Privacy Policy

This Privacy Policy explains what personal data ERZ Nova Ltd collects when you visit historyteller.co.uk, when you use the HistoryTeller audio guide at a heritage venue, or when you contact us about a venue partnership — and how we use, store, and protect that data.

1. Who we are

ERZ Nova Ltd ("ERZ Nova", "we", "us") is the data controller for personal data collected through our website and the HistoryTeller product.

• Registered office: [registered company address]
• Companies House number: [company number]
• ICO registration number: [ICO registration number]
• Contact for privacy enquiries: hello@erznova.co.uk

2. What data we collect

2a. Marketing website (historyteller.co.uk)

When you visit this site we collect minimal technical information automatically through our hosting provider (Cloudflare):

• IP address (used for security and abuse prevention; not stored against an identity)
• Browser user agent and approximate region
• Pages requested and HTTP response codes

If you choose to email us using the address shown on this site, we will hold the email content and your address until your enquiry has been resolved (and for a reasonable period afterwards for record-keeping).

2b. HistoryTeller audio guide (app.historyteller.co.uk)

HistoryTeller is designed to require no account and no app download. When a visitor scans a venue's QR code and uses the guide, we may collect:

• Anonymous play events (which chapter was started, completed, paused, or skipped)
• Selected narration language
• Aggregate session counts per venue
• Where the visitor opts to make a voluntary contribution, payment is processed by Stripe — see "Third parties" below

We do not collect names, email addresses, location data, or device identifiers from visitors using the audio guide.

3. Lawful bases for processing

We process personal data on the following lawful bases under the UK GDPR:

• Legitimate interests — for security logging, basic site analytics, and aggregated venue analytics that contain no personal data.
• Contract — when we communicate with venue partners about a partnership or demo.
• Consent — where required for any non-essential cookies or analytics that go beyond strictly necessary.

4. Cookies

The marketing website uses only strictly-necessary cookies set by our hosting and security provider. The HistoryTeller audio guide uses local browser storage (IndexedDB) on the visitor's own device to cache audio for offline-capable playback — this never leaves the device and is not transmitted to us.

5. Third parties we share data with

We use the following service providers ("processors") to operate the service:

• Cloudflare, Inc. — hosting and CDN for the website and audio guide.
• Amazon Web Services, Inc. — backend services and audio file storage in UK / EU regions.
• Stripe, Inc. — payment processing for voluntary visitor contributions.

Each processor has its own privacy notice and processes data on our instructions under data processing agreements.

6. International transfers

Where personal data is transferred outside the UK or EEA (for example to Stripe in the United States) we rely on the UK International Data Transfer Addendum or the EU Standard Contractual Clauses, together with supplementary measures, as appropriate.

7. Data retention

• Web server logs: up to 90 days, then deleted.
• Email correspondence with venue enquirers: held for the duration of the relationship and up to 6 years afterwards for accounting and contractual records.
• Anonymous audio-guide analytics: aggregated indefinitely; raw event data is retained for up to 24 months.

8. Your rights

Under the UK GDPR you have the right to:

• Access the personal data we hold about you
• Correct inaccurate data
• Request erasure of data we no longer need to hold
• Restrict or object to processing
• Receive your data in a portable format
• Withdraw consent at any time, where consent is the lawful basis

To exercise any of these rights, email hello@erznova.co.uk. We aim to respond within one calendar month.

9. Complaints

If you believe we have not handled your personal data properly, you have the right to complain to the UK Information Commissioner's Office (ICO) at ico.org.uk.

10. Changes to this policy

We will update this page when our practices change and will revise the "Last updated" date at the top. Material changes will be highlighted on the home page.