// LEGAL_FRAMEWORK

Legal Protocols

Comprehensive legal documentation compliant with EU GDPR regulations. All policies govern the operations of NovastraHolding.

01 Privacy Policy

Last updated: January 2026

1. Data Controller

NovastraHolding, located at Calle Litago 1 Izquierda, Piso 1 A, Madrid, Spain, is the data controller responsible for the processing of personal data collected through this website and related services.

2. Data We Collect

We collect personal data that you voluntarily provide when you contact us, request services, or interact with our platform. This includes: your full name, email address, phone number, company name, project details, and any information included in message communications.

We also automatically collect certain technical data when you visit our website, including: IP address, browser type and version, operating system, referral source, pages visited, time spent on pages, and date/time of your visit. This data is collected through server logs and analytics tools.

3. Legal Basis for Processing

We process your personal data under the following legal bases as defined by Article 6 of the EU General Data Protection Regulation (GDPR): (a) Consent: where you have given explicit consent for specific purposes; (b) Contract: where processing is necessary for the performance of a contract to which you are a party; (c) Legitimate Interest: where processing is necessary for our legitimate business interests, such as improving our services and maintaining business records.

4. How We Use Your Data

Your personal data is used for: responding to your inquiries and providing requested services, communicating project updates and deliverables, processing payments and maintaining financial records, improving our website and service offerings, complying with legal obligations, and sending marketing communications only with your explicit consent.

5. Data Retention

We retain your personal data only for as long as necessary to fulfill the purposes for which it was collected. Contact form submissions are retained for up to 24 months. Contract-related data is retained for the duration of the business relationship plus 6 years as required by Spanish commercial law. Analytics data is retained for up to 38 months in anonymized form.

6. Data Sharing

We do not sell your personal data to third parties. We may share your data with: trusted service providers who assist in our operations (hosting, email delivery, payment processing), professional advisors including lawyers and accountants, and law enforcement or regulatory authorities when legally required.

7. Your Rights Under GDPR

Under the EU GDPR, you have the following rights: Right of Access (Article 15) — request a copy of all personal data we hold about you. Right to Rectification (Article 16) — request correction of inaccurate data. Right to Erasure (Article 17) — request deletion of your data where there is no compelling legal reason for continued processing. Right to Restriction (Article 18) — request limitation of processing under certain circumstances. Right to Data Portability (Article 20) — receive your data in a structured, machine-readable format. Right to Object (Article 21) — object to processing based on legitimate interests or direct marketing.

8. International Data Transfers

If your data is transferred outside the European Economic Area (EEA), we ensure appropriate safeguards are in place, including Standard Contractual Clauses approved by the European Commission or adequate data protection agreements with recipients.

9. Contact for Privacy Matters

To exercise your rights or for any privacy-related inquiries, contact us at: [email protected] or write to Calle Litago 1 Izquierda, Piso 1 A, Madrid, Spain. You also have the right to lodge a complaint with the Spanish Data Protection Agency (AEPD) at www.aepd.es.

02 Cookies Policy

Last updated: January 2026

1. What Are Cookies

Cookies are small text files placed on your device when you visit a website. They are widely used to enable websites to function properly, improve user experience, and provide analytical information to website operators.

2. How NovastraHolding Uses Cookies

We use cookies for the following purposes: Essential cookies required for the website to function correctly (session management, security tokens), analytics cookies to understand how visitors interact with our website (page views, traffic sources, user behavior patterns), and preference cookies to remember your settings and choices.

3. Types of Cookies We Deploy

Strictly Necessary Cookies: These are essential for website operation. They enable core functionality such as security, network management, and account access. You cannot opt out of these cookies as the website cannot function properly without them.

Performance and Analytics Cookies: These cookies collect anonymous information about how visitors use our website, including which pages are visited most frequently and any error messages encountered. This data is aggregated and anonymized.

Functionality Cookies: These cookies remember choices you make to provide enhanced, personalized features such as language preferences and region-specific content.

4. Managing Cookies

You can control and manage cookies through your browser settings. Most browsers allow you to refuse or delete cookies. Please note that disabling certain cookies may affect website functionality. You can also manage your cookie preferences through our cookie consent banner displayed upon your first visit.

5. Third-Party Cookies

Some cookies are placed by third-party services that appear on our pages, including Google Analytics for website analytics. We do not control the use of these cookies. Please refer to the respective privacy policies of these third-party services for more information.

6. Cookie Duration

Session cookies are temporary and are deleted from your device when you close your browser. Persistent cookies remain on your device for a set period or until you delete them manually. Our cookie consent preference is stored as a persistent cookie for 12 months.

03 Refund Policy

Last updated: January 2026

1. Scope

This refund policy applies to all services provided by NovastraHolding, registered at Calle Litago 1 Izquierda, Piso 1 A, Madrid, Spain. It covers digital design, development, branding, and consulting services offered through our website and direct agreements.

2. Pre-Project Withdrawal

If you wish to cancel a project before any work has commenced, you are entitled to a full refund of any advance payment within 14 business days. Once work has commenced, cancellation terms are governed by the project milestone structure.

3. Milestone-Based Refunds

Projects are delivered in defined milestones. If a project is cancelled after completion of one or more milestones, you will be invoiced for all completed work up to and including the current milestone. Any prepayment for uncompleted milestones will be refunded within 14 business days of the cancellation request.

4. Deliverable Disputes

If you are dissatisfied with a delivered milestone, you must notify NovastraHolding within 7 calendar days of delivery. We will review the deliverable against the agreed specifications. If the deliverable does not match the specifications, we will revise the work at no additional cost within 10 business days. If the dispute cannot be resolved, a partial refund proportional to the unresolved portion may be issued at NovastraHolding's discretion.

5. Non-Refundable Items

The following are non-refundable: completed and approved milestones where written sign-off has been provided, third-party costs incurred on your behalf (stock images, domain registrations, hosting fees, software licenses), and custom work that has been delivered and accepted.

6. Refund Process

To request a refund, contact us at [email protected] with your project reference, the reason for the refund request, and any supporting documentation. We will acknowledge your request within 2 business days and aim to resolve all refund matters within 14 business days of acknowledgment.

7. Governing Law

This refund policy is governed by Spanish law. Any disputes arising from this policy shall be subject to the exclusive jurisdiction of the courts of Madrid, Spain.

04 Terms of Service

Last updated: January 2026

1. Agreement to Terms

By accessing the website and services of NovastraHolding, located at Calle Litago 1 Izquierda, Piso 1 A, Madrid, Spain, you agree to be bound by these Terms of Service. If you do not agree to these terms, you must not access or use our services.

2. Services Description

NovastraHolding provides digital studio services including brand identity design, website development, UI/UX design, motion graphics, digital marketing strategy, content creation, and related digital services. All services are performed with professional diligence and in accordance with industry standards.

3. Project Engagement and Scope

Each project engagement begins with a written agreement specifying the scope, deliverables, timeline, and pricing. Any work outside the agreed scope requires a formal change request and may incur additional charges. NovastraHolding reserves the right to refuse scope expansion requests that compromise project quality or timeline.

4. Payment Terms

Payments are due according to the milestones defined in the project agreement. Invoices are payable within 14 calendar days of issue. Late payments may incur a statutory interest rate of 4% per annum as permitted under Spanish commercial law. All prices are expressed in Euros and are exclusive of applicable taxes unless otherwise stated.

5. Intellectual Property

Upon full payment, all intellectual property rights for the final delivered work products transfer to the client. NovastraHolding retains the right to display completed work in portfolio presentations and case studies unless explicitly prohibited in writing. Pre-existing intellectual property, frameworks, and tools used in the creation process remain the property of NovastraHolding.

6. Confidentiality

Both parties agree to maintain the confidentiality of proprietary information exchanged during the course of the engagement. This obligation survives the termination of the project for a period of 24 months. Confidential information shall not be disclosed to third parties without prior written consent.

7. Limitation of Liability

NovastraHolding's total liability for any claims arising from or related to the services provided shall not exceed the total fees paid by the client for the specific project giving rise to the claim. NovastraHolding shall not be liable for indirect, incidental, consequential, or punitive damages.

8. Termination

Either party may terminate the agreement with 14 days written notice. Upon termination, the client shall pay for all work completed up to the termination date. NovastraHolding shall deliver all completed work products upon receipt of final payment.

9. Force Majeure

Neither party shall be liable for delays or failures in performance resulting from circumstances beyond reasonable control, including but not limited to natural disasters, pandemics, government restrictions, or infrastructure failures.

10. Governing Law and Jurisdiction

These Terms of Service are governed by the laws of Spain. Any dispute arising from these terms shall be subject to the exclusive jurisdiction of the courts of Madrid, Spain. In accordance with EU consumer protection regulations, you may also submit disputes through the European Online Dispute Resolution platform at ec.europa.eu/odr.