Privacy Policy
NovaPeptide respects your privacy and processes personal data in accordance with the General Data Protection Regulation (GDPR). Last updated: May 2026.
1. Data Controller
Nova Labs, established in the Netherlands, is the controller of personal data as described in this privacy policy. Contact: info@novalabs-peptides.nl
2. What Data We Collect
We collect the following personal data: name and email address (when contacting us or subscribing to the newsletter), delivery address and order information (when placing an order), payment confirmation from BTCPay Server (no payment details are stored by us), and technical data such as IP address and browser type (for security and fraud prevention).
3. Purpose of Processing
We process personal data for processing and delivering orders, responding to enquiries and customer service, sending the newsletter (only with consent), complying with legal obligations, and improving our website.
4. Legal Basis
We process personal data on the basis of: performance of a contract (orders), consent (newsletter), legal obligation (tax and record-keeping requirements), and legitimate interest (fraud prevention and website security).
5. Retention Periods
We retain order data for 7 years in accordance with Dutch record-keeping obligations. Newsletter data is retained until you unsubscribe. Technical log files are retained for a maximum of 90 days.
6. Sharing with Third Parties
We share personal data only with: PostNL (for shipping), BTCPay Server (for payment processing — no personal data is shared), and government authorities where legally required. We never sell or rent personal data to third parties.
7. Your Rights
Under the GDPR you have the right to access, rectification, erasure, restriction of processing, data portability, and objection. Send a request to info@novalabs-peptides.nl. We will respond within 30 days. You may also file a complaint with the Dutch Data Protection Authority (autoriteitpersoonsgegevens.nl).
8. Cookies
We use only functional cookies that are necessary for the operation of the website (language preference, session management). No tracking or advertising cookies are placed without your consent.
9. Security
We take appropriate technical and organisational measures to protect personal data, including HTTPS encryption, access controls, and regular security reviews.
10. Changes
We may update this privacy policy from time to time. Changes will be published on this page with the date of the last update noted.