Privacy & Cookies Policy

1. Introduction

At Nova Supply LLC, we take your privacy seriously. This policy explains what personal information we collect, how we use it, the legal foundations for processing, our data-sharing practices, retention periods, and your rights when you access our services and eSIM plans.

2. Data Controller

The entity responsible for processing your personal data is:

• Organization: Nova Supply LLC
• Address: 1209 Mountain Road, Albuquerque, NM 87110, United States
• Contact: [email protected]

We may act as a data processor in certain circumstances when handling activations for authorized partners.

3. Personal Data We Collect

Identity & Contact Data

Names, email addresses, phone numbers (if provided), and country of residence.

Purchase & Billing Data

Plan specifics, amounts, currencies, invoices, and order identifiers. We do not typically store full payment card details.

Technical Data

IP addresses, session IDs, browser information, operating system details, pages visited, and access timestamps.

eSIM Service Data

Plan identifiers, activation status, and support-related information.

Communications Data

Support messages, incident reports, troubleshooting information, and user-provided screenshots.

Location Data

Approximate location inferred from IP address only, used for security and regional customization. We do not perform continuous location tracking.

Identity Verification

Only collected when legally required by carriers or regulators for specific destinations.

4. How We Collect Data

Data originates through:

• Information you provide during purchases and account creation.
• Automatic collection via website browsing and cookies.
• Third-party sources including payment processors, fraud prevention services, analytics platforms, and carriers.

5. How We Use Your Data & Legal Bases

Processing purposes under GDPR Article 6 include:

Service Delivery (Contract)

Order management, eSIM delivery, and activation support.

Customer Support (Contract / Legitimate Interests)

Issue resolution, activation assistance, and technical troubleshooting.

Compliance (Legal Obligation)

Invoice generation and Spanish tax requirements.

Security (Legitimate Interests / Legal Obligation)

Fraud detection, account protection, and security logging.

Operational Communications (Contract / Legitimate Interests)

Order updates and critical service notices.

Marketing (Legitimate interest — existing customers, Art. 21.2 LSSI)

If you buy from us, we may email you about products and services similar to your purchase. You can object when you buy, and unsubscribe in every email.

Analytics (Consent)

Website usage measurement and performance improvement.

6. Email Communications

When you purchase from MolaHop, we will use your email address to send:

1. Service emails (always sent): order confirmation, eSIM QR code delivery, expiration reminders, and other notifications strictly necessary to deliver the service you purchased.
2. Review requests: once, after you've started using your eSIM. We will ask for an honest review on Trustpilot. You can opt out of these via the unsubscribe link in the email or by contacting us.
3. Marketing emails: occasionally, about eSIM plans and travel services similar to what you bought. We only send them if you are a customer and did not object at checkout, and every one includes an unsubscribe link. Unsubscribing from marketing never stops service emails such as your eSIM delivery.

To stop review requests or marketing emails, click the "Unsubscribe" link in any of those emails. Your preferences will be honored immediately. Service emails have no unsubscribe link because they deliver what you bought.

We use Resend (resend.com) as our email service provider. Email content and recipient addresses are processed by Resend on our behalf under their data processing terms.

7. Cookies Policy

6.1 What Are Cookies?

Cookies are small files stored on your device when you visit a website. They enable core functionality, session management, and usage tracking.

6.2 Types of Cookies We Use

• Strictly necessary: Core functions and security.
• Preference: Language and region settings.
• Analytics: Usage measurement and performance improvement.
• Marketing: Ad relevance and campaign tracking.

6.3 Managing Cookies

We provide a cookie preferences panel where you can accept or reject non-essential cookies. You can also modify your browser settings, though blocking necessary cookies may affect site functionality.

8. Data Sharing

We do not sell your personal data. We may share it with:

• Telecommunications carriers and connectivity providers.
• Payment service providers.
• Technology providers (hosting, email, analytics, fraud prevention, support tools).
• Professional advisors (legal/accounting services).
• Public authorities when required by law.
• Parties in corporate transactions (mergers, acquisitions, restructuring).

9. International Data Transfers

For transfers outside the European Economic Area, Nova Supply LLC implements Standard Contractual Clauses (SCCs), GDPR-recognized adequacy decisions, and other approved transfer mechanisms.

10. Data Retention

• Billing / Tax: Legally required periods under Spanish law.
• Support records: Duration of case handling plus reasonable follow-up.
• Marketing lists: Until you object or unsubscribe.
• Cookies: According to individual cookie duration and user preferences.

11. Your Rights (GDPR)

You have the right to:

• Access your personal data.
• Correct inaccurate information.
• Request deletion (where applicable).
• Restrict or object to processing.
• Obtain a portable copy of your data.
• Object at any time to marketing communications, and withdraw consent at any time where processing is based on it (such as analytics cookies).

To exercise any of these rights, contact us at [email protected] with sufficient identification information. You also have the right to lodge a complaint with the Spanish Data Protection Authority (AEPD).

12. Children's Privacy

Our services are not directed toward children under 14 years old. We do not knowingly collect personal data from children, and we commit to deletion if inadvertent collection occurs.

13. Policy Updates

This policy may be updated to reflect service or legal changes. Updated versions will appear on our website with a new effective date, plus additional notifications where necessary.

14. Contact

For any privacy-related inquiries, please contact us at [email protected].