". If you choose "Reject", no analytics run at all. Your choice is remembered in your browser and you can change it at any time by clearing this site's data in your browser settings, which will make the banner appear again.
We have enabled IP anonymisation, so Google receives a truncated version of your IP address rather than the full one. Google acts as a data processor for this information; see Google's privacy policy.
We also use sessionStorage and localStorage (browser-side mechanisms, not cookies) for two things only: remembering your cookie choice, and briefly passing the name of the next page to the page transition. Neither leaves your device.
Your rights
Under GDPR, you have the following rights regarding your personal data:
- Right of access: you can request a copy of the data we hold about you
- Right to rectification: you can ask us to correct inaccurate data
- Right to erasure: you can ask us to delete your data
- Right to restriction: you can ask us to limit how we use your data
- Right to data portability: you can request your data in a structured, machine-readable format
- Right to object: you can object to the processing of your data
To exercise any of these rights, contact us at contact@novum.mt. We will respond within 30 days.
Complaints
If you believe your data has been handled improperly, you have the right to lodge a complaint with the Maltese supervisory authority:
Office of the Information and Data Protection Commissioner (IDPC)
Second Floor, Airways House, High Street, Sliema SLM 1549, Malta
idpc.org.mt
Changes to this policy
We may update this privacy policy from time to time. Any changes will be reflected on this page with an updated date. We encourage you to review this page periodically.