Privacy policy

Updated : 12 October 2026

At a glance

No tracking cookies, no targeted advertising and no third-party analytics tools are used on this site.
We measure visitor numbers without cookies or trackers, using our server logs: the statistics are anonymous and cannot be used to follow you from one day to the next.
The only data we receive is the data you choose to give us: when you write to us, or when you sign up to our newsletter.
The newsletter uses double opt-in, is hosted on our own server, and its emails contain no tracking pixels.
You can exercise your rights at any time by writing to info@novaliacare.com.

Data controller

Ascentia Trading OÜ, Tartu mnt 67/1-13b, 10115 Tallinn, Estonia — registry code 17470945 (Estonian e-Business Register). Contact: info@novaliacare.com.

Data we process

Messages you send us

When you email us, we process your email address, your name if it appears, and the content of your message, solely in order to reply to you. Legal basis: our legitimate interest in responding to the enquiries we receive. Retention period: 3 years from our last exchange.

Technical logs

Like any website, our server and our content delivery provider (Cloudflare) record technical logs (IP address, date and time, page requested, referring site, browser language and type) that are needed for the security and proper functioning of the site. Legal basis: our legitimate interest in keeping the service secure. Our server logs are deleted automatically after 7 days and are not used for profiling.

Audience measurement

To find out which pages are read and how readers find us, we compile visitor statistics from these logs, without cookies, without tracking scripts and without third-party tools. They cover the page viewed, the referring site, the campaign name given in the link you followed, if any (the ‘utm_campaign’ parameter, for example for an Instagram post or a newsletter; no other parameter in the address is kept), the country (provided by Cloudflare based on the IP address), the language, and the type of device and browser. Your IP address is not included: it is replaced by a non-reversible fingerprint, calculated with a random key that is renewed and erased every day, which is used only to count unique visitors on a given day; it can neither identify you nor follow you from one day to the next. Legal basis: our legitimate interest in measuring our site’s audience (Article 6(1)(f) GDPR). The statistics are kept for 25 months.

To count only real visits, each page also loads a transparent 1-pixel image from our own server, with no cookie and no identifier: a browser that displays the page loads it, while a bot that only downloads the page’s text does not. This request appears in the same logs and follows the same retention rules.

If you sign up to the Novalia newsletter, we process:

your email address and the language of the site you were using;
the page from which you signed up, the date and time of your sign-up and of its confirmation, and the consent wording you accepted;
a non-reversible fingerprint of your IP address and your browser type, solely so that we can prove your consent.

Purpose: to send you the Novalia newsletter (new guides, exercise routines and seasonal tips; once or twice a month, occasionally with information about our products). Legal basis: your consent (Article 6(1)(a) GDPR), confirmed by double opt-in: your subscription only becomes active once you click the link we send you by email.

Hosting: the data is stored in a database hosted on a server that we operate ourselves; it is never sold, rented out or shared. The technical sending of emails may be entrusted to an email delivery provider acting as a processor (Article 28 GDPR), which does not use your data for any other purpose. Our emails contain no tracking pixels: we do not measure opens or clicks.

Retention periods: until you unsubscribe, for confirmed addresses; a maximum of 30 days for an unconfirmed sign-up, which is then deleted automatically. After you unsubscribe, we keep only a cryptographic fingerprint of the address and the date, for 3 years, to prove that your choice was respected.

Withdrawing consent: at any time and without giving a reason, using the unsubscribe link in every email or by writing to info@novaliacare.com.

Cookies

This site sets no advertising or analytics cookies. Our security provider may use cookies that are strictly necessary to protect the site against abuse; these do not require your consent.

Recipients and transfers

Your data is never sold or rented out. It is accessible only to Ascentia Trading OÜ, to any email delivery provider we use for the newsletter and, for technical logs, to Cloudflare, Inc., which may process data outside the European Union under the safeguards provided for by the GDPR (standard contractual clauses and the EU–US Data Privacy Framework).

Your rights

Under the GDPR, you have the right to access, rectify and erase your data, to restrict or object to its processing, and to data portability. To exercise these rights, write to info@novaliacare.com. You also have the right to lodge a complaint with the Estonian Data Protection Inspectorate (Andmekaitse Inspektsioon), our lead supervisory authority, or with the data protection authority in your country of residence, such as the Information Commissioner’s Office (ICO) in the UK.

Changes

We may update this policy, for example if new services are offered on the site. The date of the last update is shown at the top of this page.