Privacy Policy

Last updated: 15 January 2026

Data Controller Information

This privacy policy explains how StellaHub Novaes Ltd ("we", "us", "our") collects, uses, and protects your personal information when you visit our website or use our services. As the data controller, we are responsible for determining how and why your personal data is processed.

Data Controller: StellaHub Novaes Ltd
Registration Number: C41859
Address: Triq il-Vittorja 20, Sliema SLM 4319, Malta
Email: privacy@stellahubnovaes.top
Phone: +356 21402185

Data We Collect

We collect various types of personal data to provide and improve our gym revenue performance analytics services. The data we collect includes information you provide directly to us and information collected automatically through your use of our website and services.

Information You Provide

When you contact us, register for our services, or interact with our platform, we may collect:

  • Name and contact details (email address, phone number)
  • Company or gym information
  • Business requirements and preferences
  • Communication preferences
  • Any other information you choose to provide in forms or communications

Automatically Collected Information

When you visit our website, we automatically collect certain technical information:

  • IP address and location data
  • Browser type and version
  • Device information and operating system
  • Pages visited and time spent on our website
  • Referring website and exit pages
  • Date and time of your visit

How We Use Your Information

We process your personal data for specific, legitimate business purposes. Understanding how we use your data helps you make informed decisions about sharing your information with us.

Service Provision

We use your personal information to:

  • Provide our gym revenue analytics services
  • Respond to your enquiries and support requests
  • Process and fulfil service agreements
  • Deliver customised analytics solutions
  • Provide technical support and customer service

Business Operations

Your data helps us:

  • Improve our services and develop new features
  • Conduct research and analysis to enhance our platform
  • Ensure security and prevent fraud
  • Comply with legal obligations and regulatory requirements
  • Manage our business relationships effectively

Marketing and Communications

With your consent, we may use your information to:

  • Send you information about our services and updates
  • Provide relevant industry insights and analytics trends
  • Invite you to webinars, events, or educational content
  • Conduct customer satisfaction surveys

Legal Basis for Processing

Under GDPR, we process your personal data based on the following legal grounds:

  • Contract: Processing necessary for performing our services or taking steps to enter into a contract
  • Legitimate Interest: Processing for our business interests, such as improving services and ensuring security
  • Consent: When you have given clear consent for specific processing activities
  • Legal Obligation: Processing required to comply with legal requirements

Cookies and Tracking Technologies

We may use cookies and tracking technologies for analytics, advertising, and remarketing purposes, including Google Ads. These technologies help us measure campaign effectiveness, deliver relevant advertisements, and improve our services. You can manage your cookie preferences at any time through our cookie consent banner.

For detailed information about the cookies we use, please refer to our Cookie Policy.

Data Sharing and Disclosure

We do not sell your personal data to third parties. We may share your information only in the following circumstances:

Service Providers

We work with trusted third-party service providers who assist us in delivering our services:

  • Cloud hosting and data storage providers
  • Analytics and performance monitoring services
  • Email communication platforms
  • Customer support and helpdesk systems

Legal Requirements

We may disclose your information when required by law or to:

  • Comply with legal processes or government requests
  • Protect our rights, property, or safety
  • Investigate potential violations of our terms of service
  • Protect against fraud or security threats

Data Retention

We retain your personal data only for as long as necessary to fulfil the purposes for which it was collected and to comply with legal obligations. Our data retention periods are based on:

  • The nature of the data and its sensitivity
  • Legal and regulatory requirements
  • Legitimate business needs
  • Your relationship with our company

Generally, we retain:

  • Contact information: For the duration of our business relationship plus 3 years
  • Service data: As specified in our service agreements
  • Website analytics: Up to 26 months
  • Marketing data: Until you withdraw consent or 3 years of inactivity

Your Rights

Under GDPR and applicable data protection laws, you have several rights regarding your personal data:

Access and Portability

  • Right of Access: Request copies of your personal data
  • Data Portability: Receive your data in a structured, machine-readable format

Correction and Deletion

  • Rectification: Correct inaccurate or incomplete personal data
  • Erasure: Request deletion of your personal data in certain circumstances

Processing Control

  • Restriction: Limit how we process your data
  • Objection: Object to processing based on legitimate interests or for direct marketing
  • Withdraw Consent: Withdraw consent for specific processing activities

To exercise any of these rights, please contact us using the details provided in the contact section below.

Data Security

We implement appropriate technical and organisational measures to protect your personal data against unauthorised access, alteration, disclosure, or destruction. Our security measures include:

  • Encryption of data in transit and at rest
  • Regular security assessments and updates
  • Access controls and authentication systems
  • Employee training on data protection practices
  • Incident response and breach notification procedures

International Data Transfers

As we operate within the European Union, your data is primarily processed within the EU/EEA. If we need to transfer data outside the EU/EEA, we ensure appropriate safeguards are in place, such as:

  • Adequacy decisions by the European Commission
  • Standard contractual clauses
  • Binding corporate rules
  • Certification schemes

Children's Privacy

Our services are not intended for children under 16 years of age. We do not knowingly collect personal data from children under 16. If you are a parent or guardian and believe your child has provided us with personal data, please contact us immediately.

Changes to This Privacy Policy

We may update this privacy policy periodically to reflect changes in our practices, services, or legal requirements. When we make significant changes, we will notify you by:

  • Posting a notice on our website
  • Sending an email to your registered address
  • Updating the "last updated" date at the top of this policy

We encourage you to review this policy regularly to stay informed about how we protect your data.

Contact Us

If you have any questions about this privacy policy, wish to exercise your rights, or need to contact us regarding your personal data, please reach out using the following contact information:

Privacy Officer
StellaHub Novaes Ltd
Triq il-Vittorja 20
Sliema SLM 4319
Malta

Email: privacy@stellahubnovaes.top
Phone: +356 21402185

We aim to respond to all privacy-related enquiries within 30 days of receipt.

Supervisory Authority

You have the right to lodge a complaint with the relevant supervisory authority if you believe your data protection rights have been violated. In Malta, you can contact:

Office of the Information and Data Protection Commissioner
Level 2, Airways House
High Street, Sliema SLM 1549
Malta
Website: idpc.org.mt