Privacy Policy

Personal Data Collection

Comments on posts

The data shown in the comments form alongside the visitor’s browser and IP address are collected whenever a comment is posted on our site. This data is used for the purposes of spam detection and prevention.

Email addresses may be referred to the Gravatar service to check whether comment posters use Gravatar. The process requires that your email address is encrypted as an anonymized string, which is also referred to as hash. 

The Gravatar privacy policy can be consulted here. Once comments are approved, Gravatar profile pictures will be visible to visitors viewing your comment.

Media Files

If you want to upload images to the website, make sure the attachments do not have location data embedded in them. Anyone visiting the website will be able to download and extract location information from media files that are posted.

Contact forms

Cookies

Whenever you leave a comment on our website, you have the option to save your name, email, and website with the help of cookies. This process makes it easier to browse the site at a later date, as you won’t have to input your information every time you want to post a comment. Cookies remain active for one year.

In the event that you do have an account and you log in using your credentials, a temporary cookie will be set up to find out whether your browser accepts cookies. This file is discarded when you close your browser and it contains no personal data.

When a user is logged in, the website sets up several cookies that save screen display choices and login information. Screen option cookies last for a year, whereas login cookies last for two days. If you select the “Remember Me” option, the login details will persist for two weeks. However, if you log out of the account after browsing the website, the cookies will be removed. 

Whenever you publish or edit an article, an additional cookie will be saved by your browser. This file includes no personal data and simply indicates the post ID of the article you worked on. The post ID cookie expires after one day.

Embedded content from other websites

Content from other websites, such as articles, videos, images, etc., may be displayed on our website. Embedded content behaves in the same way as if the visitor is browsing the site of origin.

These websites may use their own cookies, collect user information, embed third-party tracking, and/or monitor your interaction with their content. 

If you have an account and you happen to be logged in to the website where the content originates, your interaction with its content on our website may be tracked by the source website.

Analytics – Data Sharing and Retention

Comments and comment metadata are retained indefinitely in order to recognize and approve follow-up posts automatically, rather than have them pass through moderation once more.

We store the personal information of users who register on our website. The account owners can view, delete, or edit personal information at any time with the exception of the username. Website administrators can also view and edit user information.

Personal Data Rights and Data Sharing Policy

Users who have an account on our website or who posted a comment can request to receive an exported file that contains the personal data we have about them. This includes any information that might have been provided by the user themselves.

Users can also request to have any personal data we hold about them deleted, with the exception of data that we are mandated to keep for security, legal, or administrative purposes.

Comments from website visitors may be checked by an automated spam detection service to ensure the function is not abused.

Personal Contact Information

Email addresses and/or phone numbers are collected whenever an order is placed. This information is used with the purpose of informing customers about their orders and for marketing purposes. This information will not be distributed or sold to any third party and it is stored securely in the website’s database.

For users who subscribe to our mailing list, we collect email addresses to be used for future promotions, news, or offers. We pledge not to spam your inbox, and you can unsubscribe from our newsletters at any time. 

Subscribers will be sent only information that is relevant to our website, novakratom.com. To unsubscribe, please click the unsubscribe link provided in our emails.

Personal Data Protection

All visitor and customer data we collect is stored in our databases. The information is secured and encrypted, in addition to being protected by real-time security software operated by the web hosting company.

To ensure maximum protection for personal information, we employ trained personnel to monitor the server’s website, as well as the plugins, and any software used by it. We monitor both website and server activity related to the website itself.

Our website (https://novakratom.com:8888/) benefits from end-to-end, 256-bit SSL encryption. Any information coming from our users or visitors, including sensitive data submitted via contact form or user registration, is encrypted and can only be intercepted and deciphered by our platform.

The safety of personal data is our foremost priority. We spare no effort to ensure the safety of sensitive information and take every precaution we can to prevent malicious third-parties from being able to access or steal it.

Data Breach Procedures

Customer information including, but not limited to names, delivery addresses, email addresses, and phone numbers, is stored using a MySQL database. Our safety technician monitors and maintains database security at all times. 

In addition, we provision protection software and plugins on our website to ensure our database is safe from malicious attacks on possible vulnerabilities or outdated programs. For protection purposes, our servers do not store and will never store any banking or credit card information. Sensitive financial information is relayed to the gateways provided during payment. Our website does not have access to such information, nor to any decipherable transmissions of it.

For order processing purposes, our employees have access to customer accounts where names and addresses, email, or phone information is stored. The access is used to update contact and/or delivery information when this is the case, as well as to be able to reset passwords. 

Employee activity related to user accounts is closely monitored to ensure the safety of users’ personal information.

Third-Party Data Collection

We may receive user information, such as location or IP address from various tracking and analytics software. These software use cookies to monitor browsing activity for the purposes of analysis. We currently use Statcounter, a secure web traffic analysis service with a long-standing reputation.

Third-party user information is stored by Statcounter.com securely for marketing purposes. As such, only marketing employees have access to it. The service does not offer any other data aside from IP and the location of the IP. The information is used solely for analyzing browsing activity and web traffic trends associated with our website.

Decision Making and User Data

To prevent our website from being targeted by malicious traffic, we use a WordPress extension called Wordfence. This is a firewall that keeps track of malicious attacks and monitors user activity for signs of malicious content or code.

If Wordfence detects unusual activity from a specific IP address, users may be blocked by it. Since the process is automated, false-positive blacklisting is possible.