GDPR Policy

Last updated: February 6, 2026

This GDPR Policy explains how NovaXCase (“we,” “us,” or “our”) processes personal data in accordance with the General Data Protection Regulation (GDPR) where applicable. NovaXCase is operated by STORE PHONE CASE SRL, a company established in Romania.

While NovaXCase sells products exclusively to customers in the United States, certain data processing activities may still fall within the scope of GDPR due to our establishment within the European Union.

Your Data Protection Rights

Where GDPR applies, individuals have the following rights regarding their personal data:

Right of Access
You may request confirmation as to whether we process personal data about you and request a copy of such data.

Right to Rectification
You may request correction of inaccurate or incomplete personal data.

Right to Erasure
You may request deletion of your personal data, subject to legal, contractual, or regulatory obligations.

Right to Restrict Processing
You may request limitation of processing under certain circumstances.

Right to Data Portability
You may request a copy of your personal data in a structured, commonly used, and machine-readable format.

Right to Object
You may object to processing based on legitimate interests or for direct marketing purposes.

Right to Withdraw Consent
Where processing is based on consent, you may withdraw consent at any time.

You also have the right to lodge a complaint with a supervisory data protection authority in an EU Member State.

Personal Data We Process

Where applicable, we may process the following categories of personal data:

Contact details such as name, email address, phone number, and shipping address
Order and transaction information, including billing and shipping confirmations
Customer service communications
Technical and usage data such as IP address, browser type, cookies, and analytics data

Purposes of Processing

Personal data is processed only for legitimate purposes, including:

Fulfilling and delivering orders
Providing customer support and responding to inquiries
Operating and improving our website and services
Detecting fraud and ensuring platform security
Sending transactional communications
Complying with legal and regulatory obligations

Marketing communications are sent only where permitted by law and based on user preferences or consent.

Legal Basis for Processing

Where GDPR applies, we process personal data on the following legal grounds:

Performance of a contract (order fulfillment and service delivery)
Compliance with legal obligations
Legitimate interests (such as fraud prevention, service improvement, and security)
Consent, where required (for marketing or optional communications)

Data Sharing

Personal data may be shared with:

Payment processors, shipping partners, and service providers assisting with order fulfillment
Technology and analytics providers supporting website operations
Public authorities where disclosure is required by law

NovaXCase does not sell personal data.

International Data Transfers

Personal data may be transferred outside the European Union, including to the United States. Where such transfers occur, appropriate safeguards are implemented, such as Standard Contractual Clauses (SCCs), to ensure an adequate level of data protection.

Data Retention

Personal data is retained only for as long as necessary to fulfill contractual, legal, or operational requirements. Once no longer required, data is securely deleted or anonymized.

Exercising Your Rights

To exercise GDPR-related rights, please contact us at support@novaxcase.com
We may require identity verification before processing requests. Requests are handled within the timeframes required by applicable law, typically within 30 days.