Privacy
Policy.

NOVA LABS GROUP may collect the following categories of information when you interact with our website, communications, services, or commercial engagements:

- Contact information you provide directly through email, WhatsApp, forms, or meetings (name, email, phone, company, and project-related details).

- Technical and analytics information generated as you use this website (device type, browser, IP address, referring source, approximate location, pageviews, timestamps, and interaction events).

- Information provided in the course of a commercial engagement (scope documents, correspondence, meetings, billing, and contact information).

We do not sell personal information and we do not operate an advertising-based business model on this website.

Information is used strictly for the following purposes:

- Responding to inquiries, preparing proposals, and conducting agreed client engagements.

- Operating, maintaining, and improving this website and the services we deliver.

- Internal record-keeping, billing, accounting, and legal/contractual obligations.

- Sending service-related communications that are necessary to an active relationship.

- Security, abuse prevention, and compliance with applicable laws and regulation.

We will not send marketing material without an explicit opt-in or an existing business relationship where it is relevant and expected.

Where the European GDPR, UK GDPR, or similar regulation applies, our processing is performed on one or more of the following grounds:

- Consent, where you have opted in to specific processing.

- Performance of a contract or pre-contractual steps at your request.

- Legitimate interests pursued by NOVA LABS GROUP, such as operating our website securely, improving our services, and communicating appropriately with existing commercial contacts.

- Compliance with a legal or regulatory obligation to which NOVA LABS GROUP is subject.

You may contact us at any time to request details about a specific processing operation and its legal basis.

This website uses a limited set of cookies and browser storage. The categories are:

- Essential / strictly necessary cookies required for the website, routing, and security to function.

- Analytics cookies, subject to consent where required, that help us understand how the website is used and where improvements are needed.

- Preference cookies that remember settings such as privacy or accessibility choices.

You can control cookies at any time through your browser settings. Our separate Cookie Policy provides more detail and the mechanism to manage preferences.

We retain personal information only for as long as the purpose for which it was collected requires.

- Inquiries and leads: retained for a reasonable period while a commercial conversation remains active, then removed or anonymized unless a follow-up engagement is agreed.

- Client engagements: retained for the duration of the engagement plus any retention period required by law, tax, audit, or contract.

- Analytics data: retained in aggregate or pseudonymized form for ongoing product improvement.

Security, encrypted storage, role-based access, and least-privilege principles are applied to all retained information.

Subject to applicable law, you may have the right to:

- Access personal information we hold about you.

- Request correction of inaccurate or incomplete data.

- Request erasure of information, subject to legitimate retention grounds.

- Restrict or object to processing under certain conditions.

- Receive a portable copy of information you provided.

- Withdraw consent where processing was based on consent (without affecting prior lawful processing).

- Lodge a complaint with a competent supervisory authority.

To exercise any of these rights, contact us using the information in Section 10. We respond within a reasonable timeframe and document the outcome.

We may share information with carefully selected service providers that help us operate our business, including hosting, analytics, communications, and professional services. Each processor is subject to contractual obligations covering confidentiality, security, lawful processing, and return or destruction of data on termination.

We do not transfer personal information to third parties for their own independent marketing purposes.

Services used to operate our website and deliver engagements may process data outside of your jurisdiction, including the European Union, United Kingdom, United States, and regions used by our cloud infrastructure providers. Where required by law, transfers are made under an adequacy decision or through appropriate safeguards including standard contractual clauses, technical controls, and documented data protection impact assessments where appropriate.

Appropriate organizational, technical, and administrative safeguards are used to protect information against unauthorized access, disclosure, alteration, or destruction. Controls include, where appropriate, encryption in transit and at rest, secure authentication, role-based access, auditing, vulnerability management, and regular internal review.

No internet-based system can be guaranteed to be 100% secure, but NOVA LABS GROUP treats security as a continuous engineering responsibility.

Questions, requests, or complaints regarding privacy and the handling of personal data may be addressed to the NOVA LABS GROUP data governance contact at the email below. Provide sufficient detail for us to identify the relevant records and verify the requestor identity where appropriate.

Primary privacy contact: info@novalabsgroup.art

Subject line reference: "Privacy — [your topic]".

This Privacy Policy may be updated from time to time to reflect changes in law, products, process, or the organizational setup. Material changes will be indicated by a revised "Last Updated" date at the top of this page and, where appropriate, by a notice on the website or direct communication to clients with active engagements.