Privacy policy

Valid from 11 October 2026.

Controller

BY Spets OÜ (online store novaé)
Registry code 12416214 · VAT no. EE101951139
Soolahe tee 45, 13516 Tallinn, Estonia
E-mail: info@novae.ee

What data we process

• name, e-mail and phone number;
• delivery address or selected parcel locker;
• order contents, order history and payment status (we do not see card or bank data);
• account login details if you register;
• your messages to us;
• technical data needed for the site to work (IP address, necessary cookies).

Why and on what legal basis

• to process and deliver your order and handle returns – performance of a contract (GDPR Art. 6(1)(b));
• accounting and tax obligations – legal obligation (Art. 6(1)(c));
• customer service, site security and fraud prevention – legitimate interest (Art. 6(1)(f));
• newsletters and offers – only with your consent (Art. 6(1)(a)), which you can withdraw at any time.

Who receives the data

Only partners needed to fulfil your order: the payment and shipping service provider Montonio, carriers (Omniva, DPD, SmartPosti, Unisend), our hosting provider (Oracle Cloud Infrastructure, servers in the EU – Stockholm, Sweden), our e-mail service provider and accountant, and authorities where required by law. We never sell your data. Data is stored in the EU; if a provider transfers data outside the EEA, it is done with appropriate safeguards (e.g. EU standard contractual clauses).

How long we keep data

Order and accounting documents – 7 years (Estonian Accounting Act). Account data – until you delete your account. Basket and session data – up to 48 hours. Marketing consent – until withdrawn.

Your rights

You have the right to access, rectify and erase your data, to restrict or object to processing, to data portability and to withdraw consent. Write to info@novae.ee – we reply within one month. You may also lodge a complaint with the Estonian Data Protection Inspectorate (aki.ee) or the data protection authority of your country.

Cookies

Necessary cookies (always on): basket and session (woocommerce_cart_hash, woocommerce_items_in_cart, wp_woocommerce_session_*), language choice (pll_language, nv_lang), login and your cookie choice (nv_consent). Our payment provider Montonio may set a technical cookie (montonio_tz).

We count visits with Koko Analytics, which works without cookies and does not collect personal data.

Statistics (only with your consent): Google Analytics (_ga, _ga_*), Microsoft Clarity (_clck, _clsk) and the WooCommerce order source (sbjs_*) help us understand which products you like and improve the store.

Marketing (only with your consent): Meta Pixel (_fbp) lets us show you novaé offers on Instagram and Facebook and measure our ads. These services may process data outside the EU.

Cookies are stored for up to 2 years (your cookie choice for 6 months). You can change or withdraw your consent at any time via “Cookie settings” at the bottom of every page.