PRIVACE POLICY


Last updated: November 11, 2025

1. OVERVIEW

This Privacy Policy describes how NAOVE, operated by Mgr. art Kvetoslava Kubušová (based in Prague, Czech Republic), collects, uses, and protects your personal data when you visit or make a purchase from our website www.naovestudio.com (the “Website”), or otherwise interact with us.

NAOVE uses Shopify as its e-commerce platform. Shopify provides the technical and operational infrastructure to process orders, manage payments, and store customer data securely.

By using our Website or placing an order, you acknowledge that you have read and understood this Privacy Policy.

2. DATA CONTROLLER

Controller:
Mgr. art Kvetoslava Kubušová
Email: naovestudio@gmail.com

For the purpose of the General Data Protection Regulation (EU) 2016/679 (“GDPR”), we are the controller of your personal data.

3. PERSONAL DATA WE COLLECT

We collect and process personal data that is necessary for the performance of our services and communication with customers. This may include:

  • Identification and contact details: name, email address, phone number, billing and shipping address

  • Payment and transaction details: order history, payment method (processed securely via Shopify Payments)

  • Account information: username, login credentials (if you create an account)

  • Communication data: messages, inquiries, and feedback you send us

  • Technical data: IP address, browser type, device information, cookies, and analytics data (for site functionality and improvement)

We do not collect or store full credit/debit card numbers — these are processed securely by Shopify or other approved payment providers.

4. HOW WE USE YOUR DATA

We process your personal data for the following purposes:

  • To process and deliver your orders, payments, and returns

  • To communicate with you regarding your purchase or inquiries

  • To provide customer support and respond to your requests

  • To send marketing emails or updates, if you have opted in

  • To improve our products, website, and customer experience

  • To comply with legal obligations (e.g. accounting and tax regulations)

5. LEGAL BASIS FOR PROCESSING

We process your personal data on the following legal bases under the GDPR:

  • Performance of a contract – for fulfilling your order or providing services.

  • Legitimate interest – for internal analytics, site improvement, and preventing fraud.

  • Consent – for marketing communications or cookies.

  • Legal obligation – for record-keeping and accounting purposes.

6. SHARING YOUR DATA

We only share your data with trusted third parties necessary to operate our business, including:

  • Shopify Inc. – for website hosting, payments, and order management

  • Payment providers – to securely process payments

  • Delivery services – to deliver your orders

  • IT and analytics providers – to maintain and improve the website

These partners process data in compliance with GDPR and may store data outside the EU under Standard Contractual Clauses ensuring adequate protection.

We do not sell or rent your personal data to third parties.

7. DATA RETENTION

We retain your personal data only for as long as necessary to fulfill the purposes outlined above, and to comply with legal obligations (e.g. 10 years for accounting documents as required by Czech law).

When personal data is no longer needed, it is securely deleted or anonymized.

8. YOUR RIGHTS UNDER GDPR

As an EU data subject, you have the following rights:

  • Right of access – to obtain a copy of your personal data

  • Right to rectification – to correct inaccurate or incomplete data

  • Right to erasure (“right to be forgotten”) – to request deletion of your data

  • Right to restriction of processing – to limit how your data is used

  • Right to data portability – to receive your data in a structured, commonly used format

  • Right to object – to object to processing based on legitimate interests or marketing

  • Right to withdraw consent – at any time, if processing is based on consent

To exercise your rights, contact us at naovestudio@gmail.com.
You also have the right to file a complaint with the Office for Personal Data Protection (Úřad pro ochranu osobních údajů, www.uoou.cz).

9. SECURITY

We implement appropriate technical and organizational measures to protect your data from unauthorized access, loss, misuse, or alteration.
However, no online transmission is 100 % secure, and we cannot guarantee absolute security.

10. COOKIES AND ANALYTICS

We use cookies and similar technologies to ensure the functionality of our website, analyze traffic, and personalize your experience.
You can manage or disable cookies in your browser settings at any time.

11. CHILDREN’S PRIVACY

Our website is not intended for children under 16 years of age.
We do not knowingly collect personal data from minors. If you believe your child has provided us with personal information, please contact us for deletion.

12. INTERNATIONAL DATA TRANSFERS

Some of our service providers (including Shopify) may process data outside the EU/EEA.
In such cases, transfers are made under Standard Contractual Clauses (SCCs) approved by the European Commission to ensure adequate protection.

13. CHANGES TO THIS PRIVACY POLICY

We may update this Privacy Policy from time to time to reflect legal, technical, or business changes.
The latest version will always be available on this page, with the “Last updated” date clearly stated.

14. CONTACT

For any questions or to exercise your rights regarding your personal data, please contact:

NAOVE – Mgr. art Kvetoslava Kubušová
📧 naovestudio@gmail.com