Privacy policy

Last updated: October 17, 2026

This policy explains how Nova Spheres ("we", "us") collects, uses and shares personal information when you visit our store or place an order. Nova Spheres is operated by Haseeb Abdul, a sole proprietor based in Germany (see our Legal Notice for the full address). Because we are based in the EU, we process personal data in line with the EU General Data Protection Regulation (GDPR).

Information we collect

  • Order and contact information: name, email, phone number, billing and shipping address.
  • The photo you upload: the image you provide for engraving, which may show you or other people.
  • Payment information: processed by our payment providers. We do not see or store your full card number.
  • Device and usage information: IP address, browser, pages viewed and similar data collected through cookies by Shopify.
  • Messages: anything you send us by email.

How we use it

  • To produce and deliver your order, including engraving your photo.
  • To provide customer support and handle refunds or replacements.
  • To prevent fraud and keep the store secure.
  • To send marketing emails, only if you subscribe. You can unsubscribe at any time.
  • To meet legal, tax and accounting obligations.

Our legal bases are performance of a contract (your order), our legitimate interests (security, store improvement), your consent (marketing, non-essential cookies) and legal obligations.

Your photo

Only upload photos you have the right to use. If the photo shows other people, please make sure they agree. If it shows a child, you confirm you are the parent or guardian or have their permission. We use your photo only to make your order. We share it only with our manufacturing partner for engraving and delete it from our systems within 90 days after delivery, unless you ask us to delete it sooner.

Who we share information with

  • Shopify, which hosts our store and processes orders.
  • Payment providers such as Shopify Payments and PayPal.
  • Our order-management tool (DSers) and manufacturing partner, which produces and ships your crystal. Our manufacturing partner is located in China. We share only what is needed to make and deliver your order: your name, shipping address, phone number and photo.
  • Shipping carriers that deliver your package.
  • Authorities, if required by law.

We do not sell your personal information.

International transfers

Your data may be processed outside the EU, including in the United States and China. Where required, we rely on appropriate safeguards such as the European Commission's Standard Contractual Clauses.

How long we keep it

Uploaded photos: up to 90 days after delivery. Order records: as long as tax and accounting laws require (in Germany up to 10 years). Marketing data: until you unsubscribe.

Your rights

You can ask to access, correct, delete or receive a copy of your personal data, object to or restrict processing, and withdraw consent at any time. You can also complain to a data protection authority. California residents have similar rights under the CCPA/CPRA, including the right to know and delete their data; we do not sell or share personal information for cross-context behavioral advertising beyond what Shopify's standard cookies do. To use your rights, email ha87480@gmail.com.

Cookies

Our store uses cookies set by Shopify to run the cart and checkout, remember your preferences and understand how the store is used. You can control cookies in your browser settings.

Children

Our store is not directed at children under 13, and we do not knowingly collect their personal information from them.

Changes and contact

We may update this policy and will change the date above when we do. Questions: ha87480@gmail.com.