Privacy Policy of Nova Conversion Optimisation B.V.

Effective date: July 21, 2026

1. Introduction and company information

This privacy policy explains how Nova Conversion Optimisation B.V. collects, uses, stores, shares, and protects personal data when providing conversion-optimisation and related services, operating our website, communicating with prospects and clients, and performing marketing, analytics, and business administration activities.

Nova Conversion Optimisation B.V. acts as the data controller for the personal data described in this privacy policy, unless expressly stated otherwise.

Company details:

• Name: Nova Conversion Optimisation B.V.
• Address: Westblaak 180, 3012 KN Rotterdam, Netherlands
• Email: [email protected]
• Phone: +31 10 742 89 56

This privacy policy applies to personal data we process in connection with our services, website visits, inquiries, contractual relationships, and communications. By using our website or engaging with our services, you acknowledge the practices described in this privacy policy.

2. Data collection and processing

We may collect and process the following categories of personal data, depending on your interaction with Nova Conversion Optimisation B.V.:

• Identity data: name, job title, company name, and role.
• Contact data: email address, phone number, postal address, and other communication details.
• Account and correspondence data: messages, inquiries, meeting notes, support requests, and records of communications.
• Technical data: IP address, browser type and version, device identifiers, operating system, time zone setting, language preferences, referring URLs, and log data.
• Usage data: pages viewed, clicks, session duration, navigation behavior, form interactions, campaign responses, and website performance indicators.
• Marketing and preference data: subscription status, consent choices, interests, and engagement with marketing communications.
• Contract and billing data: invoicing information, payment records, tax-related details, and contractual correspondence.
• Analytics and conversion data: data related to A/B testing, funnel performance, conversion tracking, attribution, and user journey analysis.

We may collect personal data directly from you, automatically through your use of our website or digital tools, and from third parties such as business partners, analytics providers, CRM providers, public sources, and clients where applicable and permitted by law.

Where required, we use cookies and similar technologies for functionality, analytics, and marketing purposes. For more information, any separate cookie notice or cookie settings tool on our website should be consulted.

3. Purpose of data processing

Nova Conversion Optimisation B.V. processes personal data for the following purposes:

• to respond to inquiries and communicate with you;
• to provide and manage our conversion-optimisation services;
• to prepare offers, execute agreements, and manage client relationships;
• to improve our website, services, user experience, and conversion performance;
• to perform analytics, testing, measurement, segmentation, and reporting;
• to manage marketing activities, including newsletters and targeted communications where permitted;
• to maintain business records, invoicing, accounting, and tax compliance;
• to detect, prevent, and investigate fraud, misuse, security incidents, or other unlawful conduct;
• to comply with legal obligations and respond to lawful requests from authorities;
• to establish, exercise, or defend legal claims.

We only process personal data that is necessary for the relevant purpose and apply appropriate safeguards where required.

4. Legal basis for processing

We process personal data only where we have a valid legal basis. Depending on the context, the legal bases may include:

• Performance of a contract: when processing is necessary to enter into or perform an agreement with you or your organization.
• Legal obligation: when processing is required to comply with statutory obligations, such as accounting, tax, or regulatory requirements.
• Legitimate interests: when processing is necessary for our legitimate business interests, such as operating and improving our services, securing our systems, conducting analytics, preventing fraud, and managing business communications, provided that your interests and fundamental rights do not override those interests.
• Consent: where you have given clear consent, such as for certain marketing communications or optional cookies and tracking technologies.
• Vital interests or public task: where applicable and permitted by law, though these bases will usually not apply to our ordinary business operations.

Where we rely on consent, you may withdraw that consent at any time without affecting the lawfulness of processing based on consent before withdrawal.

5. Data sharing and third parties

We may share personal data with the following categories of recipients where necessary for the purposes described in this privacy policy:

• Service providers and processors: hosting providers, cloud infrastructure providers, analytics tools, CRM platforms, email service providers, customer support tools, payment processors, and professional advisers who process data on our behalf under appropriate contractual safeguards.
• Business partners and clients: where required to deliver conversion-optimisation services, conduct analysis, or collaborate on projects.
• Professional advisers: lawyers, accountants, auditors, insurers, and consultants.
• Public authorities and regulators: where disclosure is required by law, court order, or lawful request.
• Corporate transactions: in connection with a merger, acquisition, financing, reorganization, or sale of assets, subject to appropriate confidentiality obligations.

We do not sell personal data in the ordinary sense. If any disclosure is made for advertising or tracking purposes through third-party tools, this will be done in accordance with applicable law and, where required, with your consent.

Third parties are only permitted to process personal data on our instructions or as independent controllers where applicable law so provides. We seek to ensure appropriate data protection safeguards are in place.

6. Data transfer to third countries

Depending on the tools and services we use, personal data may be transferred to or accessed from countries outside the European Economic Area (EEA). Where such transfers occur, Nova Conversion Optimisation B.V. will take appropriate measures to ensure that personal data receives a level of protection essentially equivalent to that required under applicable privacy law.

These safeguards may include, as applicable:

• transfers to countries recognized as providing an adequate level of protection;
• standard contractual clauses or equivalent transfer mechanisms;
• additional technical and organizational measures, such as encryption, access controls, and data minimization;
• reliance on valid consent or another lawful transfer mechanism where permitted.

Where requested, we will provide further information about the relevant transfer safeguards, subject to any legal or confidentiality restrictions.

7. Storage duration

We retain personal data only for as long as necessary for the purposes for which it was collected, unless a longer retention period is required or permitted by law.

• Contract and client data: retained for the duration of the relationship and for a reasonable period thereafter for administration, legal, and claims purposes.
• Accounting and tax data: retained for the period required by applicable law.
• Marketing data: retained until you unsubscribe, withdraw consent, or object, unless a longer retention period is justified by a lawful basis.
• Analytics and website data: retained for the period necessary to analyze performance, improve services, and maintain records, subject to applicable cookie and retention settings.
• Support and correspondence records: retained for the time needed to handle the inquiry and for follow-up or audit purposes.

When personal data is no longer needed, we will delete, anonymize, or securely archive it in accordance with our retention practices and applicable law.

8. User rights

Subject to applicable law, you may have the following rights regarding your personal data:

• Access: to obtain confirmation as to whether we process your personal data and receive a copy of that data.
• Rectification: to request correction of inaccurate or incomplete personal data.
• Erasure: to request deletion of your personal data in certain circumstances.
• Restriction: to request that we limit the processing of your personal data in certain situations.
• Data portability: to receive personal data you provided to us in a structured, commonly used, machine-readable format and to request transfer to another controller where technically feasible.
• Objection: to object to processing based on legitimate interests, including profiling related to direct marketing where applicable.

You may also have the right not to be subject to certain decisions based solely on automated processing, including profiling, where such decisions produce legal or similarly significant effects and where this is applicable under law.

To exercise your rights, please contact us using the details in Section 12. We may need to verify your identity before responding. We will respond within the timeframe required by applicable law and may refuse requests that are unfounded, excessive, or not legally required.

9. Withdrawal of consent

Where we rely on your consent to process personal data, you have the right to withdraw that consent at any time. Withdrawal of consent does not affect the lawfulness of processing carried out before the withdrawal.

You can withdraw consent by using unsubscribe links in emails, adjusting cookie or privacy preferences where available, or contacting us directly at [email protected].

10. Right to complain

If you believe that our processing of your personal data infringes applicable privacy law, you have the right to lodge a complaint with the competent supervisory authority.

Without limiting that right, we encourage you to contact Nova Conversion Optimisation B.V. first so that we can try to resolve your concern promptly and amicably.

11. Data security

Nova Conversion Optimisation B.V. takes appropriate technical and organizational measures to protect personal data against unauthorized access, loss, misuse, alteration, and disclosure. These measures may include:

• access controls and authentication measures;
• encryption or pseudonymization where appropriate;
• network and system security monitoring;
• regular backups and disaster recovery measures;
• role-based access and confidentiality obligations;
• internal policies, training, and vendor management practices;
• incident response and breach management procedures.

Although we take reasonable steps to safeguard personal data, no method of transmission over the internet or method of electronic storage is completely secure. We therefore cannot guarantee absolute security.

12. Contact information

If you have questions, requests, or concerns regarding this privacy policy or our processing of personal data, please contact:

• Nova Conversion Optimisation B.V.
• Westblaak 180, 3012 KN Rotterdam, Netherlands
• Email: [email protected]
• Phone: +31 10 742 89 56

13. Changes to privacy policy

Nova Conversion Optimisation B.V. may update this privacy policy from time to time to reflect changes in our practices, technologies, legal requirements, or business operations. The updated version will be effective upon posting unless otherwise stated.

We encourage you to review this privacy policy periodically. Where required by law, we will provide additional notice or request your consent before making material changes that affect the way we process your personal data.