Privacy Policy

Novalyra LLC, doing business as Novalyra Group ("Novalyra," "we," "us," or "our"), respects your privacy and is committed to protecting your personal information. This Privacy Policy describes how we collect, use, disclose, and safeguard information when you visit our website at novalyragroup.com, contact us, or engage us for digital marketing and brand strategy consulting services. Please read this policy carefully. If you disagree with its terms, please discontinue use of our site and services.

1. Information We Collect

We collect several categories of information in order to provide and improve our services.

Personal Information

When you fill out a contact form, request a consultation, or enter into a service agreement with us, we may collect:

• Full name and job title
• Email address and phone number
• Billing address and mailing address
• Payment card details (processed and vaulted by Stripe - we do not store raw card data)
• Digital signatures on service agreements

Business Information

To deliver marketing consulting services, we may collect:

• Company name, industry, and business description
• Website URLs and social media account handles
• Advertising platform credentials (e.g., Google Ads, Meta Business Manager)
• Existing marketing materials, brand assets, and style guides
• Revenue figures, customer data, and analytics access that you voluntarily share

Usage Data

We automatically collect certain technical information when you visit our website, including:

• IP address and approximate geographic location
• Browser type, version, and operating system
• Pages visited, time on page, and referring URLs
• Device type and screen resolution
• Date and time of each request

Cookies

We use cookies and similar tracking technologies to enhance your experience on our website. See Section 7 (Cookie Policy) for full details on types of cookies used and how to manage them.

2. How We Use Your Information

We use the information we collect for the following purposes:

• Service Delivery: To perform digital marketing, brand strategy, SEO, paid advertising, social media management, and analytics consulting as outlined in your Statement of Work.
• Communication: To respond to inquiries, send project updates, schedule calls, and deliver reports and deliverables.
• Billing and Payments: To process invoices, charge retainer fees, and manage payment records via Stripe.
• Service Improvement: To analyze how clients use our services, identify opportunities to improve our methodologies, and develop new service offerings.
• Marketing: To send newsletters, case studies, and promotional content about our services, with your consent where required by law. You may opt out at any time.
• Legal Compliance: To comply with applicable laws, respond to legal process, and enforce our agreements.

3. Information Sharing and Disclosure

We do not sell, rent, or trade your personal information to third parties for their own marketing purposes. We may share your information in the following limited circumstances:

Service Providers

We work with trusted third-party service providers who assist us in operating our business, including payment processing (Stripe), cloud storage, email delivery, project management tools, and analytics platforms. These providers are contractually bound to handle your data only as directed by us and in accordance with applicable privacy laws.

Legal Requirements

We may disclose your information if required to do so by law or in response to valid requests by public authorities (e.g., a court order, government agency request, or subpoena). We will notify you of such requests to the extent permitted by law.

Business Transfers

In the event of a merger, acquisition, sale of assets, or other business transfer, your information may be transferred as part of that transaction. We will provide notice before your personal information becomes subject to a different privacy policy.

4. Payment Processing

All payment transactions are processed through Stripe, a PCI-DSS Level 1 certified payment processor. This is the highest level of certification available in the payments industry.

• What Stripe stores: Full payment card details, billing address, and transaction history are stored within Stripe's secure vault.
• What we store: We retain only a tokenized reference to your payment method, your billing address for invoicing purposes, and transaction records (amounts, dates, and service descriptions) for our accounting records.
• What we never store: We never store raw card numbers (PAN), CVV/CVC security codes, or full magnetic stripe data on our own systems.

Stripe's privacy policy is available at stripe.com/privacy.

5. Data Security

We implement and maintain reasonable administrative, technical, and physical security measures designed to protect your personal information from unauthorized access, disclosure, alteration, or destruction. These measures include:

• TLS/SSL encryption for all data transmitted to and from our website
• Access controls that limit employee access to personal data on a need-to-know basis
• Regular security assessments and vulnerability reviews
• Multi-factor authentication for internal systems and client-shared platforms
• Secure credential management for any advertising or analytics accounts entrusted to us

Please be aware that no method of transmission over the Internet or method of electronic storage is 100% secure. While we strive to use commercially acceptable means to protect your information, we cannot guarantee its absolute security.

6. Your Rights and Choices

Depending on your location, you may have the following rights regarding your personal information:

• Access: Request a copy of the personal information we hold about you.
• Correction: Request that we correct inaccurate or incomplete personal information.
• Deletion: Request that we delete your personal information, subject to certain legal exceptions (e.g., records we are required to retain for tax or legal compliance purposes).
• Opt-Out of Marketing: Unsubscribe from marketing emails by clicking the unsubscribe link in any email or by contacting us directly.
• Data Portability: Request that we provide your data in a structured, machine-readable format.

To exercise any of these rights, please contact us at support@novalyragroup.com. We will respond to verified requests within 30 days.

7. Cookie Policy

Cookies are small text files stored on your device when you visit our website. We use the following categories of cookies:

Strictly Necessary Cookies

Required for the website to function. These include session cookies, security tokens, and form submission cookies. These cannot be disabled without affecting site functionality.

Analytics Cookies

Help us understand how visitors interact with our site by collecting anonymized usage data. We use tools such as Google Analytics for this purpose. Data collected includes page views, session duration, traffic sources, and general geographic location.

Functional Cookies

Remember your preferences (such as form fields) to provide a more personalized experience on return visits.

Marketing Cookies

May be set by advertising partners (such as Google and Meta) to build a profile of your interests and show relevant ads on other sites. These cookies work by uniquely identifying your browser and internet device.

Managing Cookies

You can control and delete cookies through your browser settings. Most browsers allow you to refuse cookies or alert you before they are placed. Note that disabling certain cookies may affect the functionality of our website. You can also opt out of Google Analytics tracking by installing the Google Analytics opt-out browser add-on available at tools.google.com/dlpage/gaoptout.

8. Third-Party Services

In the course of providing our services, we may use or integrate with third-party platforms and tools, including:

• Analytics platforms: Google Analytics, Google Search Console, and similar tools to measure campaign and website performance.
• Advertising platforms: Google Ads, Meta Ads, LinkedIn Campaign Manager, and other paid media platforms used to manage client campaigns.
• CRM and project management tools: Software used internally to manage client relationships, tasks, and deliverables.
• Email marketing tools: Platforms used to schedule, send, and analyze email campaigns on behalf of clients.

Each third-party service operates under its own privacy policy. We encourage you to review the privacy policies of any third-party services relevant to your engagement with us.

9. Data Retention

We retain your personal information only for as long as necessary to fulfill the purposes for which it was collected, including satisfying any legal, accounting, or reporting requirements. Our general retention schedule is:

• Active client records: Retained for the duration of the engagement and for 7 years after termination for tax and legal compliance purposes.
• Prospective client inquiries: Retained for up to 2 years if no engagement commences.
• Website analytics data: Retained per the default retention settings of our analytics providers (typically 14 months for Google Analytics).
• Marketing communication preferences: Retained until you opt out, at which point your preference is recorded and marketing emails cease.

Upon request, we will delete personal information that is no longer required for legal or contractual purposes within 30 days.

10. International Data Transfers

Novalyra LLC is based in the United States. If you are located outside the United States and provide personal information to us, please be aware that your information will be transferred to, stored, and processed in the United States. U.S. data protection laws may differ from those in your country of residence.

For clients in the European Economic Area (EEA) or United Kingdom, we rely on applicable transfer mechanisms (such as Standard Contractual Clauses) to lawfully transfer personal data. Please contact us for more information about the safeguards we use.

11. Children's Privacy

Our website and services are not directed to individuals under the age of 18. We do not knowingly collect personal information from children under 18. If we become aware that we have inadvertently collected personal information from a child under 18, we will take steps to delete that information promptly. If you believe we have collected information from a minor, please contact us at support@novalyragroup.com.

12. California Privacy Rights (CCPA)

If you are a California resident, the California Consumer Privacy Act (CCPA) provides you with specific rights regarding your personal information:

• Right to Know: You have the right to request disclosure of the categories and specific pieces of personal information we have collected about you.
• Right to Delete: You have the right to request deletion of personal information we have collected about you, subject to certain exceptions.
• Right to Non-Discrimination: We will not discriminate against you for exercising your CCPA rights. We will not deny services, charge different prices, or provide a different level of service based on your exercise of these rights.
• Right to Opt-Out of Sale: We do not sell personal information, so this right does not currently apply. If our practices change, we will update this policy and provide a "Do Not Sell My Personal Information" link.

To submit a CCPA rights request, contact us at support@novalyragroup.com with the subject line "CCPA Rights Request." We may need to verify your identity before processing your request.

13. Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, technology, legal requirements, or other factors. When we make material changes, we will update the "Last Updated" date at the top of this page and, where required by law, provide additional notice (such as by email to active clients). We encourage you to review this policy periodically.

14. Contact Information

If you have questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us: