Effective Date: July 29, 2026
Last Updated: August 3, 2026

Axora Digital Services - FZCO ("we," "us," "our") operates NovaRDP and is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, store, and safeguard information when you visit our website, create an account, purchase a service, or otherwise use NovaRDP.

1. Information We Collect

  • Account and Contact Information: Information you provide, such as your name, email address, and any billing or contact details required during registration, checkout, or support requests.
  • Payment and Transaction Information: Payments are processed by third-party payment providers. We do not directly store complete payment card details. We may retain transaction-related records such as invoice amounts, currency, payment method, gateway name, transaction identifiers, payment status, and refund information for accounting, support, fraud prevention, and legal compliance.
  • Usage and Security Data: We may collect limited technical information such as IP address, login timestamps, browser or device information, country-level location, and access or security logs to authenticate users, maintain security, investigate misuse, prevent fraud, and improve service reliability.
  • Service and Support Information: Information contained in service orders, account communications, support tickets, abuse reports, and related correspondence.
  • Cookies and Analytics Information: We use essential cookies for account, security, cart, checkout, and consent-preference functionality. We also use performance analytics as described in Section 6.

We do not routinely monitor the content of customer services. However, we may investigate relevant information where reasonably necessary to address security incidents, suspected abuse, violations of our policies, legal obligations, or valid requests from competent authorities.

2. How We Use Your Information

  • To provide, activate, maintain, and manage NovaRDP services.
  • To create and administer accounts, orders, invoices, payments, credits, and refunds.
  • To process payments through our payment providers and maintain appropriate transaction records.
  • To provide customer support and communicate service, billing, policy, and security updates.
  • To protect our customers and services, prevent fraud and misuse, enforce our policies, and investigate security or abuse incidents.
  • To understand website usage, evaluate service performance, and improve reliability and user experience.
  • To comply with applicable legal, regulatory, accounting, and law-enforcement requirements.

Depending on the circumstances and applicable law, we process information because it is necessary to perform our contract with you, comply with legal obligations, pursue legitimate interests such as security and fraud prevention, or because you have provided consent for optional processing such as Google Analytics cookies.

We do not sell or rent personal information. We may share information with service providers that help us operate NovaRDP, including payment processors, infrastructure and hosting providers, security and fraud-prevention providers, analytics providers, customer-support systems, email providers, and billing or account-management platforms. We may also disclose information where required by applicable law, to respond to valid legal requests, protect our rights or users, or investigate abuse and security incidents.

3. Data Storage & Security

  • Account and billing data is primarily stored on our systems in the Netherlands, although service providers may process information in other locations as explained in Section 7.
  • We use HTTPS, access controls, and appropriate technical and organizational safeguards to protect information during transmission and storage.
  • We use WHMCS as part of our billing, ordering, account-management, and customer-support systems.
  • We use selected infrastructure, security, payment, analytics, support, and email providers where necessary to operate NovaRDP.
  • Despite our safeguards, no electronic transmission or storage system can be guaranteed to be completely secure.

4. Data Retention

We retain information only for as long as reasonably necessary for the purposes described in this Privacy Policy, including providing services, maintaining account and transaction records, resolving disputes, preventing fraud and abuse, enforcing our agreements, and meeting legal, tax, accounting, or regulatory obligations.

Different categories of information may have different retention periods. Security and technical logs are generally retained for a limited operational period unless they are needed for an investigation, dispute, security incident, abuse case, or legal requirement. Account, invoice, transaction, and support records may be retained for longer where necessary for legitimate business or legal purposes.

You may request deletion of eligible personal information by contacting us through email or the customer dashboard. Some records may need to be retained where required by law or reasonably necessary for security, fraud prevention, accounting, dispute resolution, or the establishment, exercise, or defense of legal claims.

Once information is permanently deleted from active systems and applicable backups in accordance with our retention procedures, it cannot be recovered.

5. User Rights & Requests

Depending on where you live and the data protection laws applicable to you, including UAE data protection laws and the GDPR where applicable, you may have rights to:

  • Access your information: Request information about the personal data we process and obtain a copy where applicable.
  • Correct your information: Request correction of inaccurate or incomplete information.
  • Request deletion: Request deletion of eligible personal information, subject to applicable exceptions and retention requirements.
  • Restrict or object to processing: Request restriction of, or object to, certain processing where applicable.
  • Data portability: Request eligible information in a portable format where applicable.
  • Withdraw consent: Withdraw consent for optional processing at any time without affecting the lawfulness of processing carried out before withdrawal or your ability to use essential NovaRDP functionality.
  • Complain to a regulator: Submit a complaint to an applicable data protection authority.

To exercise applicable rights, contact us at [email protected]. We may need to verify your identity before completing a request.

6. Cookies & Tracking

Essential Cookies

  • Essential cookies support account login, authentication, security, customer sessions, shopping-cart functionality, checkout, payment processing, and other features necessary to provide the website and customer dashboard.
  • We use a first-party cookie named novardp_consent to remember your privacy choice. This cookie is necessary to prevent the consent banner from appearing repeatedly and is retained for up to one year.
  • Blocking essential cookies through your browser may prevent account, cart, checkout, or other requested functionality from working correctly.

Performance Analytics

  • We use Plausible Analytics to obtain aggregated website statistics. Plausible is designed to operate without analytics cookies or persistent cross-site identifiers. Further information is available in the Plausible Data Policy.
  • With your permission, we use Google Analytics 4 to measure visits, interactions, ecommerce activity, and website performance so that we can understand how NovaRDP is used and improve our services.
  • Google Analytics storage is denied by default. Google Analytics cookies are enabled only after you accept performance cookies through our consent controls.
  • If performance cookies are accepted, Google Analytics may use cookies such as _ga and _ga_*. These cookies may remain for up to two years, subject to browser restrictions and our Google Analytics configuration.
  • If performance cookies are accepted during checkout, we may temporarily use first-party attribution cookies named novardp_ga4_client_id and novardp_ga4_session_id. The client identifier cookie may remain for up to two years, while the session identifier cookie remains for up to two hours.
  • Where a consented Google Analytics identifier was captured, ecommerce events such as product selection, cart activity, checkout, confirmed purchases, and manually confirmed refunds may be reported to Google Analytics. Server-side purchase confirmation allows a purchase to be reported after successful payment even if the customer does not return to the website.
  • If you reject performance cookies, Google Analytics does not read or write analytics cookies. Because we use Google's Advanced Consent Mode, Google may still receive restricted cookieless consent-status and website-measurement signals for aggregated measurement and modeling. These signals do not use our Google Analytics cookies or NovaRDP attribution cookies.
  • Advertising storage, advertising personalization, and advertising user-data consent remain disabled through our consent configuration.
  • More information about Google's processing practices is available in the Google Privacy Policy.

You can accept, reject, or change your performance-cookie choice at any time using the cookie-preferences control displayed on the website. Rejecting performance cookies does not affect essential account, security, cart, or checkout functionality. You may also configure your browser to block cookies, but blocking essential cookies may prevent parts of NovaRDP from functioning.

7. International Data Transfers

NovaRDP is available internationally, and our service providers may process information in countries other than your country of residence. These countries may have different data protection laws. Where required by applicable law, we use appropriate safeguards or contractual protections for international transfers of personal information.

8. Changes to this Privacy Policy

We may update this Privacy Policy to reflect changes to our services, providers, legal obligations, or data-processing practices. The updated version will be published on our website with a revised “Last Updated” date. Where required or where changes are material, we may also provide notice through email, the customer dashboard, or another appropriate method.

9. Contact Information

If you have questions, concerns, or requests relating to this Privacy Policy or our handling of personal information, contact:

Axora Digital Services - FZCO
Email: [email protected]

This Privacy Policy explains our data-processing practices and is not intended to obtain consent for processing that requires a separate affirmative choice.