Privacy Policy

Introduction

nanonovaex AS ("we", "our", or "us") is committed to protecting your privacy and personal data. This Privacy Policy explains how we collect, use, process, and safeguard your information when you visit our website nanonovaex.world or use our spa analytics services. We are the data controller for the purposes of applicable data protection laws, including the General Data Protection Regulation (GDPR).

Data Collection

We collect information that you provide directly to us and information that is automatically collected when you use our services. The data we collect includes personal information such as your name, email address, phone number, company details, and any other information you choose to provide when contacting us or using our analytics platform. We may also collect technical information about your device and how you interact with our website, including IP address, browser type, operating system, and usage patterns.

How We Use Your Information

We use the information we collect to provide, maintain, and improve our spa analytics services, respond to your enquiries and provide customer support, send you technical notices and administrative messages, communicate with you about our services and industry updates, analyse usage patterns to enhance our platform functionality, and ensure the security and integrity of our services. The use of your data is based on legitimate business interests, contractual necessity, and your consent where required by law.

Cookies and Tracking Technologies

We may use cookies and tracking technologies for analytics, advertising, and remarketing purposes, including Google Ads. These technologies help us measure campaign effectiveness, deliver relevant advertisements, and improve our services. You can manage your cookie preferences at any time through our cookie consent banner. For detailed information about our cookie usage, please refer to our Cookie Policy.

Data Sharing and Disclosure

We do not sell, rent, or trade your personal information to third parties. We may share your information with trusted service providers who assist us in operating our business, such as hosting providers, analytics services, and communication tools. These providers are contractually obligated to protect your information and use it only for the purposes we specify. We may also disclose your information if required by law or to protect our rights and the safety of others.

Data Retention

We retain your personal information for as long as necessary to fulfil the purposes outlined in this Privacy Policy, comply with legal obligations, resolve disputes, and enforce our agreements. Contact form submissions are typically retained for two years, whilst account and service data may be retained for the duration of your relationship with us plus additional periods as required by law. You may request deletion of your data at any time, subject to legal and contractual obligations.

Your Rights

Under GDPR and applicable data protection laws, you have several rights regarding your personal data, including the right to access, rectify, erase, restrict processing, object to processing, and data portability. You also have the right to withdraw consent where processing is based on consent. To exercise these rights or if you have questions about our data processing, please contact us using the information provided below. You also have the right to lodge a complaint with a supervisory authority if you believe your data protection rights have been violated.

International Data Transfers

As we operate within the European Union, your personal data is primarily processed within the EU. If we transfer data outside the EU, we ensure appropriate safeguards are in place, such as adequacy decisions, Standard Contractual Clauses, or other legally recognised transfer mechanisms to protect your information.

Security Measures

We implement appropriate technical and organisational measures to protect your personal information against unauthorised access, alteration, disclosure, or destruction. These measures include encryption, access controls, regular security assessments, and staff training on data protection principles.

Children's Privacy

Our services are not intended for children under 16 years of age. We do not knowingly collect personal information from children under 16. If you are a parent or guardian and believe your child has provided us with personal information, please contact us immediately.

Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices or applicable laws. We will notify you of any material changes by posting the updated policy on our website and updating the "Last updated" date. Your continued use of our services after such changes constitutes acceptance of the updated policy.

Contact Information

If you have any questions about this Privacy Policy or our data processing practices, please contact us at: