Privacy policy

What we collect when you use this shop, why we process it and the rights you have.

This page is a working draft for the rebuild. Have the final wording reviewed against your operator details and current legal requirements before the site goes live.

Who is responsible

The operator named in our imprint is the controller for the data described here. For any question about your data, write to support@novapept.pro.

Data we process

Order data: name, delivery and billing address, email address and, if you provide one, a phone number.
Payment data: handled by our payment provider. We receive confirmation of the transaction, not your full card details.
Account data: your email address and a hashed password, if you choose to register.
Technical data: IP address, browser and device information, and the pages requested, recorded in server logs.
Support data: the contents of messages you send us through the contact form, email or Telegram.

Why we process it

We process order, payment and account data to perform the contract with you and to meet our legal obligations, in particular commercial and tax record-keeping.

Technical log data is processed on the basis of our legitimate interest in operating the site securely and diagnosing faults.

Analytics and marketing cookies are used only with your consent, which you can give or withdraw at any time through Cookie Settings in the footer.

Cookies and similar technologies

Necessary cookies keep the shop working: your cart, session, currency setting, security checks and the record of your cookie choice. These do not require consent.

Functional, analytics and marketing cookies are set only after you allow them. Your choice is stored for six months and can be changed at any time.

Who we share data with

We pass data to service providers only where it is needed to run the shop: our payment provider, the carrier delivering your order, our hosting provider and, where you have consented, our email service.

These providers process data on our instructions under a data processing agreement. We do not sell personal data.

How long we keep it

Order and invoice records are kept for as long as commercial and tax law requires. Account data is kept until you delete the account. Server logs are kept for a short period for security and diagnostic purposes.

Support correspondence is kept for as long as needed to handle the enquiry and any follow-up.

Your rights

Access: ask what data we hold about you and receive a copy.
Rectification: have inaccurate data corrected.
Erasure: have data deleted where we no longer have grounds to keep it.
Restriction and objection: limit or object to certain processing.
Portability: receive your data in a machine-readable format.
Withdraw consent: at any time, without affecting processing already carried out.
Complain: to the data protection authority responsible for you.

Security

The site is served over an encrypted connection. Orders are settled by direct bank transfer, so your payment details are shared only with your own bank. We apply appropriate technical and organisational measures to protect your data, though no transmission over the internet can be guaranteed completely secure.