Nova privacy policy

Last updated on: 17 Mar 2026

This privacy policy (“Policy”) explains how TVS SCS IFM Limited (formerly Rico Logistics Ltd) located at Buckshaw Avenue Logistics House, Chorley, PR6 7AJ, United Kingdom (“We”, “Us”, “Our”) Processes Personal Data collected from natural persons (“You”), as specified in clause 2 below, as a Controller when You use the TVS SCS Nova mobile application.

1. DEFINITIONS

1.1 “Controller” means the natural or legal person, public authority, agency, or other body which alone or jointly with others determines the purposes and means of the processing of Personal Data.

1.2 “Customer” means the natural or legal person that has entered into a service agreement with Us for receiving logistic and supply management services.

1.3 “Consultant” means an independent professional engaged by Us under a contractor agreement to provide specialized services to enable Us to fulfil Our obligations with Our Customer.

1.4 “Personal Data” means any information relating to an identified or identifiable natural person; an identifiable natural person is one who can be identified, directly or indirectly, in particular by reference to an identifier such as a name, an identification number, location data, an online identifier or to one or more factors specific to the physical, physiological, genetic, mental, economic, cultural or social identity of that natural person.

1.5 “Process/Processing” means any operation or set of operations which is performed on Personal Data or on sets of Personal Data, whether or not by automated means, such as collection, recording, organization, structuring, storage, adaptation or alteration, retrieval, consultation, use, disclosure by transmission, dissemination or otherwise making available, alignment or combination, restriction, erasure or destruction.

1.6 “User” means a designated user within Nova, which may include the Customer’s employees or representatives or the Consultant.

2. HOW WE COLLECT, USE, AND SHARE YOUR PERSONAL DATA

2.1 PERSONAL DATA THAT YOU PROVIDE US

When You are a(n)	What Personal Data We Collect	How We use Your Personal Data	Whom We share Your Personal Data with
User who provides certain information through Nova, while a) filling out a survey about their user experience or feedback, b) contacting Us or speaking to Our representatives.	Information You have provided as part of it.	To improve Nova. To send information about Our products, services, and any other marketing messages which may be of Your interest. To respond to Your comments, queries, or questions, if any.	Third parties who assist Us in providing these services.
User who raises a support ticket on Nova.	Your contact information such as Your name, email, and phone number.	To respond to Your comments and questions and provide customer service.	Third parties who assist Us in providing these services.
User who engages with the interactive features of Nova.	Information You have provided as part of it.	To respond to Your comments and questions. To analyse Your usage pattern and preferences. To improve User experience.	Third parties who assist Us in providing these services.

2.2 PERSONAL DATA THAT WE COLLECT NOT PROVIDED DIRECTLY BY YOU

When You are a(n)	What Personal Data We Collect	How We use Your Personal Data	Whom We share Your Personal Data with
User whose data is available with Us on Our database.	Nova does not require independent User registration on the application. We use Personal Data such as Your name, phone number, email address, employment information (job title, access level, organization name), and business identifiers (Customer or Consultant IDs) that is already available with Us in Our database in furtherance of Our agreement with the Customer or the Consultant.	To create and set up the User account on Nova. To verify Your identity and authorize access to Nova. To communicate service updates, application changes, or operational alerts related to Your account. To facilitate the usage of Nova, including interaction with the interactive features of Nova.	Third parties who assist Us in creating Your account, sending You notifications. We also share Your Personal Data with Our identity verification and data hosting service providers.
User who downloads and uses Nova.	Your device information, such as login time-stamp, Internet Protocol (IP) addresses, operating system, and mobile network information. Your location information in both the foreground (when Nova is open and in use) and background (when Nova is running in the background and is not actively being used by You). Information relating to Your use of or interaction with Nova or query logs. Information relating to Your communication with other Users.	For market analysis and market research. To improve User experience. To protect Nova from threats, violations, and breaches if any. To develop, improve, support, and operate Nova. Background location information is used to track assignment status and route compliance as part of Your operational role (where You are a Consultant). Where You are a Consultant, to evaluate Your performance.	Third parties who provide Us with services in connection with such processing.

If You provide Us with any Personal Data relating to other individuals, You represent that You have the authority to do so, and, where required, have obtained the necessary consent, and acknowledge that it may be used in accordance with this Policy. If You believe that Your Personal Data has been provided to Us improperly, please contact Us by using the information in clause 10 below.

2.3 In addition to the details provided in the table above, We may also share Your Personal Data with:

an entity to which we divest all or a portion of Our business, or otherwise in connection with a merger, consolidation,
change in control, reorganisation or liquidation of all or a portion of Our business.
Law enforcement authorities, government authorities, courts, dispute resolution bodies, regulators, auditors, and any party
appointed or requested by applicable regulators to carry out investigations or audits of Our activities.
Professional advisors who advise and assist Us in enforcing Our contracts and policies, handling Our claims, effective
management of Our company and in relation to any disputes We may become involved in.

3. LEGAL BASIS FOR PROCESSING (EEA AND UK REGION)

3.1 If You are a data subject from the European Economic Area or the United Kingdom, Our legal basis for collecting and using the Personal Data described above will depend on the Personal Data concerned and the specific context in which We collect it.

3.2 We will normally collect Personal Data from You only where it is needed to perform a contract with You, where the Processing is in Our legitimate interests and not overridden by Your data protection interests or fundamental rights and freedoms, or where We have Your consent. In some cases, We may also have a legal obligation to collect Personal Data from You. If We Process Personal Data with reliance on Your consent, You may withdraw Your consent at any time.

3.3 If You have questions or need further information concerning the legal basis on which We collect and use Your Personal Data, please contact Us using the contact details provided under clause 10.

4. INTERNATIONAL TRANSFER

4.1 We mainly Process Personal Data in the United Kingdom. However, We may transfer Personal Data outside the United Kingdom only for the purposes referred to in clause 2. We will ensure that the recipient of Your Personal Data offers an adequate level of protection that is at least comparable to that which is provided under applicable data protection laws.

4.2 If You are a resident of the European Economic Area or the United Kingdom and when Your Personal Data is Processed outside EEA or the United Kingdom, We will ensure that the recipient of Your Personal Data offers an adequate level of protection, for instance by entering into standard contractual clauses or the UK international data transfer agreement for the transfer of Personal Data as approved by the European Commission (Article 46 General Data Privacy Regulation, 2016) or the UK Secretary of State respectively, or We will ask You for Your prior consent to such international data transfers.

5. SECURITY OF PERSONAL DATA

We use appropriate technical and organizational measures to protect the Personal Data that We collect and Process. The measures We use are designed to provide a level of security appropriate to the risk of Processing Your Personal Data. If You have questions about the security of Your Personal Data, please contact Us using the contact details provided under clause 10.

6. RETENTION OF PERSONAL DATA

6.1 We will retain Your Personal Data for as long as reasonably necessary for the purpose for which the Personal Data was collected as specified under clause 2, for marketing purposes unless You opt out as described in this Policy, or otherwise where permitted or required in accordance with applicable law. We will retain and use Your Personal Data as necessary to comply with Our legal obligations, resolve disputes, and enforce Our agreements.

6.2 In the absence of a need to retain Personal Data under clause 6.1 above, We will either delete it or aggregate it or, if this is not possible then We will securely store Your Personal Data and isolate it from any further processing until deletion is possible.

7. YOUR PRIVACY RIGHTS

7.1 You have the right to opt out of marketing communications We send You at any time. You can exercise this right by clicking on the “unsubscribe” or “opt-out” link in the marketing e-mails We send You. To opt out of other forms of marketing (such as postal marketing or telemarketing), please contact Us.

7.2 You are entitled to the following rights:

7.2.1 You can request access to your Personal Data.

7.2.2 You can request that We correct inaccurate Personal Data about You, subject to appropriate verification.

7.2.3 You may have the right to request that We delete Personal Data that We have collected from You, subject to certain exceptions.

7.2.4 If You are a resident of the EEA, United Kingdom, or Switzerland, You are also entitled to the following rights: You can object to the Processing of Your Personal Data, ask Us to restrict the Processing of Your Personal Data, or request portability of Your Personal Data.

7.2.5 If We have collected and processed Your Personal Data with Your consent, then You can withdraw Your consent at any time. Withdrawing Your consent will not affect the lawfulness of any processing We have conducted prior to Your withdrawal, nor will it affect Processing of Your Personal Data conducted in reliance on lawful processing grounds other than consent.

7.3 You have the right to appeal a decision We have made in connection with Your privacy rights request by contacting Us using the contact information provided in Clause 10. You also have the right to complain to a data protection authority about Our collection and use of Your Personal Data. For more information, please contact Your local data protection authority as specified by the applicable data protection laws.

7.5 If You seek to exercise Your rights under this clause, please contact Us at the details provided in clause 10. We will verify any requests before acting on the request and respond to all requests We receive from individuals wishing to exercise their data protection rights within a reasonable timeframe in accordance with applicable data protection laws.

7.5.1 We will not discriminate against You if you decide to exercise Your privacy rights.

7.5.2 Please note that, when appropriate, We may decline a request if We are unable to verify Your identity (or an agent’s authority to make the request) and confirm the Personal Data We maintain relates to You.

7.5.3 Only You, or someone legally authorized to act on Your behalf. Where appropriate, You may authorize someone to make a request on Your behalf (an authorized agent). Authorized agents will need to demonstrate proof of authorization to act on Your behalf. We retain the right to request confirmation directly from You, confirming that the agent is authorized to make such a request, or to request additional information to confirm the agent’s identity.

7.6 If You are from EEA or the United Kingdom and You believe that Our Processing of Your Personal Data violates Your rights under applicable law, You also have the right to lodge a complaint with the relevant EU member state supervisory authority or the supervisory authority in the United Kingdom respectively. The Information Commissioner’s Office (“ICO”) is the data protection supervisory authority in the United Kingdom.

The ICO’s address:

Information Commissioner’s Office, Wycliffe House, Water Lane, Wilmslow, Cheshire, SK9 5AF.

Helpline number: 0303 123 1113

ICO website: https://www.ico.org.uk

8. PRIVACY OF CHILDREN

We recognize the importance of children’s safety and privacy. Nova is not directed to individuals under the age of 18. We do not knowingly request, or collect, any Personal Data from children under the age of 18. If We become aware that an individual under 16 has provided Us with Personal Data, We will take steps to delete such data as soon as possible. If a parent or guardian becomes aware that his or her child has provided Us with Personal Data, they should write to Us at the email address provided in clause 10.

9. Links to third-party websites or applications.

Nova may contain links to other websites or applications. Our Policy applies only to Nova, so if You click on a link to another website or application, You should read their privacy policy. We encourage You to review the privacy statements of any such other websites to understand their Personal Data practices.

10. CONTACT INFORMATION

You may contact Us if You have any inquiries or feedback on Our data protection policies and procedures in the following manner:

Kind Attention: The Data Protection Officer

Email Address: [email protected]

11. CHANGES TO THE POLICY

We may update this Policy from time to time in response to changing legal, technical, or business developments. When We update Our Policy, We will take appropriate measures to inform You, consistent with the significance of the changes We make. We will obtain Your consent to any material Policy changes if and where this is required by applicable data protection laws.

You can see when this Policy was last updated by checking the “Last Updated” date displayed at the top of this Policy.