Privacy Policy

1. Data Controller

Novara operates as the controller of personal data processed in connection with the Services. Details of the legal entity and contact information will be provided in your account documentation and on our website.

If you have questions about this Privacy Policy or our data practices, you can contact us at: privacy@novaraint.com

2. Scope

This Privacy Policy applies to:

• (a) Users who register for or access the Platform as Buyers, Manufacturers, Logistics Providers, or their representatives;
• (b) visitors to our websites under the novaraint.com domain and related subdomains;
• (c) recipients of our emails or other communications related to the Services.

This Privacy Policy does not apply to the processing of personal data by third parties, such as Escrow Services, payment providers, or logistics companies, which are subject to their own privacy policies.

3. Personal Data We Collect

We may collect the following categories of personal data:

3.1 Account and Profile Data

• Name and contact details (e.g., email address, phone number)
• Job title and role
• Company name, address, and tax or registration information
• Login credentials and authentication data

3.2 Transaction and Business Data

• Information about Requests for Quote (RFQs), orders, and shipments
• Business preferences, product specifications, and requirements
• Communications and attachments exchanged through the Platform

3.3 Technical and Usage Data

• IP address and approximate location
• Browser type and settings, device identifiers
• Dates, times, and duration of access
• Pages and features accessed, clickstream data, and usage patterns

3.4 Communication Data

• Messages and inquiries sent to us
• Support tickets and notes from our interactions
• Marketing preferences and opt-in or opt-out records

3.5 Data from Third Parties

• Information from business directories, trade shows, or referrals
• Data from payment processors or Escrow Services relating to completed or attempted Transactions
• Data from analytics providers or advertising partners

4. Legal Bases for Processing (GDPR)

Where the EU or UK General Data Protection Regulation ("GDPR") applies, we process personal data on the following legal bases:

• (a) Performance of a contract: to provide and manage the Services, including enabling RFQs, messaging, and Transactions.
• (b) Legitimate interests: to secure and improve the Platform, prevent fraud, analyze usage, and grow our business in a way that does not override your fundamental rights and freedoms.
• (c) Consent: for certain marketing communications, cookies, and similar technologies, where required by law.
• (d) Legal obligations: to comply with applicable laws, regulations, and requests from competent authorities.

5. How We Use Personal Data

We use personal data for the following purposes:

5.1 Providing and Operating the Services

• Creating and managing User accounts and profiles
• Enabling catalog browsing, RFQs, and communication between Buyers and Manufacturers
• Managing onboarding, settings, and preferences

5.2 Facilitating Transactions

• Matching Buyers with suitable Manufacturers and Logistics Providers
• Providing information to Escrow Services and payment processors as necessary to initiate or complete payments
• Coordinating shipment and logistics data for status updates and analytics

5.3 Communication

• Responding to inquiries and support requests
• Sending transactional emails (e.g., account confirmations, password resets, RFQ updates)
• Sending service-related announcements, such as changes to terms or policies

5.4 Improving and Securing the Platform

• Monitoring usage and performance
• Detecting and preventing fraud, abuse, and security incidents
• Developing new features and improving user experience

6. Your Rights

Depending on your location and applicable law, you may have the following rights regarding your personal data:

• Right to access your personal data
• Right to rectification of inaccurate data
• Right to erasure ("right to be forgotten")
• Right to restrict processing
• Right to data portability
• Right to object to processing
• Right to withdraw consent

To exercise your rights, please contact us at privacy@novaraint.com.

7. Data Retention

We retain personal data for as long as necessary to fulfill the purposes for which it was collected, including to satisfy any legal, accounting, or reporting requirements. When personal data is no longer required, we will securely delete or anonymize it.

8. International Transfers

Your personal data may be transferred to and processed in countries other than your country of residence. When we transfer personal data internationally, we implement appropriate safeguards in accordance with applicable data protection laws, such as Standard Contractual Clauses approved by the European Commission.

9. Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, technologies, or legal requirements. When we do, we will revise the "Last updated" date and, where appropriate, provide additional notice.

10. Contact Us

For privacy-related inquiries, please contact us at: