1. Introduction
This Privacy Policy describes how Nova DDMC Limited (“Nova DDMC Limited”, “DDMC”, “Company”, “we”, “our”, or “us”) collects, uses, stores, processes, and shares personal information when you access or use:
• novaddmc.com;
• overlord.ltd;
• and associated websites, storefronts, products, services, communications, and online platforms operated by Nova DDMC Limited (collectively, the “Website”).

Overlord and Zubastik are product brands operated by Nova DDMC Limited.

By using the Website or interacting with the Company, you acknowledge that you have read and understood this Privacy Policy.

2. Company Information
Nova DDMC Limited
Unit 1101B, 11/F., Lippo Sun Plaza
28 Canton Road, Tsim Sha Tsui
Hong Kong Special Administrative Region
Company Registration Number (CR No.): 79088201

Contact Email: info@novaddmc.com

Where required by applicable law, Nova DDMC Limited may appoint data protection representatives or implement additional compliance mechanisms in relevant jurisdictions. Customers with data protection enquiries are welcome to contact the Company directly at the address above.

3. Information We Collect
Depending on how you interact with the Website or the Company, we may collect and process the following categories of information.

3.1 Information You Provide Directly
This may include:
• name;
• billing address;
• shipping address;
• email address;
• phone number;
• order details;
• customer support communications;
• information submitted through contact forms or enquiries.

3.2 Transaction & Payment Information
When purchases are made through the Website, payment information is processed by third-party payment providers. Nova DDMC Limited does not store payment card data on its own systems. All payment card information is processed directly by the Company’s designated payment provider(s), who operate in accordance with applicable payment security standards and their own privacy policies.

The Company may receive limited transaction-related information from payment providers, such as payment confirmation status, transaction identifiers, partial card identifiers, and fraud prevention signals, as necessary for order management, accounting, refunds, and customer support.

3.3 Technical & Usage Information
We may automatically collect limited technical and usage information, including:
• IP address;
• browser type and version;
• operating system;
• device information;
• language preferences;
• pages visited;
• referral sources;
• Website interaction data;
• approximate geographic region;
• analytics and performance information.

3.4 Cookies & Tracking Technologies
The Website may use cookies, analytics tools, pixels, and similar technologies to operate the Website, improve functionality, understand usage, maintain security, and measure traffic and performance. Additional information is available in the Cookie Policy.

4. How We Use Personal Information
Nova DDMC Limited may use personal information for purposes including:
• processing and fulfilling orders;
• providing customer support;
• communicating regarding purchases, pre-orders, shipping updates, or enquiries;
• managing shipping, logistics, and delivery;
• fraud prevention and security monitoring;
• maintaining operational and accounting records;
• complying with legal obligations;
• improving Website functionality and performance;
• analysing Website usage and customer interaction;
• protecting the rights, property, and safety of the Company and its customers.

Marketing communications will only be sent where the customer has provided explicit opt-in consent, or where otherwise permitted by applicable law. Customers may withdraw consent to marketing communications at any time by using the unsubscribe link in any marketing email or by contacting the Company at info@novaddmc.com. Withdrawal of consent does not affect the lawfulness of any marketing communications sent prior to withdrawal.

5. Legal Bases for Processing (GDPR & UK GDPR)
Where applicable under the EU General Data Protection Regulation (“GDPR”) or UK GDPR, Nova DDMC Limited processes personal data on one or more of the following legal bases:
• Performance of a contract: processing necessary to fulfil an order, manage a customer account, or provide requested services.
• Compliance with legal obligations: processing required to meet applicable legal, regulatory, tax, or accounting requirements.
• Legitimate interests: processing necessary for the Company’s legitimate business interests, where those interests are not overridden by the data subject’s rights and interests. The Company applies a balancing assessment before relying on this basis. Legitimate interests may include operation and improvement of the Website, customer support, fraud prevention, security monitoring, and business administration.
• Consent: where the customer has provided specific, informed, and freely given consent, including for certain marketing communications and non-essential cookies. Consent may be withdrawn at any time by contacting info@novaddmc.com, without affecting the lawfulness of processing prior to withdrawal.

The Company does not currently engage in solely automated decision-making producing legal or similarly significant effects on individuals without human involvement. Automated processing may be used for fraud prevention screening, but decisions with material consequences are subject to human review.

6. Cookies & Analytics

6.1 Essential Cookies
Certain cookies may be necessary for Website functionality, shopping cart operation, checkout processes, security, fraud prevention, and user preferences. These cookies may remain active as required for operation of the Website.

6.2 Analytics & Performance Cookies
The Company may use analytics services including Google Analytics and similar technologies to understand Website traffic, visitor interaction, performance metrics, and general usage patterns. Analytics providers may collect information such as IP addresses, browser information, device information, and Website interaction data in accordance with their own privacy policies.

6.3 Consent Management
Where required by applicable law, users may be presented with cookie consent options allowing acceptance, rejection, or management of non-essential cookies and tracking technologies. Users may also manage cookies through browser settings, although certain Website functionality may be affected. Additional details are provided in the Cookie Policy.

7. International Data Transfers
Nova DDMC Limited operates internationally. Personal information may be processed, stored, transferred, or accessed in jurisdictions outside the customer’s country of residence, including:
• Hong Kong;
• Vietnam;
• jurisdictions where service providers, logistics partners, repair providers, contractors, or infrastructure providers operate.

These jurisdictions may have data protection laws that differ from those in the customer’s country of residence. Where required by applicable law, including where personal data originating from the European Economic Area or United Kingdom is transferred to countries without an adequacy decision, Nova DDMC Limited will implement appropriate safeguards, including where applicable Standard Contractual Clauses approved by the relevant authority or other legally recognised transfer mechanisms.

8. Data Sharing & Service Providers
Nova DDMC Limited may share personal information with third parties where reasonably necessary for operation of the business, including:
• payment processors;
• shipping and logistics providers;
• customs brokers or import processing providers;
• analytics providers;
• cloud hosting or infrastructure providers;
• customer support providers;
• repair or servicing partners;
• legal, accounting, or regulatory advisors.

Third-party service providers are authorised to use personal information only as necessary to provide services to the Company and are not permitted to use it for their own independent purposes.

The Company may also disclose personal information where required by law, in response to lawful governmental or regulatory requests, to protect legal rights or prevent fraud or harm, or in connection with a business restructuring, acquisition, merger, or asset transfer, provided that any successor entity continues to handle personal information consistently with this Privacy Policy.

9. Data Retention
Nova DDMC Limited retains personal information only for as long as reasonably necessary for the purposes for which it was collected. As a general guide:
• Order, transaction, and accounting records: generally retained for 7 years to meet applicable tax, accounting, and legal obligations.
• Customer support records: generally retained for up to 3 years from the date of the relevant interaction.
• Warranty and servicing history: retained for the applicable warranty period and a reasonable operational period thereafter.
• Marketing consent records: retained for as long as the customer remains opted in, plus a reasonable period to demonstrate compliance.

Actual retention periods may vary depending on applicable legal requirements, product category, transaction history, and operational necessity. When personal information is no longer required, the Company will take reasonable steps to delete, anonymise, or securely dispose of it.

10. Customer Rights
Depending on the customer’s jurisdiction and applicable law, customers may have rights including:
• access to personal information held by the Company;
• correction of inaccurate or incomplete information;
• deletion of personal information (“right to erasure”);
• restriction of certain processing activities;
• objection to processing based on legitimate interests;
• data portability;
• withdrawal of consent;
• the right to lodge a complaint with a competent data protection supervisory authority. This right exists independently of any internal complaints process and may be exercised without first contacting the Company.

Requests relating to personal information may be submitted to info@novaddmc.com. The Company will use reasonable efforts to respond within 30 days of receiving a verifiable request. In complex or high-volume cases, this period may be extended by up to a further 60 days, in which case the Company will notify the customer of the extension and the reasons for it.

The Company may request reasonable verification of identity before responding to certain requests. Certain rights may be limited where retention or processing is required by law, fraud prevention obligations, accounting requirements, or overriding legitimate interests.

11. Security Measures
Nova DDMC Limited takes reasonable technical, administrative, and organisational measures intended to protect personal information against unauthorised access, accidental loss, misuse, alteration, disclosure, or destruction.

In the event of a personal data breach that poses a high risk to the rights and freedoms of affected individuals, the Company will take steps to notify affected individuals and, where required, the relevant supervisory authority, in accordance with applicable law.

No method of internet transmission, electronic storage, or security system can be guaranteed completely secure. Customers are responsible for maintaining the confidentiality of their own devices, accounts, and communications.

12. Children & Minors
The Website and products sold by Nova DDMC Limited are not intended for minors or children under the legal age of majority in their jurisdiction. The Company does not knowingly collect personal information from children. If the Company becomes aware that personal information has been submitted by a child in violation of applicable law, reasonable steps will be taken to delete such information promptly.

13. Third-Party Services & Links
The Website may contain links to third-party websites, platforms, services, or social media channels operated independently from Nova DDMC Limited. The Company is not responsible for the privacy practices, security, content, or policies of third-party services. Customers should review the privacy policies of third-party websites and services before providing personal information.

14. Changes to This Privacy Policy
Nova DDMC Limited may update or revise this Privacy Policy periodically to reflect operational changes, legal or regulatory developments, technical updates, new products or services, or changes in data processing practices.

Where changes are material, the Company will use reasonable efforts to provide advance notice through the Website or other reasonable communication methods prior to the updated version taking effect.

Continued use of the Website after an updated Privacy Policy becomes effective constitutes acknowledgment of the updated policy. However, where a material change affects processing activities that require consent under applicable law, the Company will seek fresh consent where required rather than relying solely on continued use as a basis for consent.

15. Contact Information
Questions, requests, or concerns regarding this Privacy Policy or personal information practices may be directed to:

Nova DDMC Limited
Unit 1101B, 11/F., Lippo Sun Plaza
28 Canton Road, Tsim Sha Tsui
Hong Kong Special Administrative Region

Email: info@novaddmc.com