Privacy Policy

This Privacy Policy explains how Novi Education PTE Ltd collects, uses, discloses, stores and protects personal data in connection with the website https://novieducation.com (the “Website”).

This Privacy Policy is intended for an international audience. Novi Education PTE Ltd is established in Singapore and processes personal data in accordance with applicable data protection laws, including, where relevant, the Singapore Personal Data Protection Act 2012 (“PDPA”), the EU General Data Protection Regulation (“GDPR”), the UK GDPR and other applicable privacy laws.

This Privacy Policy may be updated from time to time. Any changes will become effective when published on this page.

1. Data Controller / Organisation Responsible for Personal Data

The organisation responsible for the processing of personal data through the Website is:

Name: Novi Education PTE Ltd
Registered office: 390 Orchard Road, Palais Renaissance, Singapore 238871
Company Registration Number: 202345275G
E-mail: info@novieducation.com

For the purposes of the GDPR and UK GDPR, where applicable, Novi Education PTE Ltd acts as the data controller for the personal data collected through the Website.

For the purposes of the Singapore PDPA, Novi Education PTE Ltd is the organisation responsible for the collection, use, disclosure and protection of personal data.

2. Scope of this Privacy Policy

This Privacy Policy applies to personal data collected through:

the Website;
contact forms and enquiry forms;
newsletter or communication forms, where available;
analytics, security and performance tools;
marketing and remarketing tools, only where enabled and permitted by law;
payment or transactional services, where available;
communications sent to Novi Education PTE Ltd by e-mail or other contact channels.

This Privacy Policy does not apply to third-party websites, platforms or services that may be linked from the Website. Such third parties process personal data according to their own privacy policies.

3. Personal Data We May Collect

Depending on how users interact with the Website, we may collect the following categories of personal data:

Category of Data	Examples	Main Purpose
Identification data	Name, surname, organisation, role or professional title	Responding to enquiries, managing professional or educational communications
Contact data	E-mail address, phone number, contact details	Contact forms, support, information requests, commercial or institutional communications
Technical data	IP address, browser type, device information, operating system, language settings	Website operation, security, diagnostics, analytics and fraud prevention
Usage data	Pages visited, time spent on pages, interactions, navigation behaviour, referring URLs	Analytics, performance measurement and improvement of the Website
Marketing data	Consent preferences, campaign interactions, advertising identifiers, remarketing audience data	Marketing, remarketing and campaign measurement, only where legally permitted and consented to where required
Payment or transactional data	Billing details, payment-related identifiers, order or transaction references	Processing purchases, subscriptions or payments, where such features are available
Communication data	Messages sent through forms, e-mails, enquiries or support requests	Responding to requests, managing communications and keeping records where necessary

We do not intentionally collect special categories of personal data through the Website, unless such data is voluntarily provided by the user or is required for a specific service and processed in accordance with applicable law.

4. Purposes of Processing

We may process personal data for the following purposes:

to operate, maintain and secure the Website;
to respond to contact requests, enquiries or messages;
to provide information about Novi Education’s services, programmes, projects or initiatives;
to manage relationships with educators, institutions, partners, suppliers or other professional contacts;
to improve the Website, user experience, content and communications;
to carry out analytics and performance measurement;
to run marketing, remarketing or advertising activities, only where permitted by law and subject to consent where required;
to manage payment or transactional features, where available;
to comply with legal, tax, accounting, regulatory or contractual obligations;
to prevent misuse, fraud, security incidents or unlawful activities;
to establish, exercise or defend legal claims.

5. Legal Bases for Processing

Depending on the applicable law and the specific processing activity, we rely on one or more of the following legal bases:

5.1 Singapore PDPA

Where the Singapore PDPA applies, we collect, use or disclose personal data on the basis of consent, deemed consent, contractual or business necessity, legitimate interests where permitted, legal obligations, or other exceptions and bases recognised under the PDPA.

Users may withdraw consent at any time by contacting us. Please note that withdrawal of consent may affect our ability to provide certain services or respond to specific requests.

5.2 GDPR and UK GDPR, where applicable

Where the GDPR or UK GDPR applies, the legal bases may include:

Consent – for example, for non-essential cookies, marketing communications or remarketing activities where consent is required;
Performance of a contract – where processing is necessary to provide a service requested by the user or manage a contractual relationship;
Legal obligation – where processing is necessary to comply with applicable laws, accounting, tax or regulatory duties;
Legitimate interests – for example, Website security, service improvement, business communications, fraud prevention or legal claims, provided that such interests are not overridden by the user’s rights and freedoms.

6. Contact Forms and Communications

When users submit a contact form or contact us by e-mail, we process the information voluntarily provided by the user, such as name, e-mail address, organisation, role, message content and any additional information included in the request.

We use this data to respond to the request, manage the communication, provide information and keep appropriate business records.

Users should not submit sensitive personal data through contact forms unless specifically requested and necessary for the relevant service.

7. Analytics

The Website may use analytics services to understand how users interact with the Website, measure performance, detect technical issues and improve content and usability.

Analytics data may include IP address, device information, browser information, pages visited, time spent on pages, referring URLs and interactions with Website elements.

Where analytics tools involve non-essential cookies or third-party tracking, they are activated only after consent where required by applicable law.

8. Marketing and Remarketing

We may use marketing and remarketing tools to measure advertising performance, display relevant content or ads, create audience segments or understand the effectiveness of campaigns.

Such activities may involve third-party providers, including Google Ads or similar platforms.

Marketing and remarketing activities are carried out only where permitted by applicable law and, where required, only after the user has provided consent.

Users may withdraw their consent or change cookie preferences at any time through the cookie settings available on the Website.

9. Cookies and Similar Technologies

The Website uses cookies and similar technologies for technical, security, analytics, marketing, media and functional purposes.

Essential cookies are necessary for the Website to function properly and may be used without prior consent where permitted by law.

Non-essential cookies, including analytics, marketing, remarketing and media cookies, are used only with the user’s consent where required.

For detailed information about cookies, consent settings, cookie categories, third-party services and how to withdraw consent, please refer to our Cookie Policy.

10. Hosting Provider

The Website is hosted and technically operated through the following hosting provider:

Provider Name: SERVERPLAN
Address: Via Giacomo Leopardi 22, 03043 Cassino (FR), Italy
E-mail: dpo@serverplan.com
Website: www.serverplan.com

The hosting provider may process technical data and server logs necessary for Website operation, security, maintenance, backup and performance.

11. Data Processors and Service Providers

We may use external service providers to perform certain activities on our behalf. These providers may process personal data only in accordance with our instructions, contractual obligations and applicable law.

Service providers may include:

hosting and infrastructure providers;
website maintenance and security providers;
analytics providers;
payment or transactional providers, where available;
marketing and advertising platforms, where enabled and consented to where required;
communication, CRM or e-mail service providers, where used;
professional advisers, accountants or legal consultants, where necessary.

The main third-party providers currently or potentially used in connection with the Website may include:

Google Analytics – Google LLC / Google Ireland Limited, used for analytics and performance measurement, where enabled and subject to consent where required.
Google Ads – Google LLC / Google Ireland Limited, used for advertising, remarketing and campaign measurement, where enabled and subject to consent where required.
Google Pay – Google LLC / Google Ireland Limited, used only where payment or transactional features are enabled.

The actual services active on the Website may vary over time depending on technical configuration, plugins, integrations and business needs.

12. Disclosure of Personal Data

We may disclose personal data to third parties only where necessary and lawful, including:

to service providers acting on our behalf;
to hosting, IT, analytics, security, payment or communication providers;
to professional advisers, auditors, accountants or legal consultants;
to public authorities, regulators, courts or law enforcement bodies where required by law;
to business partners, educational institutions or project partners where necessary for a specific service or initiative and where legally permitted;
in connection with legal claims, compliance, fraud prevention or security investigations;
with the user’s consent, where consent is required.

We do not sell personal data.

13. International Transfers of Personal Data

Novi Education PTE Ltd is established in Singapore, the Website is hosted in Italy, and some technology providers may operate in the European Economic Area, the United States or other countries.

This means that personal data may be transferred to, stored in or accessed from countries other than the user’s country of residence.

Where required by applicable law, we use appropriate safeguards for international transfers, which may include contractual safeguards, data processing agreements, standard contractual clauses, transfer impact assessments, comparable protection requirements under the Singapore PDPA, or other legally recognised transfer mechanisms.

14. Data Retention

We retain personal data only for as long as necessary for the purposes for which it was collected, unless a longer retention period is required or permitted by law.

Retention periods may vary depending on the type of data and the purpose of processing:

contact form and enquiry data may be retained for the time necessary to respond to the request and manage related communications;
business, contractual, payment or accounting records may be retained for the period required by applicable tax, accounting or legal rules;
technical logs may be retained for security, diagnostic and operational purposes for a limited period;
analytics data may be retained according to the settings of the relevant analytics platform;
marketing consent records may be retained to document consent and compliance;
data necessary for legal claims may be retained for the applicable limitation period.

When personal data is no longer necessary, we delete it, anonymise it or otherwise remove the means by which it can be associated with an individual, unless retention is required by law or legitimate business needs.

15. Data Security

We implement reasonable technical and organisational measures designed to protect personal data against unauthorised access, collection, use, disclosure, copying, modification, disposal, loss or similar risks.

These measures may include access controls, secure hosting, password protection, backups, software updates, security monitoring, encrypted communications where appropriate, internal access restrictions and other safeguards proportionate to the risks involved.

No website, online service or electronic transmission can be guaranteed to be completely secure. However, we take reasonable steps to maintain the confidentiality, integrity and availability of personal data.

16. Data Breach Management

If a personal data breach occurs, we will take reasonable steps to assess, contain and mitigate the incident.

Where required by applicable law, we will notify the competent data protection authority and/or affected individuals within the required timeframe.

Under the Singapore PDPA, where a breach is notifiable, organisations must notify the PDPC and/or affected individuals as soon as practicable and in accordance with applicable notification requirements.

Where the GDPR applies, a personal data breach that is likely to result in a risk to individuals’ rights and freedoms must be notified to the competent supervisory authority without undue delay and, where feasible, within 72 hours after becoming aware of it.

17. Children and Minors

The public Website is not specifically directed at children under the age of 16.

If we process personal data relating to minors in connection with specific educational programmes, school partnerships, learning platforms or student-facing services, such processing will be governed by additional privacy information, parental or guardian consent mechanisms, school authorisations or contractual arrangements where required by applicable law.

Parents, guardians, schools or authorised representatives may contact us to request information, correction or deletion of personal data relating to minors, where applicable and legally permitted.

18. User Rights

Depending on the applicable law, users may have rights in relation to their personal data.

18.1 Rights under the Singapore PDPA

Where the Singapore PDPA applies, individuals may have the right to:

request access to personal data held by us;
request correction of inaccurate or incomplete personal data;
withdraw consent for the collection, use or disclosure of personal data, subject to legal or contractual restrictions and reasonable notice;
ask questions or make complaints about how personal data is handled.

18.2 Rights under the GDPR or UK GDPR, where applicable

Where the GDPR or UK GDPR applies, users may have the right to:

Access their personal data;
Rectify inaccurate or incomplete personal data;
Erase personal data in certain circumstances;
Restrict processing in certain circumstances;
Object to processing based on legitimate interests or direct marketing;
Data portability, where applicable;
Withdraw consent at any time where processing is based on consent;
Lodge a complaint with a competent supervisory authority.

To exercise any privacy rights, please contact us at: info@novieducation.com.

We may need to verify the identity of the person making the request before responding.

We will respond within the timeframe required by applicable law. Where the GDPR or UK GDPR applies, we generally respond within one month, unless an extension is permitted due to the complexity or number of requests.

19. Direct Marketing Communications

Where we send direct marketing communications, we do so in accordance with applicable laws and, where required, only with the user’s consent.

Users may unsubscribe or opt out of marketing communications at any time by using the unsubscribe link provided in the communication, where available, or by contacting us at: info@novieducation.com.

Even if users opt out of marketing communications, we may still send non-marketing communications where necessary, such as service-related, transactional, legal or security notices.

20. Third-Party Links

The Website may contain links to third-party websites, services, platforms or social media pages.

We are not responsible for the privacy practices, security or content of third-party websites. Users should review the privacy policies of those third parties before submitting personal data to them.

21. Complaints and Contact Details

If users have questions, requests or complaints about this Privacy Policy or the processing of personal data, they may contact:

E-mail: info@novieducation.com
By post: Novi Education PTE Ltd, 390 Orchard Road, Palais Renaissance, Singapore 238871

We will review and respond to privacy-related requests and complaints in accordance with applicable law.

22. Supervisory Authorities

Depending on the user’s location and the applicable law, users may have the right to contact a data protection authority.

Singapore

Personal Data Protection Commission Singapore — PDPC
Website: www.pdpc.gov.sg

European Economic Area

Users in the European Economic Area may contact the competent data protection authority in their country of residence, place of work or place of alleged infringement.

Where relevant for users in Italy:

Garante per la protezione dei dati personali
Address: Piazza Venezia 11, 00187 Rome, Italy
Phone: +39 06 69677 1
E-mail: protocollo@gpdp.it
Website: www.garanteprivacy.it

United Kingdom

Information Commissioner’s Office — ICO
Website: ico.org.uk

23. Updates to this Privacy Policy

We may update this Privacy Policy to reflect changes in our services, Website configuration, legal obligations, technology providers or data protection practices.

The updated version will be published on this page and will become effective upon publication.

Date of last update: May 13, 2026