Last updated: 2022-07-04This Privacy Policy (the “Policy”) describes how Novaterr Solutions Inc. (“Novaterr”, “we”, “e-nova”), collects, uses and discloses your personal data when you access and use our online commerce platform available at e-nova.bike (the “Marketplace”). This Privacy Policy also explains how you can exercise your rights regarding your personal data.
To access the English version of this policy, please click here.
If you have any questions or concerns regarding this Privacy Policy, please contact our Privacy Officer at support@novaterr.com, or by mail at Novaterr Solutions Inc. 1341 B rue Principale, Sainte-Julie QC, J3E0C4 Canada.
When is this policy applicable?
This policy applies to how we process your personal data. Personal data is information that can directly or indirectly identify an individual and may include data that you share with us or that is generated automatically when you use our Marketplace.
The scope of this policy is limited to our Marketplace, as well as related services such as:
- Managing your account with us
- All requests you make through technical support
- Processing your payment card
What personal data do we collect about you, and why?
We collect data necessary to provide you with access to the Marketplace, to process your payments, to manage your account, and for similar purposes related to the Marketplace services. We do not use your personal data for marketing purposes, and we do not share your personal data with third-party data brokers.
| Purposes of processing | Types of personal data |
|---|---|
| To process your order | To process your order, we need to collect personal data, including your name, email address, telephone number and postal address. |
| To process your payment for a purchase | To complete your order, we collect personal information from you: first name, last name, country, street address, city, province, zip code, phone, email address, and any additional information included on the checkout page. Then, we collect your payment information, such as cardholder name, card number, expiration date, and CVV. We use trusted third-party payment providers to process your payment. We do not have access to or store your credit card information. |
| To carry out fraud checks and anti-money laundering checks. | When you make online payments with our trusted payment providers, they process your personal data to prevent or detect fraud, financial crime, management risks and to better protect themselves, others or the financial system. To do this, they need to monitor transactions and locations, detect patterns that require investigation, or build a profile and assess the likelihood of fraud or non-compliance with their terms and conditions. |
| To create and manage your account on the Website | If we make these features available to you, you may create an account to access and use the Marketplace. To do this, we will collect your login information, as well as authentication information (e.g., logs about when and how you log in, browser type, IP address) to secure your access. |
| To contact you in connection with your use of the Marketplace or a purchase | We may communicate with you via email in connection with your use of the Marketplace, such as to provide you with invoices, notify you of changes to our terms and conditions, or any issues with your purchase. |
| To allow you to leave reviews and comments on the seller's services. | If we make these features available to you, you may be able to leave reviews and comments in connection with a purchase. These reviews and comments will be publicly available to others on the Marketplace and may include photos, review content, and ratings. |
| To allow you to view your transaction history | We may make your transaction and purchase history available through your account. In this case, we will collect personal data such as the nature of the services purchased, the date of purchase, the payment method and any information associated with your purchase. |
| To comply with applicable laws or their administration | Various laws, such as tax laws, require us to retain copies of invoices and other personal data. We may be required to collect personal data for this purpose, and to retain it for a minimum retention period as defined by applicable law. |
| To enable us to manage the performance of the Marketplace | The Marketplace automatically generates electronic data about your usage, such as device type, browser type, IP address, geolocation, preferred language, cookie preferences, logins, and errors encountered. We use this information only to help us manage the performance of the Marketplace. We also use cookies to manage the performance of the Marketplace and to understand how the Marketplace is used. Click here to learn more about cookies. |
| To ensure the security of the Marketplace and related transactions. | To protect your personal data and transactions made on our website, various tools and techniques, such as connection monitoring, require the collection of personal data about your use of the Marketplace. |
| To respond to your requests, communications and any support tickets you submit to us | If you send us a communication, we will collect the information you sent for that purpose (e.g., name, email address, and content of the communication). If you contact us for a support issue, we will also collect any information you share with us regarding your issue. |
Do we use cookies in the Marketplace?
We need some cookies to make sure our Marketplace works properly. Cookies are small pieces of text generated by a website you visit and sent to the browser you are using. We also include similar tracking technologies, such as pixels or beacons, in our definition of cookies. We only use essential, functional and analytical cookies. This means that we do not use remarketing cookies and we do not collect your behavioral information to suggest products to you based on how you use the Marketplace.
We use Google Analytics as part of Marketplace performance management. Google Analytics is used to track website performance and collect visitor information. We can determine the main sources of user traffic, assess the success of our activities, track goal completions (such as purchases, adding merchant services to shopping carts), discover patterns and trends in user engagement, and obtain other visitor information, such as demographic data. This helps us analyze our users' behavior to improve the Marketplace's functionality, but we only see traffic, not information specific to you. Google Analytics acquires user data from each website visitor using page tags inserted into the code of each page. This tag runs in each visitor's web browser, collecting data and sending it to one of Google's data collection servers. Google Analytics can then generate customizable reports to track and visualize data such as number of users, bounce rate, average session duration, and pages viewed. Here is a helpful video that explains what Google Analytics does.
When you browse the Marketplace, we install the following cookies on your browser.
| Type of cookies | Explanations |
|---|---|
| Essential | Essential cookies are those that are… well, essential! Without them, we would not be able to provide you with the Marketplace. If you decide to delete them from your browser or block them, you may not be able to access all of the Marketplace’s features. |
| Functional | Functional cookies are used to recognize you and your preferences when you return to the Marketplace in order to provide you with a more personalized experience. These preferences may include your choice of language, information relating to your session, such as the contents of a shopping cart. |
| Analytical | Analytics cookies are used to measure how often you visit the Marketplace and how you use and engage with it. We use this information to improve the Marketplace and provide a better experience. For example, we collect information about which pages are most frequently visited, by which type of user, on which device and from which location. We do not see this information on a per-user basis: we only have access to traffic information. |
How can I control my cookie preferences?
You can set your browser to notify you when a cookie is being used and to accept or reject the cookie. You can also set your browser to refuse all cookies or to accept only cookies sent back to the originating servers. Users can generally disable the cookie feature on their browser without affecting their ability to continue through the Marketplace, except in certain cases where cookies are used as an essential security feature necessary to complete the transaction. Cookies, however, are important to the proper functioning of a site, and disabling them may degrade your experience and interfere with the functionality and personalization of the website.
You can also prevent your data from being used by Google Analytics by using the Google Analytics “opt-out” browser add-on for websites using the supported version of Google Analytics JavaScript by clicking here.
If you use Google Chrome, you can use Incognito mode (other browsers may have a similar feature). It allows you to browse the web without saving web pages and files to your browser or account history (unless you choose to sign in). Cookies are deleted after you close all your windows and tabs in “incognito” mode, and your bookmarks and settings are stored until you delete them.
How do we share your personal data?
We share your personal data in order to provide you with the Marketplace, to complete your transaction and as required by law. We do not sell your personal data to third parties.
However, if we go through a merger or acquisition, sell all or part of our business, or engage in other corporate transactions, we may need to share your personal information either to facilitate the transaction or as a result of the transaction.
Of course, we may be required to disclose your personal data in response to a subpoena, a request from government or judicial authorities in connection with an investigation, or other legal proceedings with which we are required by law to cooperate. We will do our best to validate such a request before sharing your personal data, and if we can, we will inform you beforehand.
More specifically, we share personal data with the following types of recipients:
| Type of recipients | Explanations |
|---|---|
| IT service providers | To provide you with the Marketplace, we need technological infrastructure. For example, we use Globotech to host the Marketplace and send notification emails. You can read Globotech's privacy policy here. |
| Sellers | When you purchase services from sellers, we share with them the information necessary for them to contact you in connection with your purchase. From there, sellers will process your personal data based on their own privacy notices. They may also ask you for additional information. |
| Affiliates | We may work with our affiliates to provide the Marketplace to you, and as such, we may share your personal data with our affiliates. |
| Marketplace Users | If you post information on the Marketplace, for example for reviews, other users will have access to this information without our intervention. |
| Payment service providers | To process your payment, we use trusted payment providers. You can read Nuvei's privacy notice here, and you can read Paysafe's privacy notice here. |
| Support Providers | We use Ariolix to manage technical support. You can read their privacy notice here. |
| Analytics Providers | We use analytics providers, such as cookies, to gain more insight into the use of our Marketplace. Click here for more information about our use of cookies. You can consult the Google Analytics privacy notice here. |
Where is your personal data stored?
We store your personal data in Montreal, Quebec. Our payment processors are also located in Canada. However, in connection with your use of the Marketplace, your personal data may be transferred outside of Canada. For example, sellers may be located in other jurisdictions, such as Cuba, and will receive your personal data in connection with a purchase made on the Marketplace.
Although we enter into agreements with Sellers requiring them to maintain an adequate level of protection of your personal data, these agreements may not be sufficient given the applicable laws in those jurisdictions. This means that government authorities may access and use your personal data based on the applicable laws in that jurisdiction. You are responsible for understanding these risks before completing a transaction.
How long do we keep your personal data?
We retain your personal data for as long as necessary for the purposes for which we collected it. For example, if you have an account with us, we will retain your personal data for as long as that account is active. You may contact us at support@novaterr.com to request deletion of your account. We may also be required to retain your personal data for longer periods where applicable laws require us to do so. For example, Canadian tax laws require us to retain relevant information, such as invoices, for at least 7 years.
Cookies can remain installed on your browser for up to 24 months. You can always clean your browser of all cookies.
How do we protect your personal data?
We have implemented appropriate and reasonable measures and organizational security measures to protect your data. For example, our trusted payment providers use various security controls to secure your transactions, such as tokenization which is a data security method that replaces credit card information with a token (a random value that retains essential card information without compromising security). This way, they can access your billing data without storing your credit card information.
Our payment processors are PCI Data Security Standards compliant as a Level 1 Service Provider. This requires them to deploy multiple security features such as:
- Maintaining secure networks
- Cardholder Data Protection
- Maintain a vulnerability management program
- Implement strong access control measures
- Regularly monitor and test networks
- Maintain an information security policy
- Perform Penetration Testing
- Maintain dedicated information security, legal and audit teams
They must also undergo a third-party security assessment to obtain their PCI compliance certificate. You can find more information about the security requirements of the PCI DSS standard here.
However, despite our security measures and efforts to secure your information, no electronic transmission of information or storage technology can be considered 100% secure. Therefore, we cannot guarantee that unauthorized third parties will not be able to defeat the measures in place and inappropriately collect, access, steal, share or modify your information. Although we have implemented reasonable and appropriate measures to protect your information, you must always access the Marketplace from a secure environment and connection.
Do you have rights over your personal data?
Yes, you have the right to privacy. This means that you also have rights over your personal data, although these rights vary depending on your circumstances and location. In Canada, most people have the right to access and correct their personal data. If you provide us with your personal data based on your consent, you can always withdraw that consent.
We will do our best to assist you if you exercise your rights. You can do this by contacting our Privacy Officer at support@novaterr.com. Our Privacy Officer may need to request additional personal data to confirm that you are the rightful owner of the personal data. We will respond to you within 30 days, or sooner if we are required to do so by law. If we cannot comply with your request, we will explain why.
If you are not satisfied with our response, you can always file a complaint with your local regulator. In Canada, you can file a complaint with the Office of the Privacy Commissioner. You will find here all the information you need. This webpage also contains an online form that you can fill out, or that you can send by post. However, if you are not satisfied, please let us know so that we can try to resolve the problem.
Please note that we do not control our vendors or their policies for responding to your request. If you wish to exercise your rights over the personal data controlled by vendors, you must contact them directly. If you are unable to do so, you may contact us and we will do our best to communicate with the vendors and require them to respond to your request.
Can we change this policy?
Yes, we can and will change it. For example, we may need to add certain disclosures to comply with the law; or we may have new features that require us to adjust our explanations about how we treat your personal data. If you have an account with us, we will notify you by email of any material adverse changes. Otherwise, we will let you know when you access the Marketplace. If you are not happy with the changes, you can stop using our Marketplace at any time by requesting deletion of your account at support@novaterr.com.
Our vendors may also make changes to their privacy policies and notices without prior notice to affected individuals. We have no control over this and cannot be held responsible for any changes to our vendors' privacy policies or notices. Vendors may be subject to laws that are different from those applicable where you reside.