Privacy Policy

Privacy Policy

Last updated: June 2026

This Privacy Policy explains how NovaDock (“we”, “us”, “our”) collects, uses, and protects your personal data when you visit novadockstore.com or place an order with us. We comply with the EU General Data Protection Regulation (GDPR) and Belgian data protection law.

1. Data Controller

The data controller responsible for your personal data is:

NovaDock
Burgemeester Jean-Louis Thysplein 1/bus 16
1090 Jette, Belgium
Email: eyadghazal357@gmail.com

2. What Personal Data We Collect

We collect the following categories of personal data:

  • Identity data: first name, last name
  • Contact data: email address, shipping address, billing address, phone number
  • Transaction data: details of products purchased, order history, payment method type (not full card numbers)
  • Technical data: IP address, browser type, operating system, pages visited, time and duration of visits (via cookies)
  • Marketing data: your preferences in receiving marketing from us and your communication preferences

3. How We Collect Your Data

We collect data when you:

  • Place an order or create an account on our website
  • Subscribe to our newsletter
  • Contact us via email or our contact form
  • Browse our website (via cookies and analytics tools, only after your consent)

4. Legal Basis for Processing

Purpose Legal Basis
Processing and fulfilling your order Performance of a contract (Art. 6(1)(b) GDPR)
Fraud prevention and security Legitimate interests (Art. 6(1)(f) GDPR)
Sending order confirmation and service emails Performance of a contract (Art. 6(1)(b) GDPR)
Sending marketing emails (newsletters) Your consent (Art. 6(1)(a) GDPR)
Analytics and website improvement Your consent (Art. 6(1)(a) GDPR)
Complying with legal obligations (tax, accounting) Legal obligation (Art. 6(1)(c) GDPR)

5. Who We Share Your Data With

We share your data with the following third parties, all of whom are bound by their own privacy policies and data processing agreements:

  • Shopify Inc. (e-commerce platform) — processes order data, payments, and stores customer data on servers in the US/EU. See Shopify Privacy Policy.
  • Payment processors (Stripe, PayPal, Mollie, etc.) — process payment data. Card details are handled directly by the payment processor; we do not store full card numbers.
  • Shipping and logistics providers (PostNL, DPD, DHL, etc.) — receive your name and delivery address to fulfil your order.
  • Email marketing tools (if applicable, e.g. Klaviyo) — only if you have consented to marketing emails.
  • Analytics providers (e.g. Google Analytics, Meta Pixel) — only after you have given cookie consent.

We do not sell your personal data to any third party.

6. International Data Transfers

Some of our third-party service providers are based outside the European Economic Area (EEA). Transfers to the US are made under Standard Contractual Clauses (SCCs) approved by the European Commission or equivalent safeguards.

7. Data Retention Periods

  • Order and transaction data: retained for 7 years to comply with Belgian tax and accounting obligations.
  • Customer account data: retained for as long as your account is active, and up to 3 years after your last purchase.
  • Marketing consent records: retained until you withdraw consent or 3 years after last engagement.
  • Cookie and analytics data: retained for up to 13 months (depending on the tool).

8. Your Rights Under GDPR

As a data subject in the EU, you have the following rights:

  • Right of access — you can request a copy of the personal data we hold about you.
  • Right to rectification — you can ask us to correct inaccurate or incomplete data.
  • Right to erasure (“right to be forgotten”) — you can ask us to delete your data, subject to legal retention obligations.
  • Right to restriction of processing — you can ask us to restrict how we use your data in certain circumstances.
  • Right to data portability — you can ask for your data in a structured, machine-readable format.
  • Right to object — you can object to processing based on legitimate interests or for direct marketing purposes.
  • Right to withdraw consent — where processing is based on consent, you can withdraw it at any time without affecting the lawfulness of prior processing.

To exercise any of these rights, contact us at eyadghazal357@gmail.com. We will respond within 30 days.

9. Right to Complain

If you believe we have not handled your data lawfully, you have the right to lodge a complaint with the Belgian Data Protection Authority:

Gegevensbeschermingsautoriteit (GBA) / Autorité de protection des données (APD)
Rue de la Presse 35, 1000 Brussels, Belgium
Website: www.dataprotectionauthority.be

10. Cookies

We use cookies and similar tracking technologies. When you first visit our website, we display a cookie consent banner. Non-essential cookies (analytics, marketing) are only placed after you have given your explicit consent. You can withdraw or manage your consent at any time by clicking the “Cookie Settings” link in our website footer.

For full details on which cookies we use, see our Cookie Policy.

11. Changes to This Policy

We may update this Privacy Policy from time to time. The date at the top of this page indicates when it was last revised. If we make material changes, we will notify you by email or by a prominent notice on our website.