1. Who we are

Novario Supply operates NovarioSupply.com. For the purposes of international data protection laws (including EU/UK GDPR and US state laws), we act as the data controller for the personal information described in this policy.

You can reach us anytime through our contact page.

2. Information we collect

We collect the following categories of information to provide our services globally:

Information you give us

• Name, email address, shipping address, and billing address when you place an order
• Payment details, which are processed securely by PCI-compliant payment providers and are never stored on our servers
• Phone number, if provided for order delivery updates and carrier tracking
• Any communications, inquiries, or product reviews you submit

Information collected automatically

• Device and browser type, operating system, and language settings
• IP address and general geographic location derived from it
• Pages viewed, session duration, referring URL, and link clicks
• Cookie identifiers and pixel analytics data

3. Legal basis & How we use your data

We process your personal information under the following legal bases (including under GDPR Article 6):

• Contract Performance: To process, fulfil, and deliver your orders, send order confirmations, and handle returns.
• Legitimate Interests: To detect and prevent fraud, optimize store navigation, and improve user experience.
• Consent: To send marketing communications, show targeted ads, or set non-essential cookies where required by local law.
• Legal Obligations: To comply with tax, accounting, and anti-fraud regulations worldwide.

4. Cookies and tracking technologies

We use cookies and similar technologies (such as pixels and web beacons) for:

• Essential Cookies. Necessary for basic store functionality, security, and cart retention.
• Analytics Cookies. Helping us understand visitor interactions to improve performance (e.g., Google Analytics).
• Marketing Cookies. Measuring ad performance and showing relevant ads (e.g., Meta Pixel).

You can manage your preferences through our cookie consent banner upon arrival, or block cookies via your browser options.

5. Who we share your information with

We do not sell your personal information. We share data only with essential third-party service providers who assist our global operations:

• Shopify: Hosts our e-commerce platform and manages order database security.
• Payment Gateways: PayPal, Shopify Payments, and card processing networks to execute secure checkout.
• Fulfilment & Carriers: Logistics partners who receive your delivery details to ship your package.
• Advertising & Analytics: Platforms including Meta and Google to analyze performance and run marketing campaigns.

6. Cross-border international transfers

Because we serve customers globally, your information may be transferred to and processed in countries outside your residence (including the United States). For international transfers from the EU/UK, we rely on legally recognized mechanisms such as Standard Contractual Clauses (SCCs) to ensure equivalent protection.

7. Data retention

We retain order and billing records for as long as necessary to fulfil orders and comply with statutory legal/tax obligations (typically up to seven years). Marketing consent records are stored until you unsubscribe or request erasure.

8. Your global privacy rights (EU, UK, Canada & Worldwide)

Regardless of where you reside, you have rights regarding your personal data, including:

• Access & Portability: Request a copy of the personal data we hold about you.
• Correction & Deletion: Ask us to update incorrect data or erase your information ("Right to be Forgotten").
• Restriction & Objection: Object to processing based on legitimate interests or restrict how we use your data.
• Opt-Out: Withdraw marketing consent at any time via the unsubscribe link in emails or by contacting us.
• Lodge a Complaint: File a complaint with your national Data Protection Authority (DPA).

To exercise any rights, message us via our contact page. We respond to all valid requests within 30 days.

9. US State Privacy Rights (California CCPA/CPRA, Virginia, etc.)

If you reside in California or other US states with consumer privacy legislation, you have specific rights to request disclosure, deletion, and to opt out of the "sale" or "sharing" of personal data for cross-context behavioral advertising. We do not sell personal data for monetary payment. You can opt out of targeted ad tracking via our cookie settings or by contacting us.

10. Minors & Children's privacy

Our store is not intended for individuals under 16 years of age. We do not knowingly collect personal information from children. If you believe a minor has submitted personal data to us, please contact us for immediate removal.

11. Data security

All sensitive payment data is encrypted using SSL/TLS technology during transmission. While no internet platform is 100% immune, we implement industry-standard technical and organizational measures to safeguard your personal details.

12. Policy updates

We may update this Privacy Policy periodically to reflect operational, legal, or regulatory changes. Updated versions will be posted immediately with a revised date.

13. Contact details

For questions or privacy requests from any region, reach us via our contact page or email us directly at support@novariosupply.com. We aim to reply the same day.