Privacy policy
Updated 22 September 2026
We use information to answer enquiries, fulfil orders and operate this website.
Data controller
Nova Wellness OÜ, registry code 17312910, Nõlvaku tn 15-5, Tartu, 50708, Estonia. For privacy questions or rights requests, contact kasparborder@atomicmail.io.
Information we use
When you email us, we receive your email address, name and information you voluntarily include. An order may require contact, billing and delivery addresses, company details, selected products and payment transaction information. Please do not send medical information or card numbers. The hosting provider may process IP addresses, technical browser information and security logs.
Purposes and legal bases
Answering enquiries and fulfilling orders relies on steps requested before a contract or performance of a contract (GDPR Article 6(1)(b)). Accounting and other mandatory processing relies on legal obligations (Article 6(1)(c)). Limited processing for security and legal claims relies on legitimate interests (Article 6(1)(f)), balanced against your rights. An enquiry does not subscribe you to marketing.
Email enquiries and service providers
An enquiry button prepares a message in your device’s email application. The website itself does not send or store that message. We receive it only after you send it. Email and hosting providers, an appointed carrier, accounting providers and lawfully authorised bodies may process data where necessary. We do not sell personal data. Appropriate data protection arrangements are used with service providers; processing outside the EEA requires a valid transfer basis and appropriate safeguards.
Retention
Enquiries that do not result in a purchase are normally retained for up to 12 months after the last substantive contact, unless needed longer for an open issue or claim. Contract and billing information is kept for the period required by applicable law and, where necessary, for legal claims. Technical logs are kept as needed for security and service operation. The session storage record ends when the browser tab or session ends.
Your rights
You may request access, correction, erasure, restriction and, where applicable, portability of your data. You can object to processing based on legitimate interests. Where consent is used, you may withdraw it for future processing. We normally respond within one month. Contact kasparborder@atomicmail.io. You may complain to the Estonian Data Protection Inspectorate or your local supervisory authority.
Tracking and changes
The website has no advertising pixels, analytics or social tracking embeds. Only the session storage described below is used. If new purposes or consent-based services are introduced, we will update this information and obtain prior consent where required.