Privacy policy

HeavenlyNova: Privacy Policy

 

Last updated: October 2, 2025

HeavenlyNova operates this store and website, including all related information, content, features, tools, products, and services, in order to provide you, the customer, with a curated shopping experience (the "Services"). HeavenlyNova is powered by Shopify, which enables us to provide the Services to you. This Privacy Policy describes how we collect, use, and disclose your personal information when you visit, use, or make a purchase or other transaction using the Services or otherwise communicate with us.

If there is a conflict between our Terms of Service and this Privacy Policy, this Privacy Policy controls with respect to the collection, processing, and disclosure of your personal information.

Please read this Privacy Policy carefully. By using and accessing any of the Services, you acknowledge that you have read this Privacy Policy and understand the collection, use, and disclosure of your information as described in this Privacy Policy.

 

1. Data Controller Information

 

For the purpose of applicable data protection laws, including the General Data Protection Regulation (GDPR) (EU) 2016/679, we are the Data Controller of your Personal Information.


Data Controller (Legal Name) Sabie Tudor PFA (trading as HeavenlyNova)
Registered Address Manicesti 191,117065 Baiculesti, Arges
Contact Email support@heavenlynova.com
Data Protection Authority National Supervisory Authority for Personal Data Processing (ANSPDCP)

 

2. Personal Information We Collect or Process

 

When we use the term "personal information," we are referring to information that identifies or can reasonably be linked to you or another person. We may collect or process the following categories of personal information, depending on how you interact with the Services:

  • Contact details: Name, address, billing address, shipping address, phone number, and email address.

  • Financial information: Credit card/debit card details (handled securely by payment processors), financial account information, transaction details.

  • Account information: Username, preferences, and settings.

  • Transaction information: Items you view, purchase, return, exchange, or cancel.

  • Communications with us: Information included in customer support inquiries.

  • Device and Usage information: Information about your device, browser, IP address, and how and when you interact with or navigate the Services (through cookies and similar technologies).

 

3. How We Use Your Personal Information (Legal Basis)

 

We process your personal data based on the legal grounds defined in the GDPR. Depending on the purpose, the legal basis will be one of the following:

Purpose of Use Legal Basis (GDPR Article 6)
Provide, Tailor, and Improve the Services (Processing orders, shipping, payment, account management, returns, and support) Execution of a Contract (Art. 6(1)(b)) between you and HeavenlyNova.
Marketing and Advertising (Sending promotions, newsletters, and targeted advertising) Consent (Art. 6(1)(a)), which you provide by subscribing, or Legitimate Interest for existing customers.
Security and Fraud Prevention (Authenticating accounts, securing the payment experience) Legitimate Interest (Art. 6(1)(f)) to protect our business, services, and customers.
Communicating with You (Customer support and non-promotional order updates) Execution of a Contract or Legitimate Interest to maintain a business relationship.
Legal Reasons (Complying with applicable law, responding to legal processes, auditing, tax, or accounting requirements) Legal Obligation (Art. 6(1)(c)).

 

4. How We Disclose Personal Information

 

In certain circumstances, we may disclose your personal information to third parties for the purposes set out above. Such disclosures are made primarily to:

  • Shopify Inc.: To provide and improve our e-commerce platform.

  • Vendors and other third parties who perform services on our behalf: (e.g., IT management, payment processing, data analytics, customer support, cloud storage, fulfillment, and shipping carriers).

  • Business and Marketing Partners: To advertise to you and provide marketing services.

  • Legal Compliance: To comply with any applicable legal obligations, enforce our policies, or protect our rights and the rights of our users.

 

5. Relationship with Shopify (International Transfers)

 

The Services are hosted by Shopify Inc., a company based in Canada, meaning your Personal Data may be processed and stored in the United States and/or Canada.

When your personal information is transferred out of the European Economic Area (EEA) or the United Kingdom, we ensure a similar degree of protection is afforded to it by relying on recognized transfer mechanisms:

  • Standard Contractual Clauses (SCCs): Contractual safeguards approved by the European Commission, which obligate recipients to protect your Personal Data.

To learn more about how Shopify uses your personal information and any rights you may have, you can visit the Shopify Consumer Privacy Policy.

 

6. Security and Retention of Your Information

 

Please be aware that no security measures are perfect or impenetrable, and we cannot guarantee "perfect security."

We retain your personal information for as long as necessary to fulfill the purposes outlined in this Privacy Policy, usually for the duration of the contractual relationship and for a period thereafter required by law (e.g., tax and accounting requirements, typically 5 to 10 years in Romania).

 

7. Your Rights and Choices (GDPR)

 

As a data subject in the European Economic Area (EEA), you have the following rights regarding your Personal Information. You may exercise any of these rights by contacting us at support@heavenlynova.com.

  1. Right of Access: The right to request copies of your Personal Data.

  2. Right to Rectification: The right to request that we correct inaccurate or incomplete information.

  3. Right to Erasure ('Right to be Forgotten'): The right to request that we delete your Personal Data, under certain circumstances.

  4. Right to Restriction of Processing: The right to request that we limit the processing of your Personal Data.

  5. Right to Object to Processing: The right to object to our processing, especially for direct marketing purposes.

  6. Right to Data Portability: The right to receive a copy of your Personal Data in a structured, commonly used, and machine-readable format.

  7. Right to Withdraw Consent: Where we rely on consent (e.g., for newsletters), you have the right to withdraw that consent at any time.

 

8. Complaints and Supervisory Authority

 

If you have complaints about how we process your personal information, please contact us first using the details below.

You also have the right to lodge a complaint with your local data protection supervisory authority. For Romania, the competent authority is:

National Supervisory Authority for Personal Data Processing (ANSPDCP)

  • Address: B-dul G-ral. Gheorghe Magheru 28-30, Sector 1, postal code 010336, Bucharest, Romania

  • Email: anspdcp@dataprotection.ro

You can also find a list of all competent EU data protection supervisory authorities here: https://edpb.europa.eu/about-edpb/board/members_en.

9. Contact

 

Should you have any questions about our privacy practices or this Privacy Policy, or if you would like to exercise any of the rights available to you, please contact us:

Email: support@heavenlynova.com

Address for Correspondence: Str Manicesti 191, 117065 Baiculesti, Arges.