Privacy policy

1. Who controls personal data

Nova Mats is responsible for the personal data described in this Privacy Policy.

Store name: Nova Mats
Business location: The Netherlands
Website: https://novamats.store
Privacy email: hello@novamats.store

2. Scope

This Policy explains how Nova Mats processes personal data when a person:

  • visits the website;

  • places or receives an order;

  • creates or uses an account;

  • contacts customer service;

  • requests a return, refund, guarantee remedy, or withdrawal;

  • subscribes to marketing;

  • submits a review or other content;

  • interacts with Nova Mats on social media; or

  • exercises a privacy right.

3. Personal data we may process

Depending on how a person uses the store, Nova Mats may process:

Identity and contact data

  • name;

  • billing and delivery address;

  • email address;

  • telephone number; and

  • account identifier.

Order and transaction data

  • products and variants ordered;

  • order number;

  • price, tax, discount, and shipping charge;

  • payment status and limited information received from a payment provider;

  • delivery and tracking information;

  • return, refund, complaint, and guarantee information; and

  • communications about the order.

Website and device data

  • IP address;

  • device and browser information;

  • cookie or similar identifier;

  • website events and pages viewed;

  • referral source; and

  • privacy and consent choices.

Customer-service data

  • emails, chats, and other communications;

  • photographs or videos submitted for a claim; and

  • records of how the request was handled.

Marketing and content data

  • newsletter status and marketing consent;

  • communication preferences;

  • interactions with marketing messages;

  • review text and rating;

  • display name; and

  • photographs or videos voluntarily submitted.

Nova Mats does not intentionally request sensitive data such as health, biometric, religious, or political information. Do not send sensitive data unless it is strictly necessary for a specific legal request.

4. Purposes and legal bases

Nova Mats processes personal data only when there is a lawful basis.

Contract

We process data to:

  • accept and process orders and payments;

  • deliver products;

  • send transaction messages;

  • manage returns and refunds;

  • provide customer service; and

  • handle legal guarantee claims.

The legal basis is performance of a contract or steps requested before entering a contract.

Legal obligations

We process data when necessary for:

  • tax and accounting duties;

  • consumer-rights records;

  • product-safety and recall duties;

  • responses to lawful authority requests; and

  • records of privacy choices where required.

The legal basis is compliance with a legal obligation.

Legitimate interests

We may process data for:

  • fraud prevention;

  • store and information security;

  • preventing abuse;

  • basic service improvement; and

  • establishing, exercising, or defending legal claims.

The legal basis is our legitimate interest. We balance this interest against the person’s rights and reasonable expectations.

Consent

We rely on consent when required for:

  • email or SMS marketing;

  • non-essential analytics;

  • advertising or personalisation cookies; and

  • optional customer content.

Consent can be withdrawn at any time. Withdrawing consent does not affect processing that was lawful before withdrawal.

5. Sources of personal data

Nova Mats may receive personal data:

  • directly from the customer or visitor;

  • through Shopify and the store checkout;

  • from payment providers;

  • from fulfilment and delivery providers;

  • from fraud-prevention and security providers;

  • from customer-service systems;

  • from analytics or advertising services after consent where required; and

  • from social platforms when a person communicates through those platforms.

6. Service providers and recipients

Nova Mats may share necessary data with these categories of recipients:

  • Shopify, which provides the commerce platform;

  • the payment provider selected at checkout;

  • fulfilment partners and suppliers that need order data;

  • carriers and delivery providers;

  • customer-service, email, and return tools;

  • accounting, tax, legal, and professional advisers;

  • fraud-prevention and security providers;

  • analytics and advertising providers after consent where required; and

  • public authorities or courts when disclosure is legally required.

We share only data reasonably necessary for the stated purpose. Providers may act as our processors or as independent controllers for their own processing. Their own privacy notices may also apply.

7. International data transfers

Some service providers may process personal data outside the European Economic Area.

When required, Nova Mats uses an approved transfer mechanism. This may be an adequacy decision, standard contractual clauses, or another lawful safeguard.

Email hello@novamats.store to request more information about relevant safeguards.

8. Retention

Nova Mats keeps personal data only as long as necessary for the purpose for which it was collected and for applicable legal, tax, accounting, product-safety, fraud-prevention, dispute, and claim periods.

We use these retention criteria:

  • order, invoice, payment, and tax data is kept for the statutory accounting period;

  • delivery, return, refund, and guarantee data is kept while needed for the order, legal guarantee, disputes, and legal claims;

  • customer-service communications are kept while needed to answer the request and handle related claims;

  • account data is kept while the account remains active and for a limited period after closure where necessary;

  • marketing data is kept until consent is withdrawn or the data is no longer needed;

  • a limited suppression record may be kept to respect an unsubscribe request;

  • cookie choices are kept for the period needed to remember and prove the choice; and

  • safety and recall records may be kept for the period required by product-safety law.

Data may be kept longer for an active dispute, recall, authority investigation, or legal claim.

9. Security

Nova Mats uses appropriate technical and organisational measures designed to protect personal data against accidental or unlawful loss, alteration, access, disclosure, or destruction.

No online system is completely secure. Email hello@novamats.store if you believe an account or personal data has been compromised.

10. Privacy rights

Depending on the circumstances, a person may have the right to:

  • access personal data;

  • correct inaccurate data;

  • request deletion;

  • restrict processing;

  • object to processing based on legitimate interests;

  • receive portable data;

  • withdraw consent;

  • object to direct marketing at any time; and

  • request human review where a solely automated decision has legal or similarly significant effects.

Email hello@novamats.store to exercise a right.

Nova Mats may request information needed to verify identity. We will not request more information than necessary. We normally respond within one month. The period may be extended where the law permits, and we will explain the extension.

Rights may be limited by law. If we cannot fulfil a request, we will explain the reason and available complaint options.

11. Automated processing

Nova Mats does not intend to make decisions based solely on automated processing that produce legal or similarly significant effects for customers.

Fraud and payment tools may automatically produce risk signals. Email hello@novamats.store if you believe an automated process incorrectly affected an order and you want the decision reviewed.

12. Children

The store is not directed to young children. Nova Mats does not knowingly collect personal data from a child who cannot lawfully provide the relevant consent.

Email hello@novamats.store if you believe a child provided personal data unlawfully.

13. Cookies

The Cookie Policy explains cookies and similar technologies. Visitors can change non-essential cookie choices through the cookie settings available on the website.

14. Complaints

Email hello@novamats.store first if you have a privacy concern.

You also have the right to complain to the Dutch Data Protection Authority:

Autoriteit Persoonsgegevens
https://www.autoriteitpersoonsgegevens.nl/

You may also contact the competent data-protection authority in the EU or EEA country where you live, work, or believe an infringement occurred.

15. Changes

Nova Mats may update this Privacy Policy when the store, service providers, processing, or law changes. The current effective date will appear on this page.

Effective date: 13 August 2026