Privacy Statement – Novi8 Water B.V.

Version: 1.1
Date: January 19, 2026

Novi8 Water B.V. (“Novi8 Water”, “we”) respects your privacy. In this privacy statement, we explain which personal data we process, why we do it, with whom we share it, and what your rights are.

1. Who is responsible?

Novi8 Water B.V.
Jameswattstraat 8, 1817 DC Alkmaar
085-4441884
info@novi8water.com
KvK: 96443855
VAT: NL867613592B01

2. Which personal data do we process?

We process the following data (depending on your use):

A. When ordering via the webshop (WooCommerce)

• Name

• Invoice and delivery address

• Email address

• Phone number (e.g., for delivery)

• Order details (products, quantities, prices, date)

• Any comments with order

B. Payments (via Mollie)

• Payment status, transaction ID, and payment method

• Possible refund information
  (Please note: we generally do not receive complete payment card details; payment is processed via Mollie.)

C. Delivery

• Name, delivery address, and (if necessary) telephone number for delivery
  Delivery service: Stad Alkmaar (delivery service)

D. Contact

• Name (if provided), email/phone

• Content of your message and our correspondence

E. Newsletter and email marketing (Klaviyo)

• Name (if provided)

• Email address

• Interactions (e.g., opens/clicks), preferences

• Possible purchase/browse events if you give permission for this via cookies/marketing settings

F. Website use (cookies/pixels)

• IP address (where possible anonymized/shortened)

• Device, browser, and session data

• Visit and click behavior

• Origin of visit (referrer)

• Interactions with advertisements/retargeting (via Meta Pixel and TikTok Pixel)

3. What do we use your data for?

We process personal data for:

1. Execution of the agreement

• Processing, confirming, and delivering orders

• Customer service about your order

2. Payments and administration

• Processing payments via Mollie

• Invoicing and accounting

3. Delivery

• Transfer of necessary data to Stad Alkmaar for delivery

4. Customer service and complaint handling

• Answering questions and resolving complaints

5. Legal obligations

• For example, fiscal retention obligation

6. Website improvement and statistics

• Analysis of website use (e.g., via Google Analytics) to improve our site

7. Marketing (only if permitted)

• Newsletters and campaigns via Klaviyo

• Retargeting/advertisement measurement via Meta Pixel and TikTok Pixel
  (We only place marketing cookies/pixels with permission where this is legally required.)

4. On what grounds do we process data?

We process data based on:

• Execution of agreement (order, delivery, service)

• Legal obligation (including tax legislation)

• Legitimate interest (security, basic statistics/improvement where permitted, limited communication with existing customers within the rules)

• Consent (newsletter, marketing cookies/pixels, and certain tracking/advertising functions)

5. With whom do we share data?

We only share your data with parties that are necessary for our services:

• WooCommerce/WordPress (webshop platform): processing of orders and account/checkout functionality

• Mollie (payment service provider): handling of payments and refunds

• Stad Alkmaar (delivery service): delivery to address

• Google Analytics: statistics and improvement of website (settings depend on cookie consent)

• Meta (Meta Pixel): advertisement measurement/retargeting (with consent)

• TikTok (TikTok Pixel): advertisement measurement/retargeting (with consent)

• Klaviyo: newsletter, email marketing and (if activated) automated flows (e.g., abandoned shopping cart)

In addition, we may share data with:

• Hosting/IT service providers (website, email, security)

• Administration/accountant (invoicing and fiscal administration)

Where parties process on our behalf, we conclude processor agreements where necessary.

6. Transfer outside the EEA

Some parties (such as Google, Meta, TikTok, and Klaviyo) may process data outside the EEA, for example in the US. In that case, we ensure appropriate safeguards, such as EU Standard Contractual Clauses (SCC’s) and any additional measures.

7. Retention periods

We do not store personal data longer than necessary:

• Order and invoice data: 7 years (fiscal retention obligation)

• Customer service/correspondence: generally max. 2 years after handling (longer in case of dispute)

• Newsletter data (Klaviyo): until you unsubscribe; after that, data is deleted or placed on a block list to prevent you from being emailed unsolicited again

• Analytics/marketing data: according to cookie/tool settings and retention periods of the cookies used (see cookie settings/cookie policy)

8. Cookies, pixels, and your choices

We use:

• Necessary cookies: for the functioning of the webshop (shopping cart, logging in, security)

• Statistical cookies (Google Analytics): to measure and improve use

• Marketing cookies/pixels (Meta Pixel, TikTok Pixel, possibly Klaviyo tracking): for advertisements, retargeting, and measurement

You can manage cookies via the cookie banner/cookie settings on our website and via your browser settings. Withdrawing consent does not have retroactive effect but prevents further placement/use.

9. Security

We take appropriate measures such as SSL/TLS, access restrictions, and where possible 2FA, logging, and security updates to limit misuse, loss, and unauthorized access.

10. Your rights

You have the right to:

• Access

• Correction

• Deletion (where possible)

• Restriction of processing

• Data portability

• Objection (to processing based on legitimate interest)

• Withdraw consent (for processing based on consent)

You can submit requests via info@novi8water.com. We may ask you to confirm your identity. We usually respond within 1 week.

11. Complaints

You can submit a complaint to us via info@novi8water.com. You also have the right to submit a complaint to the Dutch Data Protection Authority.

12. Changes

We may amend this privacy statement. The most current version is on our website with the date at the top.