Trust
Governance you can verify.
This page is maintained by Nova Craft Digital LTD to answer common questions about how the studio, and the sites it builds, handle security, privacy and accessibility. It is a statement of practice, not an independent certification.
Security posture
Modern web platforms, encrypted transport in transit, principle of least privilege for credentials, and secret hygiene enforced through the studio's build pipeline.
Access & authentication
Client-facing surfaces use short-lived sessions and modern authentication where applicable. Studio operational tooling is protected by strong passwords and second factors.
Data handling
We collect only what an engagement requires. Contact details submitted through the enquiry form are used solely to respond to that enquiry, in line with the privacy policy.
Accessibility
Every website we ship is engineered against WCAG 2.2 AA as a baseline, with semantic HTML, keyboard operability and reduced-motion respect built in.
Vulnerability disclosure
Report a security concern.
If you believe you have found a security issue affecting a site the studio maintains, please contact us in writing. We will respond within one working day.
support@novacraftdigitial.co.ukSee also: /.well-known/security.txt
Hosting & jurisdiction
Where the studio operates.
Nova Craft Digital LTD is registered in England & Wales (company number 17264789). Sites are deployed to modern edge platforms, with regional routing where an engagement requires it.