Privacy
Privacy Policy.
How SUPANOVA handles personal information submitted through this website, and the rights you have over it under UK data protection law.
Last updated · 24 October 2026
About this policy
This policy explains how SUPANOVA ("we", "us") collects and uses personal information through this website. SUPANOVA is a London-based agency operating in the United Kingdom, and acts as the data controller for information submitted through the forms described below.
We have written this policy to describe what the website actually does. It does not cover separate commercial agreements, or information you share with us outside the website.
Information we collect
We collect information you give us directly through the forms on this website.
| Where | What we collect |
|---|---|
| Enquiry form (/contact) | Full name, company or brand name (optional), email address, phone number (optional), the enquiry category you select, and your message. |
| Careers applications (/careers) | Full name, email address, phone number (optional), your cover message, the vacancy applied for (where applicable), and any CV or portfolio file you choose to attach. |
| New Voice brand interest (/newvoice) | Full name, work email address and company or brand name; optional company website, areas of interest and message; and your optional marketing consent choice, timestamp and the wording presented. Historical waitlist registrations retain their original applicant type and details. Marketing consent is never assumed for historical contacts. |
| New Voice creator applications (/newvoice/apply) | Full name, creator name (optional), email address, phone number (optional), location, website and social links (optional), creative disciplines, sector specialisms, services offered, professional biography, experience (optional), portfolio URL and any portfolio file you upload, collaboration preferences including an optional private budget range, availability, and optional marketing consent. |
| New Voice creator profiles (/newvoice/creators) | Where an application is approved and you have reviewed and approved your profile: your creator name, disciplines, sectors, services, location, biography, approved portfolio images and external links. Private application details such as budget information, internal notes and unapproved files are never published. |
| Technical details attached to submissions | The page you submitted from, the referring page, and a broad device type (mobile, tablet or desktop) derived from your browser's user-agent. This is recorded only when you submit a form. |
| Administrator sign-in | For SUPANOVA staff only: account email, password credentials and two-factor authentication data, handled by our hosting and authentication provider. |
We do not run advertising or tracking technologies, and we do not buy personal information from third parties. We do not ask for special category data (such as health or ethnicity). Please do not include it in a free-text field or attachment.
Website usage and analytics
This website does not currently use any analytics, measurement or advertising technologies. If we introduce analytics in future, it will only be loaded where you have given consent through our cookie preferences, and this policy will be updated first.
Our hosting provider processes standard server request information (such as IP address and request details) in order to deliver and secure the website. See our Cookie Policy for details of the storage this website uses.
How we use information
- Responding to enquiries submitted through the website.
- Managing ongoing business communications relating to your enquiry.
- Considering applications for vacancies and general expressions of interest in working with us.
- Managing New Voice brand interest registrations and responding to specific requests. Directory launch news, talent and collaboration service updates are sent only where you have opted into marketing.
- Reviewing New Voice creator applications, communicating with applicants, and preparing, publishing and maintaining approved creator profiles in the public directory.
- Operating, maintaining and securing the website.
- Understanding how the website is used, where measurement is enabled and you have consented.
- Maintaining internal records of enquiries, applications and waitlist registrations, including internal status notes.
- Meeting legal or regulatory obligations that apply to us.
Lawful basis
Under UK GDPR we must have a lawful basis for each processing activity. We rely on the following:
| Activity | Lawful basis |
|---|---|
| Responding to an enquiry and related correspondence | Legitimate interests: responding to someone who has contacted us about our services. Where the enquiry leads towards an agreement, steps taken at your request prior to entering a contract. |
| Considering a careers application, including any CV you attach | Steps taken at your request prior to entering a contract of employment or engagement, supported by our legitimate interest in recruiting for our team. |
| Managing New Voice brand interest and responding to specific requests | Legitimate interests: recording interest in our network and responding to requests made to us. This is separate from optional marketing, and you can ask to be removed at any time. |
| Reviewing a New Voice creator application | Steps taken at your request prior to a possible participation agreement, supported by our legitimate interest in operating and curating the network. |
| Publishing an approved New Voice creator profile | Consent: a profile is published only after the creator has reviewed and approved it, and can be unpublished on request. |
| Optional New Voice marketing updates | Consent, given through a separate optional, unticked box on the creator application or brand interest form. You can withdraw at any time. Registering interest does not itself opt you into marketing. |
| Non-essential cookies or measurement technologies, if introduced | Consent, given through our cookie preferences. |
| Operating, securing and maintaining the website and its records | Legitimate interests: running a secure website and keeping accurate business records. |
| Meeting legal or regulatory obligations | Legal obligation. |
Where we rely on legitimate interests, we have considered whether our interest is outweighed by your rights and freedoms. You can object to this processing at any time. See "Your rights" below.
Information sharing
We do not sell personal information. We share it only with service providers who process it on our behalf, under contract and on our instructions:
| Provider | Purpose |
|---|---|
| Lovable (including its hosting and Supabase-based cloud infrastructure) | Website hosting, the database that stores enquiries, careers applications and New Voice waitlist records, file storage for CV and portfolio attachments, and authentication for the protected admin area. |
| Resend | Sending notification emails to SUPANOVA and acknowledgement emails to applicants. |
| Google Fonts | Serving the typefaces used on this website. Your browser requests font files directly from Google when a page loads; no cookies are set by us for this purpose. |
| Our email provider | Receiving and storing correspondence sent to our SUPANOVA mailboxes. |
We may also disclose information where we are required to do so by law, or to establish, exercise or defend legal claims.
International transfers
Some of the providers above are based outside the United Kingdom, or operate global infrastructure, which means personal information may be processed outside the UK. Where that happens, transfers are made under the safeguards permitted by UK data protection law, such as UK adequacy regulations or the International Data Transfer Agreement or Addendum incorporated into our providers' terms.
If you would like more detail about the safeguards applying to a specific provider, contact us at enquiries@supanovamng.com and we will confirm the position.
Data retention
| Record | Retention |
|---|---|
| Enquiries | Kept while we are in active discussion and for up to 24 months after the last contact, then reviewed and deleted unless a business relationship or legal requirement means we need to keep them longer. |
| Careers applications and attached CVs or portfolios | Kept for up to 12 months after the recruitment decision, so that we can consider you for suitable roles. Deleted sooner on request. |
| General applications (introductions with no specific vacancy) | Kept for up to 12 months from submission, then deleted. |
| New Voice brand interest and historical waitlist records | Kept while the initiative is active and while you remain on the list. Removed on request or when the waitlist closes; archived entries are reviewed at least annually. |
| New Voice creator applications and uploaded portfolio files | Kept while your application is open and, for successful applicants, while you participate in the network. Unsuccessful applications are reviewed and deleted within 12 months of the decision. Deleted sooner on request. |
| New Voice published creator profiles | Kept while the profile is published. Removed or unpublished on request; archived profiles are reviewed at least annually. |
| Email correspondence | Kept in our mailboxes for as long as needed for the business relationship, and then in line with our general records review. |
| Analytics information | Not applicable: no analytics technologies are currently in use. |
Where a precise period cannot reasonably be set, we decide retention based on why we hold the information, whether the relationship is ongoing, and any legal or accounting requirement to keep records.
Security
Information submitted through this website is transmitted over encrypted connections and stored in access-controlled systems provided by our hosting partner. Access to submissions is limited to authorised SUPANOVA personnel, and the admin area is protected by password and two-factor authentication. No system can be guaranteed completely secure, but we take reasonable and appropriate measures to protect your information.
Your rights
Depending on the circumstances and the lawful basis involved, you have the right to:
- Access the personal information we hold about you.
- Have inaccurate information corrected.
- Ask us to erase your information.
- Ask us to restrict how we use your information.
- Object to processing based on our legitimate interests.
- Receive certain information in a portable format, or have it transferred to another controller.
- Withdraw your consent at any time where processing is based on consent, including removing yourself from the New Voice waitlist, or changing your cookie preferences. Withdrawing consent does not affect processing carried out beforehand.
Not every right applies in every situation. To exercise a right, email enquiries@supanovamng.com. We will respond within one month, and may ask you to confirm your identity first.
Cookies
This website uses only strictly necessary storage. Full details are in our Cookie Policy, and you can review your choices at any time.
Complaints
If you have a concern about how we handle your personal information, please contact us first at enquiries@supanovamng.com so we can put it right. You also have the right to complain to the UK Information Commissioner's Office (ICO) at ico.org.uk or on 0303 123 1113.
Contact
For any question about this policy or your personal information, email enquiries@supanovamng.com.
Updates
We may update this policy when our processing activities, the services we use, or legal requirements change. The date at the top of this page shows when it was last revised.