Privacy Policy

Introduction

novavision Ltd ("we", "our", "us") is committed to protecting and respecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit our website novavision.world or use our cosmetic product performance analytics services.

Data We Collect

We may collect and process the following types of personal data about you:

Information You Provide Directly

The data we collect directly from you includes information provided when you contact us, request services, or interact with our platform. This may include your name, email address, phone number, company details, job title, and any messages or enquiries you send to us.

Information Collected Automatically

When you visit our website, we automatically collect certain information about your device and browsing behaviour, including your IP address, browser type, operating system, referring URLs, pages viewed, and the dates and times of your visits.

Analytics and Tracking Data

We use analytics services to understand how visitors use our website and to improve our services. This includes data about your interactions with our website, pages visited, time spent on pages, and user journey information.

How We Use Your Information

We use the personal data we collect for the following purposes, based on our legitimate business interests and your consent where required:

• To provide, operate, and maintain our analytics services
• To respond to your enquiries and provide customer support
• To send you service-related communications and updates
• To improve our website and services through analytics
• To comply with legal obligations and protect our rights
• For marketing purposes, where you have given consent

Cookies and Tracking Technologies

We may use cookies and tracking technologies for analytics, advertising, and remarketing purposes, including Google Ads. These technologies help us measure campaign effectiveness, deliver relevant advertisements, and improve our services. You can manage your cookie preferences at any time through our cookie consent banner. For detailed information about our use of cookies, please see our Cookie Policy.

Legal Basis for Processing

Under the General Data Protection Regulation (GDPR), we process your personal data based on the following legal grounds:

• Consent: Where you have given clear consent for specific processing activities
• Contract: Where processing is necessary for the performance of a contract with you
• Legal Obligation: Where we need to comply with a legal requirement
• Legitimate Interests: Where processing is necessary for our legitimate business interests

Data Sharing and Disclosure

We do not sell, trade, or otherwise transfer your personal information to third parties except in the following circumstances:

• With your explicit consent
• To trusted service providers who assist in operating our website and services
• When required by law or to protect our rights
• In connection with a business transfer or merger

International Data Transfers

Your personal data may be transferred to and processed in countries outside the European Economic Area (EEA). When we transfer data internationally, we ensure appropriate safeguards are in place, including adequacy decisions or standard contractual clauses approved by the European Commission.

Data Retention

We retain your personal data only for as long as necessary to fulfil the purposes outlined in this Privacy Policy, unless a longer retention period is required by law. Generally, we retain contact information for up to 7 years after our last interaction, and website analytics data for up to 26 months. Marketing data is retained until you withdraw consent or for up to 3 years of inactivity.

Your Rights

Under GDPR, you have the following rights regarding your personal data:

• Right of Access: Request copies of your personal data
• Right to Rectification: Request correction of inaccurate data
• Right to Erasure: Request deletion of your personal data
• Right to Restrict Processing: Request limitation of data processing
• Right to Data Portability: Request transfer of your data
• Right to Object: Object to processing based on legitimate interests
• Right to Withdraw Consent: Withdraw consent for consent-based processing

Data Security

We implement appropriate technical and organisational measures to protect your personal data against unauthorised access, alteration, disclosure, or destruction. These measures include encryption, access controls, regular security assessments, and staff training on data protection.

Children's Privacy

Our services are not intended for children under the age of 16. We do not knowingly collect personal information from children under 16. If we become aware that we have collected personal data from a child under 16, we will take steps to delete such information promptly.

Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices or legal requirements. We will notify you of any material changes by posting the updated policy on our website and updating the "Last Updated" date.

Contact Information

If you have any questions about this Privacy Policy, wish to exercise your rights, or have concerns about how we handle your personal data, please contact us:

You also have the right to lodge a complaint with the Malta Information and Data Protection Commissioner if you believe we have not handled your personal data in accordance with applicable law.

Governing Law

This Privacy Policy is governed by and construed in accordance with the laws of Malta and the European Union, including the General Data Protection Regulation (GDPR).