Privacy policy

1. Data controller

The party responsible for the database and for processing the personal data collected through this website (wearenovouy.com) is NOVO (also known as NOVOUY), a digital agency based in Montevideo, Oriental Republic of Uruguay.

You can contact us through the contact form, on WhatsApp at +598 99 572 215 or by email at hola@wearenovouy.com.

2. What data we collect

When you fill out the contact form or book a call, we collect the data you provide yourself:

• Name (required).
• Email address (required).
• WhatsApp or phone number (optional).
• Company (optional).
• Service of interest (optional).
• The message you write to us (required in the contact form, optional when booking).
• If you book a call: the chosen date and time.

We record your inquiry in our internal customer management system (CRM), where the team tracks its status and follow-up. If you book a call, we send you a confirmation email and add it to our internal calendar.

In addition, for security reasons and to prevent automated submissions (spam), we record minimal technical data related to the submission: the date and time, how long it took to fill out the form and an encrypted, irreversible version (hash) of your IP address, which is automatically deleted after 2 days. Please do not include sensitive data in your message (for example, about health, racial origin or beliefs), as it is not needed to answer your inquiry.

If you contact us via WhatsApp, Instagram, email or another channel, we will process the data you share through that channel for the same purpose. Those platforms also apply their own privacy policies.

3. How we use your data

We use your data exclusively to:

• Answer your inquiry and follow up on it.
• Prepare and send you proposals related to your request.
• Manage the business relationship if you decide to work with us.

We do not use your data to send you unsolicited advertising, nor for purposes other than or incompatible with those for which it was collected.

4. Legal basis: your consent

We process your data on the basis of your free, prior, express and informed consent, in accordance with Law No. 18.331 on Personal Data Protection and Habeas Data and its Regulatory Decree No. 414/009. You give it by ticking the “I accept the Privacy Policy” box before submitting the contact form or confirming a call in the booking calendar. For cookie-based analytics, you give it by choosing “Accept” in the cookie notice.

You can withdraw your consent at any time, without retroactive effect, by writing to us through the channels listed in this policy.

5. Who we share your data with

We do not sell or transfer your personal data to third parties. Only the technology infrastructure providers we need to run the site have access to it; they act as data processors and only follow our instructions:

• Vercel Inc. (United States; servers in São Paulo, Brazil): hosting of the website, the form and the booking calendar.
• Supabase Inc. (United States; servers in São Paulo, Brazil): database where received inquiries and booked calls are stored.
• Resend (United States): delivery of the notification and confirmation emails related to your inquiry.
• Google LLC (United States): visit measurement through Google Analytics, only if you accept it (see the cookies section), and the email and calendar services our team uses to manage inquiries.

These providers may store or process data on servers located outside Uruguay, mainly in Brazil and the United States, which involves an international data transfer. By accepting this policy, you expressly consent to that transfer. We choose providers that apply appropriate security measures and contractual data protection commitments.

Outside these cases, we will only disclose your data when required by law or by a competent authority.

6. How long we keep your data

We keep the data from your inquiry for as long as needed to answer it and manage any business relationship that may arise. If no business relationship follows, we delete it within a maximum of 24 months from the last contact, unless we must keep it due to a legal obligation. You can request its deletion sooner at any time.

7. Your rights

Under Law No. 18.331, you have the right to access your personal data and to request its rectification, update, inclusion or deletion, as well as to withdraw your consent.

To exercise these rights, contact us through the contact form, on WhatsApp at +598 99 572 215 or by email at hola@wearenovouy.com, stating your name, the right you wish to exercise and a way to reach you. We may ask you to verify your identity. Exercising these rights is free of charge. We will respond to access requests within 5 business days, and to rectification, update, inclusion or deletion requests within 5 business days of receipt, in accordance with the legal deadlines.

If you access the site from the European Economic Area or the United Kingdom, you also have the rights to data portability, to object and to restrict processing, and you can lodge a complaint with the data protection authority of your country. In that case, we process your data to take pre-contractual steps at your request (answering your inquiry or booking the call) and, for analytics, based on your consent.

If you believe we did not handle your request properly, you can file a complaint with the Unidad Reguladora y de Control de Datos Personales (URCDP), Uruguay's data protection authority (www.gub.uy/unidad-reguladora-control-datos-personales).

8. Cookies and analytics

To understand how the site is used and improve it, we use two measurement tools:

• Google Analytics (Google LLC, United States): only enabled if you accept it in the cookie notice. In that case it sets first-party analytics cookies (for example, _ga and _ga_*) that let us count visits and learn, in aggregate and statistical form, which pages are viewed and where visitors come from. We do not use this information to identify you personally. This data is transferred to and stored on Google servers, mainly in the United States. You can read Google's privacy policy and turn off measurement with the Google Analytics opt-out browser add-on.
• Vercel Web Analytics (Vercel Inc.): measures visits in aggregate and does not use cookies or identify users.

We also use a technical cookie (NEXT_LOCALE) that remembers your chosen language for 12 months, and we store your cookie choice in your browser. These are necessary for the site to work and do not require consent.

We do not use advertising cookies. You can change your choice at any time from the “Cookie preferences” link at the bottom of every page, or block and delete cookies in your browser settings; the site will keep working normally.

9. Security

We apply reasonable technical and organizational measures to protect your data against loss, unauthorized access or misuse, such as encrypted connections (HTTPS) and restricted access to information. No system is completely invulnerable, but we work to maintain an appropriate level of security.

10. Minors

This site is intended for businesses and adults. We do not knowingly collect data from anyone under 18. If you are a parent or guardian and believe a minor has sent us their data, contact us and we will delete it.

11. Changes to this policy

We may update this policy to reflect legal changes or changes to our services. We will always publish the current version on this page, along with its last updated date.