Last Updated: July 9, 2026
1. Introduction
Novablue Labs LLC ("Company," "we," "our," or "us") values your privacy and is committed to protecting your personal information. This Privacy Policy explains how we collect, use, disclose, retain, and protect your information when you visit novablue-labs.com (the "Site"), purchase our products, contact our customer support, subscribe to marketing communications, or otherwise interact with us.
By using our Site or providing us with your information, you acknowledge that you have read and understood this Privacy Policy. This Privacy Policy should be read together with our Terms of Service, Cancellation, Return & Refund Policy, and Shipping Policy.
Your statutory privacy rights under applicable law — including the California Consumer Privacy Act (as amended by the CPRA), the Delaware Personal Data Privacy Act, the Virginia Consumer Data Protection Act, the Colorado Privacy Act, the Connecticut Data Privacy Act, other applicable US state privacy laws, and Canada's Personal Information Protection and Electronic Documents Act (PIPEDA) — are not limited by this Policy. Where a provision of this Policy conflicts with a mandatory statutory right in your jurisdiction, that statutory right prevails.
2. Information We Collect
We collect different categories of information depending on how you interact with our Site and services. We refer to any information that identifies, relates to, describes, or could reasonably be linked to an identifiable individual as "Personal Information."
2.1 Information You Provide Directly
We collect Personal Information you voluntarily provide when you:
- Place an order or make a purchase;
- Create a customer account;
- Contact our customer support team;
- Subscribe to our email or SMS marketing communications;
- Participate in surveys, promotions, or contests;
- Submit a product review or feedback.
This information may include: full name, email address, phone number, billing address, shipping address, and any information you choose to provide. Payment card details (card number, expiration date, CVV) are collected directly by our payment processor and are not stored on our servers.
2.2 Information Collected Automatically
When you visit our Site, we automatically collect certain technical and usage information through cookies, log files, web beacons, pixel tags, and similar tracking technologies. This includes:
-
Device information: browser type and version, operating system, device type, screen resolution, and unique device identifiers;
-
Network information: IP address, internet service provider, and general geographic location (city/region level);
-
Usage information: pages viewed, products browsed, links clicked, search terms entered, time on page, referring URLs, and navigation patterns;
-
Transaction information: items added to cart, abandoned carts, purchase history, and order details;
-
Cookie and tracking data: cookie IDs, session identifiers, and interaction data from pixels and tags.
2.3 Information from Third Parties
We may receive Personal Information about you from third-party sources, including:
-
Shopify (our e-commerce platform and payment processor) — order processing, payment handling, fraud screening, and analytics data;
-
Advertising and analytics partners (Meta/Facebook, Google, TikTok) — ad performance data and audience insights;
-
Shipping carriers — delivery confirmation and tracking data;
-
Fraud prevention services — transaction risk data.
2.4 Sensitive Personal Information
We do not knowingly collect "Sensitive Personal Information" as defined under the California Consumer Privacy Act (CPRA), Colorado Privacy Act, Connecticut Data Privacy Act, or similar state privacy laws (e.g., government identifiers, precise geolocation, biometric data, health information, racial or ethnic origin). We do not use or disclose Personal Information for purposes that require an opt-in under these laws.
3. How We Use Your Information
3.1 Order Fulfillment & Service Delivery
- Processing and fulfilling your orders, including payment processing, shipping, and delivery;
- Managing your customer account;
- Sending transactional communications (order confirmations, shipping notifications, receipts);
- Providing customer support and responding to inquiries.
3.2 Business Operations & Improvement
- Operating, maintaining, and improving our Site, products, and services;
- Analyzing Site usage, traffic patterns, and customer behavior to optimize performance;
- Conducting internal analytics;
- Developing new products and features.
3.3 Marketing & Advertising
- Sending promotional emails and SMS messages about our products, services, and offers (with your consent);
- Displaying targeted advertisements on third-party platforms based on your interests and browsing behavior;
- Measuring the effectiveness of our advertising campaigns;
- Personalizing your experience on our Site and in our communications.
3.4 Security & Fraud Prevention
- Screening orders for potential risk, fraud, or unauthorized activity;
- Verifying cardholder identity and payment authorization;
- Detecting and preventing security incidents, data breaches, and other malicious activity;
- Monitoring for policy abuse (including chargeback fraud).
3.5 Legal Compliance
- Complying with applicable laws, regulations, and legal processes;
- Responding to lawful requests from law enforcement or courts;
- Enforcing our Terms of Service and other policies;
- Establishing, exercising, or defending legal claims.
4. How We Share Your Information
We do not sell your Personal Information for monetary consideration. However, certain data sharing with advertising partners (described in Section 4.2) may be considered a "sale" or "sharing" under some US state privacy laws, and we offer opt-out rights accordingly.
4.1 Service Providers
We share Personal Information with third-party service providers who perform services on our behalf:
-
Shopify Inc. — e-commerce platform, order management, Shopify Payments (payment processing), fraud analysis. See Shopify's privacy policy at shopify.com/legal/privacy;
-
Shipping carriers (USPS, UPS, FedEx, DHL, Canada Post) — for order delivery and tracking;
-
Email and SMS service providers — for transactional and marketing communications;
-
Analytics providers — Google Analytics, Meta Pixel, and similar services;
-
Customer support tools — helpdesk and CRM platforms.
These service providers are contractually obligated to use your Personal Information only to perform the services we have engaged them to provide and in accordance with applicable data protection laws.
4.2 Advertising Partners
We share limited information (such as hashed email addresses, cookie identifiers, device IDs, browsing activity, and purchase history) with advertising partners including Meta (Facebook, Instagram), Google, and TikTok to deliver targeted advertisements and measure campaign performance. The purpose of this sharing is to show you relevant ads and to measure ad effectiveness. This sharing may constitute a "sale" or "sharing" of Personal Information under certain US state privacy laws. See Section 8 for your opt-out rights.
4.3 Legal & Compliance Disclosures
We may disclose your Personal Information when we believe in good faith that disclosure is necessary to:
- Comply with applicable laws, regulations, legal processes, or governmental requests;
- Respond to a subpoena, court order, search warrant, or lawful request for information;
- Protect the rights, property, or safety of Novablue Labs LLC, our customers, or the public;
- Enforce our Terms of Service and other policies;
- Detect, prevent, or address fraud, security, or technical issues.
4.4 Business Transfers
In the event of a merger, acquisition, reorganization, sale of assets, or bankruptcy, your Personal Information may be transferred to the acquiring entity. We will notify you via email and/or a prominent notice on our Site of any change in ownership or uses of your Personal Information.
5. Cookies & Tracking Technologies
We use cookies and similar tracking technologies to collect information, personalize your experience, and deliver targeted advertising.
5.1 Types of Cookies We Use
Essential/Functional Cookies: Required for the Site to function, including navigation, checkout, cart functionality, and security. These cannot be disabled without affecting Site functionality.
Analytics Cookies: Used to collect information about how visitors use our Site.
Marketing/Advertising Cookies: Used to display targeted advertisements based on browsing behavior. Set by us and our advertising partners.
5.2 Managing Cookies
You can control cookies through your browser settings. Most browsers allow you to block or delete cookies via the "Tools," "Settings," or "Preferences" menu. Disabling cookies may impair Site functionality. Blocking cookies does not prevent all data sharing with advertising partners — see Section 6 to opt out of targeted advertising.
5.3 Global Privacy Control (GPC)
We honor the Global Privacy Control (GPC) signal. If you use a browser or extension that sends a GPC signal, we will treat it as a valid opt-out of sale/sharing of your Personal Information for cross-context behavioral advertising, as required by the California CPRA and similar laws.
5.4 Do Not Track Signals
Because there is no consistent industry standard for "Do Not Track" (DNT) browser signals, we do not currently respond to DNT signals. We do, however, honor Global Privacy Control signals as described above.
6. Behavioural Advertising & Opt-Out
To opt out of targeted advertising, you can:
- Adjust your ad settings directly with the platform:
- Use industry opt-out tools:
- Enable Global Privacy Control (GPC) in your browser;
- Contact us directly at privacy@novablue-labs.com to request opt-out.
Opting out does not mean you will no longer see ads — you will still receive generic advertisements not tailored to your interests.
7. SMS & Email Marketing
7.1 Email Marketing
We send email marketing communications only with your consent. By providing your email address and opting in, you consent to receive marketing emails from Novablue Labs LLC. You may unsubscribe at any time by clicking "Unsubscribe" in any marketing email. Please allow up to 10 business days for opt-out to take effect. Opting out does not affect transactional emails related to your orders.
7.2 SMS Marketing
By providing your mobile phone number and opting in, you consent to receive recurring automated marketing text messages from Novablue Labs LLC.
Consent to receive SMS marketing is not a condition of any purchase. Message frequency varies. Message and data rates may apply. Reply HELP for help. Reply STOP to unsubscribe. We use commercially reasonable efforts to comply with the Telephone Consumer Protection Act (TCPA), the CTIA Messaging Principles and Best Practices, and A2P 10DLC carrier requirements.
Supported US carriers include: AT&T, Verizon, T-Mobile, Sprint, Boost, Cricket, MetroPCS, U.S. Cellular, Virgin Mobile, and others. Supported Canadian carriers include: Bell, Rogers, Telus, Fido, Koodo, Virgin Mobile Canada, and others. Carriers are not liable for delayed or undelivered messages.
7.3 SMS Data Privacy
Your mobile phone number and SMS opt-in consent will never be sold, rented, or shared with any third party for their marketing purposes. We share your mobile information only with service providers who directly assist us in delivering our SMS messages (SMS platform providers, phone carriers, and message delivery vendors), and only for the purpose of providing the messaging service.
8. Your Privacy Rights
8.1 Rights That May Apply Depending on Your Location
Depending on your state or country of residence, you may have some or all of the following rights:
-
Right to Know / Access: Request the categories and specific pieces of Personal Information we have collected about you;
-
Right to Correct: Request correction of inaccurate Personal Information;
-
Right to Delete: Request deletion of your Personal Information, subject to legal exceptions;
-
Right to Data Portability: Receive your data in a portable, machine-readable format;
-
Right to Opt-Out of Sale/Sharing: Direct us to stop selling or sharing your Personal Information for cross-context behavioral advertising;
- Right to Opt-Out of Targeted Advertising and Profiling;
-
Right to Non-Discrimination: We will not discriminate against you for exercising your privacy rights;
-
Right to Appeal: If we deny your request, you may appeal our decision (where applicable).
8.2 California — CCPA / CPRA
If you are a California resident, you have rights under the California Consumer Privacy Act as amended by the California Privacy Rights Act, including all rights listed in Section 8.1. As described in Section 4.2, we share Personal Information with advertising partners, which may constitute a "sale" or "sharing" under CCPA/CPRA. To opt out, contact us at privacy@novablue-labs.com with the subject line "Do Not Sell or Share My Personal Information," or enable Global Privacy Control in your browser.
8.3 Delaware — DPDPA
If you are a Delaware resident, you have rights under the Delaware Personal Data Privacy Act (effective January 1, 2025), including all rights listed in Section 8.1. To exercise these rights, contact us at privacy@novablue-labs.com. You may also lodge a complaint with the Delaware Department of Justice.
8.4 Other US States
Residents of Virginia (VCDPA), Colorado (CPA), Connecticut (CTDPA), Utah (UCPA), Texas (TDPSA), Oregon (OCPA), Montana (MTCDPA), Iowa (ICDPA), Tennessee (TIPA), Indiana (ICDPA), New Jersey, New Hampshire, Kentucky, Minnesota, Maryland, Rhode Island, and other states with comprehensive privacy laws have rights substantially similar to those described in Section 8.1. Contact us at privacy@novablue-labs.com to exercise these rights.
8.5 Canada — PIPEDA
If you are a Canadian resident, you have rights under the Personal Information Protection and Electronic Documents Act (PIPEDA) and applicable provincial privacy legislation, including the right to access your Personal Information, request correction, withdraw consent, and file a complaint with the Office of the Privacy Commissioner of Canada at priv.gc.ca.
8.6 How to Exercise Your Rights
To exercise any of your privacy rights, contact us at privacy@novablue-labs.com or by phone at +1 302-779-0033. We will verify your identity before processing your request and will respond within the timeframes required by applicable law (typically 45 days under US state privacy laws, with a potential 45-day extension). Verification may require you to confirm information we have on file about you. We do not charge a fee for legitimate requests unless they are manifestly unfounded or excessive.
8.7 Authorized Agents
You may designate an authorized agent to make privacy rights requests on your behalf. We may require verification of the agent's authority and confirmation of your identity.
9. Data Retention
We retain your Personal Information for as long as necessary to fulfill the purposes for which it was collected and to comply with legal obligations:
-
Order and transaction data: Retained for a minimum of seven (7) years from the transaction date for tax, accounting, and legal compliance;
-
Customer account data: Retained for the duration of your account and for three (3) years following account closure or last activity;
-
Marketing data: Retained until you unsubscribe or request deletion, plus a suppression record to ensure we honor your opt-out;
-
Cookie and analytics data: Retained for the duration of the cookie (session to 2 years);
-
Customer support records: Retained for three (3) years from the last communication.
When retention periods expire, we securely delete or anonymize your Personal Information. Anonymized or aggregated data may be retained indefinitely.
10. Data Security
We implement appropriate technical and organizational security measures to protect your Personal Information:
- SSL/TLS encryption for all data transmitted between your browser and our Site;
- PCI DSS-compliant payment processing through Shopify Payments — we do not store your full payment card details;
- Access controls limiting Personal Information access to authorized personnel with a legitimate business need;
- Regular security assessments and monitoring.
Data Breach Notification: In the event of a data breach affecting your Personal Information, we will notify affected individuals and applicable regulatory authorities as required by Delaware Code Title 6, Chapter 12B, applicable US state breach notification laws, and Canada's PIPEDA breach notification requirements.
No method of transmission or electronic storage is 100% secure. While we take reasonable steps to protect your information, we cannot guarantee absolute security. You are responsible for maintaining the security of your account credentials.
11. International Data Transfers
Novablue Labs LLC is based in the United States. Personal Information collected from Canadian customers will be transferred to and processed in the United States, where data protection laws may differ from those in Canada. By using our Site or providing your information, you consent to this transfer. We take appropriate safeguards to protect your information regardless of where it is processed.
12. Children's Privacy
Our Site and services are intended for adults.
-
United States: Our Site is not directed to children under 13. In compliance with the Children's Online Privacy Protection Act (COPPA), we do not knowingly collect Personal Information from children under 13.
-
Canada: We do not knowingly collect Personal Information from children without parental consent as required by applicable Canadian law.
If you believe a child has provided us with Personal Information, please contact us at privacy@novablue-labs.com and we will promptly delete it.
13. Third-Party Links & Services
Our Site may contain links to third-party websites, services, or applications not operated by Novablue Labs LLC. This Privacy Policy does not apply to those third-party sites. We are not responsible for the privacy practices, content, or security of any third-party site. We encourage you to review the privacy policies of any third-party site you visit.
14. Limitation of Liability
To the fullest extent permitted by applicable law, Novablue Labs LLC's total liability arising from or related to this Privacy Policy shall not exceed the amount you paid to Novablue Labs LLC in the twelve (12) months preceding the event giving rise to the claim. Nothing in this Policy limits or excludes liability that cannot be limited or excluded by law, including statutory rights and remedies under applicable US state privacy laws or Canadian privacy law.
15. Complaints
If you have concerns about how we handle your Personal Information, please contact us first at privacy@novablue-labs.com. We will investigate and respond promptly.
If you are not satisfied with our response, you may lodge a complaint with the relevant authority:
16. Contact Information
For any questions, concerns, requests, or complaints regarding this Privacy Policy or our data practices:
Novablue Labs LLC
511 N Boardwalk, 1st Floor
Rehoboth Beach, DE 19971
United States
Privacy Inquiries: privacy@novablue-labs.com
General Support: support@novablue-labs.com
Phone: +1 302-779-0033
Hours: Monday–Friday, 9:00 AM – 6:00 PM EST
17. Changes to This Privacy Policy
We may update this Privacy Policy from time to time to reflect changes to our practices, technology, legal requirements, or other factors. When we make material changes, we will update the "Last Updated" date at the top of this policy and, where required by law, provide notice via email or a prominent notice on our Site. The version of this Policy in effect at the time of your interaction with our Site will govern that interaction.
18. Governing Law
This Privacy Policy is governed by the laws of the State of Delaware, United States, without regard to its conflict of law provisions, except where superseded by applicable data protection laws (including CCPA/CPRA, DPDPA, other US state privacy laws, and Canadian privacy law).
By using novablue-labs.com, you acknowledge that you have read this Privacy Policy.