Privacy Policy

Effective date: 23 December 2025

This Privacy Policy describes how NovaSpring (“we”, “us”, “our”) collects, uses, stores, and protects personal data in accordance with applicable European data protection laws, including the General Data Protection Regulation (GDPR).

1. Who We Are

Novaspring operates as a commercial and technical interface for the supply of leaf spring products for commercial vehicles. Manufacturing, invoicing and shipment of goods are performed by our production partner, Zibo Yuxin Automotive Parts Co., Ltd., located at: North side of Xiaodian Village, Baita Town, Boshan, Zibo City, Shandong Province, China.

2. Personal Data We Collect

Depending on your interaction with us, we may collect:

  • Contact and identity data: name, surname, company name (if applicable), job title/role, billing and shipping address.
  • Communication data: email address, phone number, correspondence via forms, email, or telephone.
  • Transaction and order data: order details, shipment tracking, invoices, payment details.
  • Technical data: IP address, browser type, device information, cookies, and similar technologies.
  • Survey or feedback data: responses to forms, questionnaires, or evaluations.

We collect only data necessary for the purposes described in this Policy, following the principle of data minimization.

3. When We Collect Personal Data

We typically collect personal data in the following situations:

  • When you contact us via website forms or email inquiries.
  • When you communicate with us by phone or other correspondence.
  • When you place orders, request quotations, or enter into contracts with us.
  • When you participate in surveys, evaluations, or provide feedback.
  • When you visit our website (subject to your cookie preferences).

4. Automatic Data Collection (Server Logs)

When you access our website, certain technical information may be collected automatically, such as IP address, browser type, device information, referring pages, and access timestamps. This data is used to maintain website security, diagnose technical issues, and improve website performance.

5. Purpose and Legal Basis for Processing

We process personal data for the following purposes:

  • Order and delivery management: processing orders, arranging shipment, invoicing, and payment.
  • Communication: responding to inquiries, requests, and customer service needs.
  • Business relationship management: maintaining records and managing suppliers, customers, and partners.
  • Legal compliance: complying with contractual, trade, customs, export/import, and tax obligations.
  • Legitimate interests: fraud prevention, data integrity, accounting, and internal recordkeeping.
  • Website analytics and personalization: improving website functionality and user experience (only with consent or where lawful).

The legal basis for processing is primarily:

  • Performance of a contract (e.g., fulfilling orders).
  • Compliance with legal obligations.
  • Legitimate interests (internal business operations).
  • Consent (e.g., marketing communications and certain cookies).

6. Data Storage, Security, and International Transfers

Personal data is stored only as long as necessary for the purposes above or as required by law. Data is stored securely on servers operated by NovaSpring or authorized service providers.

As production and certain IT services are located in China, personal data may be transferred outside the EU/EEA. NovaSpring ensures that transfers outside the EU/EEA comply with GDPR requirements, including the use of Standard Contractual Clauses (SCCs) or equivalent safeguards.

How We Protect Personal Data

We implement appropriate technical and organizational measures to protect personal data against unauthorized access, alteration, disclosure, or destruction. These measures may include access controls, role-based permissions, secure hosting environments, encryption where appropriate, and monitoring to help maintain confidentiality and integrity.

7. Sharing Data With Third Parties

We may share personal data with:

  • Logistics providers for shipment and delivery.
  • Payment processors for invoicing and payment processing.
  • IT service providers and website hosting companies.
  • Legal or regulatory authorities if required by law (customs, export/import compliance, taxation).

All third parties are contractually required to process personal data securely and in accordance with applicable data protection laws.

Third-Party Websites and Links

Our website may include links to third-party websites. We are not responsible for the content, privacy policies, or practices of those external sites. Please review their privacy policies before submitting personal data to them.

8. Marketing and Communications

  • We send marketing communications only if you have provided consent (e.g., newsletter subscription).
  • You may withdraw consent at any time by using the “unsubscribe” link in emails or by contacting us directly.
  • NovaSpring does not sell personal data to third parties for marketing purposes.

9. Your Rights Under GDPR

If you are located in the EU/EEA, you have the right to:

  • Request access to your personal data.
  • Request rectification of inaccurate or incomplete data.
  • Request erasure (“right to be forgotten”) where applicable.
  • Request restriction of processing in certain circumstances.
  • Receive your personal data in a structured, machine-readable format (data portability).
  • Object to processing based on legitimate interests or direct marketing.
  • Withdraw consent at any time (where processing is based on consent).
  • Lodge a complaint with a supervisory authority in your EU country.

How to Exercise Your Rights

To exercise your rights, please contact us at info@novaspring.com. We may request information necessary to verify your identity before fulfilling your request.

10. Children and Age Limitation

Our services are intended for business clients and legally capable individuals. We do not knowingly collect data from individuals under 16 years old.

11. Cookies and Similar Technologies

Our website uses cookies as described in our Cookie Policy. You can manage cookies via browser settings. Some website features may not function properly if cookies are disabled.

12. Updates to This Policy

NovaSpring may update this Privacy Policy from time to time. The effective date above reflects the latest update. Material changes will be communicated via our website or other appropriate channels.

13. Contact Information

NovaSpring
Registered address: [Insert company’s registered address]
Email: info@novaspring.com
Phone: [Insert phone number]