How Marvanova collects, uses, and protects your personal data in accordance with the UK General Data Protection Regulation.
Marvanova is a trading name of Marvanova Ltd, a company registered in England and Wales under company number 17280852, with its registered office at Suite A, 82 James Carter Road, Mildenhall, Bury St Edmunds, IP28 7DE. ICO registration ZC117173. We operate from Sevenoaks, Kent, United Kingdom. We provide AI chatbot development, automation workflow services, and AI-enhanced website design and development.
For the purposes of the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018, Marvanova is the data controller responsible for your personal data.
Contact details:
We may collect and process the following categories of personal data:
We use your personal data for the following purposes:
We do not sell your personal data to third parties. We do not use your data for automated decision-making or profiling that produces legal or similarly significant effects.
Under UK GDPR, we must have a lawful basis for processing your personal data. We rely on the following bases:
We use a number of third-party services to operate our website and deliver our services. Each of these services may process your personal data as described below:
Our website chatbot is powered by the Anthropic Claude API. When you interact with the chatbot, your conversation inputs are sent to Anthropic's servers for processing and response generation. Anthropic processes this data as a data processor on our behalf. Please refer to Anthropic's Privacy Policy for information on how they handle data.
We use Google Analytics 4 to collect anonymised usage data about how visitors interact with our website. GA4 uses cookies to distinguish unique users and track sessions. IP anonymisation is enabled. Google processes this data on servers which may be located outside the UK, subject to appropriate safeguards including Standard Contractual Clauses. Please refer to Google's Privacy Policy for further details.
Our website is hosted on Netlify. Netlify processes server logs (including IP addresses) as part of standard hosting operations. Contact form submissions made on our site are processed and stored by Netlify Forms. Netlify acts as a data processor on our behalf. Please refer to Netlify's Privacy Policy for more information.
We use Calendly to allow you to book calls and meetings with us. When you schedule a meeting, Calendly collects your name, email address, and any additional information you provide. Calendly processes this data as a data processor on our behalf. Please refer to Calendly's Privacy Policy for further information.
Marvanova Studio, at marvanova.com/studio, is the tool we use to manage the TikTok accounts of Marvanova's own brands (SEN Letters UK, Lucuma, Graft'd, dunlin, Chef's Kiss and Marvanova). It only works for those accounts.
When an account owner chooses "Continue with TikTok", TikTok asks them to approve the access we request. With that approval, TikTok gives us:
We use this only to show the account owner their own profile and video performance, to report internally on how our brands' TikTok accounts are doing, and to send a video the account owner has chosen to their TikTok inbox. We never post on an account's behalf: the account owner finishes and posts every draft themselves in the TikTok app. We do not sell this data, use it for advertising or share it with anyone else.
The access TikTok issues to us is stored on our secure servers (see 5.6) and is never shown in the browser. A studio sign-in lasts up to 8 hours. If someone signs in with a TikTok account that is not one of our brand accounts, they are not signed in and we keep nothing about that account. An account owner can remove our access at any time in the TikTok app's settings, or by emailing apps@marvanova.com, and we will then delete the stored access. TikTok's own handling of data is covered by TikTok's Privacy Policy.
We use Supabase to run the secure back end of our tools, including Marvanova Studio. Supabase stores the TikTok access described in 5.5, studio sign-in records and the account statistics we report on. Supabase acts as a data processor on our behalf. Please refer to Supabase's Privacy Policy for more information.
Nova can read its replies out loud. To do this, the text of Nova's reply (not anything you have typed or said) is sent to ElevenLabs, which turns it into speech. ElevenLabs processes this text as a data processor on our behalf. You can mute Nova's voice at any time using the speaker button. Please see ElevenLabs' Privacy Policy for more information.
If you choose to talk to Nova by tapping the microphone, your browser's built-in speech recognition turns what you say into text. Depending on your browser, this may be processed by the browser maker (for example Google in Chrome, Microsoft in Edge or Apple in Safari) under their own privacy policies. We only ever receive the resulting text, which is then handled like a typed message. We never receive or store a recording of your voice. The microphone is only used after you tap it, and your browser will ask your permission first.
On our Trainerhaus page you can try Nova booking a free consultation at Haus Fitness, a made-up demo gym. If you do, the first name and the goal you type are saved as an event in a demo Google Calendar that we run, so you can see the booking work. We do not ask for an email address, phone number or any health details. The event is deleted automatically within about an hour of the time you booked. We keep only the time slot, with no personal details, so two people cannot book the same time. Your messages are handled like any other Nova chat, as described above.
When you send an enquiry through our contact or bespoke forms, join the Beauty Haus waitlist, or tick the box to get tips after using our AI readiness check, we save the details you give us in Supabase (see 5.6) so we can reply and follow up. On the contact and bespoke forms you can tick a box to ask us to reply without any follow-up emails. We may then send you a small number of follow-up emails: up to three about an enquiry or the AI readiness check, and a welcome and an occasional update for the Beauty Haus waitlist. If you use the AI readiness check without ticking the box, we do not keep your details for follow-up emails.
If we have built an app or website for you, we may email you up to three times to ask for an honest review. If your plan includes our time each month for changes or maintenance, we email you once a month to ask what you would like done. Nothing is ever offered in return for a review, and a review never affects your price.
If you leave a review, we store your rating, your review and the name you choose to show. We only publish a review if you have given permission on the review form, and we never edit what you wrote.
Every one of these emails has a link to stop them, and you can also reply or email hello@marvanova.com at any time. We rely on our legitimate interest in following up enquiries and looking after our customers, and on your consent where you have ticked a box. The emails are sent from apps@marvanova.com using Make (Celonis) and Google's Gmail service, which act as data processors on our behalf.
Some of our third-party service providers (including Anthropic, Google, Netlify, Calendly, ElevenLabs, Make and Supabase) are based in the United States. Where personal data is transferred outside the UK, we ensure that appropriate safeguards are in place, such as Standard Contractual Clauses approved by the UK Information Commissioner's Office (ICO), or that the receiving country has been deemed to provide an adequate level of data protection.
Cookies are small text files placed on your device when you visit our website. We use the following types of cookies:
These cookies are strictly necessary for the website to function correctly. They enable core features such as page navigation and do not collect personally identifiable information. These cookies cannot be disabled.
We use Google Analytics cookies to understand how visitors use our website. These cookies collect information in an anonymised form, including the number of visitors, the pages they visit, and where they came from. The following cookies may be set:
You can opt out of Google Analytics tracking by installing the Google Analytics Opt-out Browser Add-on or by adjusting your browser's cookie settings to block third-party cookies.
Our booking calendar is provided by Calendly and shown inside our pages: on the contact page, and in a pop-up when you choose to book a call elsewhere on the site. Calendly may set its own cookies when the calendar loads. It shows its own cookie notice, where you can decline optional cookies, and you can find out more in Calendly's Privacy Notice. Outside the contact page, the calendar only loads when you choose to open it.
Most web browsers allow you to control cookies through their settings. You can set your browser to refuse cookies or to alert you when cookies are being sent. Please note that disabling cookies may affect the functionality of our website. For more information on managing cookies, visit www.aboutcookies.org.
We retain your personal data only for as long as is necessary for the purposes for which it was collected:
When personal data is no longer required, it is securely deleted or anonymised.
Under the UK General Data Protection Regulation, you have the following rights in relation to your personal data:
These rights are not absolute and may be subject to exemptions under applicable law. We will respond to any valid request within one month, though this period may be extended by a further two months where necessary, taking into account the complexity and number of requests.
To exercise any of your rights, or if you have any questions about how we handle your personal data, please contact us:
We may need to verify your identity before processing your request to ensure the security of your personal data. We will not charge a fee for handling your request unless it is manifestly unfounded or excessive.
We may update this privacy policy from time to time to reflect changes in our practices, services, or legal requirements. When we make material changes, we will update the "Last updated" date at the bottom of this page. We encourage you to review this policy periodically to stay informed about how we are protecting your data.
Continued use of our website and services after any changes to this policy constitutes your acceptance of the updated terms.
If you are unhappy with the way we have handled your personal data or responded to a data request, you have the right to lodge a complaint with the UK's supervisory authority:
We would appreciate the chance to address your concerns before you approach the ICO, so please contact us at hello@marvanova.com in the first instance.
Last updated: 22 October 2026