Privacy Policy
This Privacy Policy explains how Nubova ("we", "us") collects, uses and protects your personal data when you visit our store or place an order. We process data in line with the EU General Data Protection Regulation (GDPR) and the Dutch GDPR Implementation Act (UAVG).
01Who we are
Nubova is the data controller for the personal data processed through this store. Registered with the Dutch Chamber of Commerce (KvK) under number 42076373. You can reach us at hello@nubova.com.
02What we collect
- Order data — name, shipping & billing address, email, phone, and the items, finishes and engraving you select.
- Payment data — handled by our payment provider; we never store full card numbers.
- Account & contact data — anything you send us by email or contact form.
- Technical data — IP address, device and browser type, and pages visited, via cookies and similar technology.
03Why we use it
- To process and deliver your order and provide support (performance of a contract).
- To handle returns, refunds and warranty claims (legal obligation & contract).
- To send you marketing, only with your consent — you can withdraw it any time.
- To improve and secure our store, prevent fraud and meet our legal duties (legitimate interest / legal obligation).
04Sharing
We share data only with processors who help us run the store — payment providers, shipping carriers, our e-commerce platform (Shopify) and email tools — under data-processing agreements. We never sell your data. Some providers may process data outside the EEA under appropriate safeguards (e.g. Standard Contractual Clauses).
05How long we keep it
Order and invoice data is kept for 7 years to meet Dutch tax law. Marketing data is kept until you unsubscribe. Other data is kept only as long as needed for the purpose collected.
06Your rights
Under the GDPR you may request access, rectification, erasure, restriction or portability of your data, and object to processing. To exercise any right, email hello@nubova.com. You also have the right to lodge a complaint with the Dutch Data Protection Authority (Autoriteit Persoonsgegevens).
07Security
We use TLS encryption, access controls and vetted processors to protect your data. No method of transmission is 100% secure, but we take all reasonable measures to keep your data safe.
08Changes
We may update this policy. The "last updated" date above reflects the current version. Material changes will be announced on this page.
- Controller
- Nubova
- KvK
- 42076373
- hello@nubova.com