1Who we are
noveltydocuments ("we", "us", "our") operates this website and sells digital personal, business and travle documents. We are the data controller for the personal information described in this policy.
2What we collect
- Order information: name (if provided), email address, billing country, and order details.
- Payment information: processed by our payment provider. We receive only a transaction reference and the last four digits of the card, never the full card number.
- Technical data: IP address, user agent, and pages viewed — collected in server logs for security and abuse prevention.
- Cookies: see our Cookie Policy for details.
3How we use it
- To process and deliver your order.
- To send you transactional emails (receipt, download links).
- To respond to your support requests.
- To detect and prevent fraud and abuse.
- To comply with legal obligations (tax, accounting).
4Legal basis (GDPR)
If you are in the EU/UK, we process your data under one of the following legal bases: (a) contract performance — to fulfil your order; (b) legitimate interests — fraud prevention and service improvement; (c) legal obligation — tax and accounting; (d) consent — for optional marketing, which you may withdraw at any time.
5Sharing
We share data only with:
- Our payment processor(s) — to complete your purchase.
- Our email provider — to send transactional messages.
- Our hosting provider — under a data-processing agreement.
- Law enforcement — when required by law.
We never sell your data.
6Retention
Order records are retained for as long as required by tax law (typically 6–7 years). Server logs are retained for up to 30 days. Support emails are retained for up to 24 months.
7Your rights
You have the right to access, correct, delete, or export your data, and to object to processing. To exercise any right, email privacy@noveltyidentitycenter.com. EU/UK residents may also lodge a complaint with their local supervisory authority.
8Security
We use HTTPS for all traffic, hash and salt credentials where applicable, and limit internal access to personal data to what is necessary for operations.
9International transfers
Our infrastructure is hosted in the European Union. Where data is transferred outside the EU/UK, we rely on appropriate safeguards such as Standard Contractual Clauses.
10Children
Our services are not directed at children under 16, and we do not knowingly collect their data.
11Changes
We may update this policy. Material changes will be announced on this page.
12Contact
Data protection enquiries: privacy@noveltyidentitycenter.com.