NovaMind Studio OÜ
Effective Date: 24.02.2026
1. Data Controller
NovaMind Studio OÜ acts as the Data Controller under the GDPR (Registry Code: [insert registry code / указать рег. код], Registered Address: [insert registered address, Estonia / указать юр. адрес, Эстония]). Contact: support@novamindstudio.com.
2. Data We May Process
Depending on how you use our website and services, we may process:
- name and email;
- country/region of residence;
- information voluntarily submitted to prepare a personalised service (e.g., date/time/place of birth and other inputs);
- technical data (IP address, device/browser details, language, cookies);
- limited transaction confirmation data from our payment provider (status, amount, transaction ID).
We do not collect or store full card details. Payments are processed by an authorised third-party provider.
3. Purposes
- to prepare and deliver services;
- to communicate regarding orders and support;
- to process payments and maintain records;
- to secure transactions, prevent fraud and manage unjustified disputes;
- to comply with legal obligations.
4. Legal Bases (GDPR)
We process personal data on the basis of:
- contract performance (Art. 6(1)(b) GDPR);
- legal obligations (Art. 6(1)(c) GDPR);
- legitimate interests (Art. 6(1)(f) GDPR) — security, fraud prevention, dispute handling;
- consent (Art. 6(1)(a) GDPR) — for non-essential cookies or optional communications, where applicable.
5. Sharing
We may share limited data with:
- payment service providers (payment processing and confirmation);
- IT providers (hosting, email, infrastructure);
- public authorities where required by law.
We share only what is necessary and use contractual safeguards (e.g., DPAs) with suppliers.
6. International Transfers
If any supplier processes data outside the EU/EEA, we apply GDPR safeguards such as Standard Contractual Clauses (SCCs) or other lawful mechanisms.
7. Retention
We retain data only as long as necessary for the purposes above, including:
- service delivery and support;
- accounting requirements (typically up to 7 years, where applicable);
- a reasonable period for dispute and chargeback handling.
8. Your Rights
You have the right to request access, rectification, erasure (where applicable), restriction, and to withdraw consent where processing relies on consent.
Contact: support@novamindstudio.com.
You may lodge a complaint with the Estonian Data Protection Inspectorate (Andmekaitse Inspektsioon): www.aki.ee.
9. Security
We apply appropriate technical and organisational measures to protect personal data, including secure connections and access controls.
10. Cookies
We may use essential cookies (to run the website) and analytical cookies (to improve user experience). You can manage cookies via your browser settings; where applicable, the website may use a consent banner/settings.
11. Updates
We may update this Policy. The current version is published on the website and applies from its effective date.