NUVIA← Back to site
Legal

Privacy Policy

Effective date: 2026-05-28

This Privacy Policy explains how Hydrascale Technologies LLC ("Hydrascale," "Nuvia," "we," "us," or "our") processes your personal data when you visit getnuvia.co (the "Site"), purchase our products, or otherwise interact with us. It is provided in accordance with the EU General Data Protection Regulation (Regulation (EU) 2016/679, "GDPR") and applicable national data-protection laws.

1. Data controller and EU representative

Data controller: Hydrascale Technologies LLC 254 Chapman Rd, Newark, DE 19702, United States Email: legal@hydrascale.io

Because we are established outside the EU/EEA but offer goods to individuals in the EU/EEA, we have appointed an EU representative under Article 27 GDPR:

EU representative: Hydrascale Technologies LLC Email: legal@hydrascale.io

You may contact our EU representative on all matters relating to the processing of your personal data.

2. What personal data we collect

Data you provide:

  • Identity and contact details (name, email, phone, shipping and billing address).
  • Order details and cart contents.
  • Communications you send us (support requests, reviews, survey responses).
  • Marketing preferences and opt-ins (email and SMS).

Payment data. Payments are handled by our third-party payment processor(s). We do not store full card numbers; we receive limited transaction data (e.g., confirmation, last four digits, billing postcode).

Data collected automatically:

  • Device and usage data (IP address, browser type, pages viewed, referring URLs, timestamps).
  • Cookies and similar technologies, including analytics and advertising tags (e.g., Meta Pixel, Google tags). Non-essential cookies are only set with your consent — see our Cookie Policy.

We do not seek to collect special-category data. Nuvia sells dietary supplements and wellness products direct to consumers; we do not require health data to complete a purchase. Please do not send us special-category data unless necessary.

3. Purposes and legal bases for processing

Purpose Legal basis (GDPR Art. 6)
Process and deliver your orders; manage your account Performance of a contract (Art. 6(1)(b))
Provide customer support Performance of a contract / legitimate interests (Art. 6(1)(b)/(f))
Send transactional messages (order, shipping) Performance of a contract (Art. 6(1)(b))
Send marketing email/SMS Consent (Art. 6(1)(a)); you may withdraw at any time
Analytics and advertising cookies Consent (Art. 6(1)(a))
Fraud prevention, security, service improvement Legitimate interests (Art. 6(1)(f))
Comply with legal/accounting/tax obligations Legal obligation (Art. 6(1)(c))

Where we rely on legitimate interests, we have balanced those interests against your rights. You may object to such processing (see Section 7).

4. Marketing email and SMS

With your consent, we may send marketing messages. You can withdraw consent at any time — unsubscribe via the link in any email, or reply STOP to SMS (reply HELP for help; message/data rates may apply). Withdrawing consent does not affect the lawfulness of processing before withdrawal. Consent to marketing is not a condition of purchase.

5. Who we share data with (recipients)

  • Processors acting on our behalf: payment processing, order fulfilment and shipping/carriers, email/SMS delivery, hosting, analytics, customer support. They process data under written agreements and only on our instructions.
  • Advertising/analytics partners, in connection with consented cookies (see Cookie Policy).
  • Authorities and advisers where required by law, or to establish, exercise, or defend legal claims.
  • Business transfers — in connection with a merger, acquisition, financing, or sale of assets.

We do not sell your personal data.

6. International transfers

We are based in the United States, and some of our processors are located outside the EU/EEA. Where we transfer your personal data outside the EU/EEA, we rely on appropriate safeguards under Chapter V GDPR — primarily the European Commission's Standard Contractual Clauses (SCCs), together with supplementary measures where needed. You may request a copy of the relevant safeguards by contacting us.

7. Your rights

Under the GDPR you have the right to:

  • Access your personal data and receive a copy.
  • Rectify inaccurate or incomplete data.
  • Erase your data ("right to be forgotten") in certain circumstances.
  • Restrict or object to processing, including processing based on legitimate interests and direct marketing.
  • Data portability — receive your data in a structured, commonly used, machine-readable format.
  • Withdraw consent at any time, where processing is based on consent.

To exercise any right, email legal@hydrascale.io or our EU representative. We respond within one month (extendable for complex requests). You also have the right to lodge a complaint with your local data protection supervisory authority. A list of EU/EEA authorities is available at https://edpb.europa.eu/about-edpb/about-edpb/members_en.

8. Data retention

We keep personal data only as long as necessary for the purposes above: order and transaction records for the period required by tax/accounting law; account data while your account is active; marketing data until you withdraw consent or become inactive. We then delete or anonymise it.

9. Security

We use appropriate technical and organisational measures to protect personal data. No method of transmission or storage is completely secure, and we cannot guarantee absolute security.

10. Children

The Site is intended for adults aged 18 and over. We do not knowingly process the personal data of children below the digital-consent age applicable in their EU member state.

11. Automated decision-making

We do not make decisions producing legal or similarly significant effects about you based solely on automated processing.

12. Changes to this policy

We may update this Privacy Policy. The "Effective date" reflects the latest version; material changes will be posted on this page.

13. Contact

Data controller: Hydrascale Technologies LLC — 254 Chapman Rd, Newark, DE 19702, United States — legal@hydrascale.io EU representative: Hydrascale Technologies LLC — legal@hydrascale.io