Privacy Policy

Introduction

stellahubnovae Ltd ("we", "our", or "us") is committed to protecting and respecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit our website stellahubnovae.top, use our services, or interact with us in any way.

This policy applies to all personal data we collect about you, whether you are a client, prospective client, website visitor, or any other individual whose personal data we process in connection with our business activities.

Data Controller Information

stellahubnovae Ltd is the data controller responsible for your personal data. Our contact details are:

• Company: stellahubnovae Ltd
• Registration Number: C93284
• Address: Triq San Pawl 58, Sliema SLM 1839, Malta
• Email: privacy@stellahubnovae.top
• Phone: +356 21657305

Data We Collect

We collect and process various types of personal data depending on how you interact with our services. The data we collect includes:

Information You Provide Directly

• Contact Information: Name, email address, phone number, business address
• Business Information: Company name, business type, industry, role/position
• Communication Data: Messages, enquiries, and correspondence you send to us
• Service Information: Details about your fitness business, goals, challenges, and requirements
• Account Information: Login credentials and account preferences if you create an account

Information We Collect Automatically

• Website Usage Data: Pages visited, time spent, click patterns, referring websites
• Technical Information: IP address, browser type, device information, operating system
• Cookie Data: Information collected through cookies and similar tracking technologies
• Analytics Data: Website performance metrics and user interaction statistics

How We Use Your Information

We use of your data is based on legitimate business interests, contractual necessity, legal obligations, and your consent where required. Specifically, we use your information to:

Service Provision

• Provide analytics consulting and optimisation services
• Respond to your enquiries and communication
• Deliver requested information about our services
• Manage client relationships and project delivery

Business Operations

• Process payments and manage billing
• Maintain accurate business records
• Improve our services and website functionality
• Conduct market research and business analysis

Legal and Compliance

• Comply with legal obligations and regulatory requirements
• Protect our business interests and enforce our terms
• Respond to legal requests and prevent fraud

Cookies and Tracking Technologies

We may use cookies and tracking technologies for analytics, advertising, and remarketing purposes, including Google Ads. These technologies help us measure campaign effectiveness, deliver relevant advertisements, and improve our services. You can manage your cookie preferences at any time through our cookie consent banner.

For detailed information about the cookies we use, please see our Cookie Policy.

Legal Basis for Processing

Under GDPR, we process your personal data based on the following legal bases:

• Legitimate Interests: To operate our business, improve our services, and communicate about our offerings
• Contract Performance: To deliver services you have requested or contracted for
• Legal Obligation: To comply with applicable laws and regulations
• Consent: Where you have explicitly agreed to specific processing activities

Data Sharing and Disclosure

We do not sell your personal data. We may share your information in the following circumstances:

• Service Providers: Third-party vendors who assist with business operations (hosting, analytics, payment processing)
• Legal Requirements: When required by law, court order, or regulatory authority
• Business Transfers: In connection with mergers, acquisitions, or business asset transfers
• Protection of Rights: To protect our legal rights, property, or safety, or that of others

All third parties we work with are required to maintain appropriate security measures and use your data only for specified purposes.

International Data Transfers

As a Malta-based company operating within the EU, we primarily process data within the European Economic Area. If we transfer data outside the EEA, we ensure appropriate safeguards are in place, including:

• Adequacy decisions by the European Commission
• Standard Contractual Clauses approved by the European Commission
• Other legally recognised transfer mechanisms

Data Retention

We retain your personal data only for as long as necessary to fulfil the purposes outlined in this policy or as required by law. Our retention periods include:

• Client Data: For the duration of our business relationship plus 7 years for legal and tax purposes
• Marketing Data: Until you withdraw consent or request deletion
• Website Analytics: Typically 26 months, in line with standard analytics practices
• Communication Records: 3 years from last contact for business purposes

When data is no longer needed, we securely delete or anonymise it in accordance with our data retention procedures.

Your Rights

Under GDPR and applicable data protection laws, you have the following rights regarding your personal data:

• Right of Access: Request a copy of the personal data we hold about you
• Right to Rectification: Request correction of inaccurate or incomplete data
• Right to Erasure: Request deletion of your personal data in certain circumstances
• Right to Restrict Processing: Request limitation of how we use your data
• Right to Data Portability: Receive your data in a structured, machine-readable format
• Right to Object: Object to certain types of processing, including direct marketing
• Right to Withdraw Consent: Withdraw previously given consent at any time

To exercise any of these rights, please contact us at privacy@stellahubnovae.top. We will respond to your request within one month.

Data Security

We implement appropriate technical and organisational measures to protect your personal data against unauthorised access, alteration, disclosure, or destruction. Our security measures include:

• Encryption of data in transit and at rest
• Regular security assessments and updates
• Access controls and authentication procedures
• Staff training on data protection and security
• Incident response and breach notification procedures

Whilst we strive to protect your personal data, no method of transmission over the internet or electronic storage is completely secure. We cannot guarantee absolute security but are committed to maintaining industry-standard protections.

Children's Privacy

Our services are not intended for individuals under the age of 16. We do not knowingly collect personal data from children under 16. If we become aware that we have collected personal data from a child under 16, we will take steps to delete such information promptly.

Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, technology, legal requirements, or other factors. We will notify you of any material changes by:

• Posting the updated policy on our website
• Updating the "Last updated" date at the top of this policy
• Sending email notification for significant changes (where we have your email address)

We encourage you to review this Privacy Policy periodically to stay informed about how we protect your information.

Contact Information

If you have any questions, concerns, or requests regarding this Privacy Policy or our data protection practices, please contact us:

Supervisory Authority

You have the right to lodge a complaint with the relevant data protection supervisory authority if you believe we have not complied with applicable data protection laws. In Malta, this is: