Privacy Policy
Last updated: September 2026
1. Who we are
NOVS ("we", "us", "our") is a Belgian e-commerce brand selling surgical-grade steel jewelry, operated as a sole trader under enterprise/VAT number BE 1027.036.097. Our registered address is Rue des Moissons 57, box 2, 1210 Saint-Josse-ten-Noode, Brussels, Belgium. We are the data controller for all personal data collected through novs.be.
Contact: novsbe@gmail.com
2. Legal basis (GDPR)
We process your personal data on the following legal grounds under Regulation (EU) 2016/679 (GDPR):
- Contract performance: to process and fulfil your orders.
- Legal obligation: to comply with Belgian and EU accounting, tax, and consumer-protection laws.
- Legitimate interest: to improve our services, prevent fraud, and send transactional communications.
- Consent: for marketing emails and non-essential cookies (you may withdraw at any time).
3. What data we collect
- Order data: name, email, shipping/billing address, phone number, order history.
- Payment data: processed exclusively by our payment provider (Stripe); we never store full card numbers.
- Account data: email address, hashed password (if you create an account).
- Browsing data: IP address, browser type, pages visited, referral source: collected via cookies and analytics tools.
- Communication data: messages you send us via email or contact form.
4. How we use your data
- Processing and shipping your orders.
- Sending order confirmations, shipping updates, and return communications.
- Sending marketing emails (only with your consent; unsubscribe link in every email).
- Improving our website and product offering through anonymised analytics.
- Complying with Belgian and EU legal obligations (invoicing, tax records).
- Detecting and preventing fraud or abuse.
5. Who we share data with
We do not sell your personal data. We share it only with:
- Stripe (payment processing): subject to Stripe's own Privacy Policy.
- Shipping carriers (PostNL, Mondial Relay): name and delivery address only.
- Email provider (Brevo): email address and order data for transactional communications, and email address alone for the newsletter (with your explicit consent).
- Analytics provider (Vercel Analytics / Speed Insights): aggregated, anonymised usage data, no tracking cookie; only loaded if you accept non-essential cookies.
- Website hosting (Vercel Inc., USA): under Standard Contractual Clauses.
- API and database hosting (Railway Corporation, USA, for the API; Neon, database hosted within the EU — Frankfurt): under Standard Contractual Clauses for any processing outside the EU.
6. International transfers
Your order, account, and all data in our database are stored on servers located within the European Union (Frankfurt, Germany). Some service providers (Stripe, Vercel, Railway) may process data outside the EEA as part of their services; where this occurs, we ensure appropriate safeguards are in place (Standard Contractual Clauses or an adequacy decision by the European Commission).
7. Retention
- Order data: 10 years (Belgian accounting law).
- Account data: until you delete your account or request erasure.
- Marketing consent: until you withdraw consent.
- Analytics data: 26 months maximum.
8. Your rights
Under GDPR you have the right to:
- Access: request a copy of the data we hold about you.
- Rectification: correct inaccurate data.
- Erasure ("right to be forgotten"): request deletion, subject to legal retention obligations.
- Restriction: ask us to limit how we process your data.
- Portability: receive your data in a structured, machine-readable format.
- Objection: object to processing based on legitimate interest.
- Withdraw consent: at any time where processing is consent-based.
To exercise any of these rights, email us at novsbe@gmail.com. We will respond within 30 days. You also have the right to lodge a complaint with the Belgian Data Protection Authority (dataprotectionauthority.be).
9. Cookies
We use cookies strictly necessary for the site to function (login, cart) and, only with your consent, analytics cookies. See our Cookie Policy for full details.
10. Changes to this policy
We may update this policy. Material changes will be communicated by email or a notice on the website. Continued use of the site after changes constitutes acceptance.
This policy is provided for informational purposes and does not constitute legal advice. For questions specific to your situation, please consult a qualified lawyer in Belgium.