PRIVACY POLICY

Last updated: May 12, 2026

Novo Logistics operates https://novo-usa.com/. This page informs you of our policies regarding the collection, use, and disclosure of Personal Information we receive from users of the Site. We use your Personal Information only for providing and improving the Site. By using the Site, you agree to the collection and use of information in accordance with this policy.

1. Introduction

Novo Logistics (“Novo,” “we,” “our,” or “us”) operates https://novo-usa.com/ (the “Site”). This Privacy Policy describes how we collect, use, disclose, and protect information about you when you use our Site. This policy is intended to comply with applicable privacy laws, including Nevada Revised Statutes Chapter 603A (“NRS 603A”) as amended by Senate Bill 220 (SB 220), the Indiana Consumer Data Protection Act (“INCDPA”), the Alabama Data Breach Notification Act of 2018, and applicable South Carolina privacy and breach notification laws.

By using the Site, you agree to the collection and use of information in accordance with this Privacy Policy. If you do not agree with this policy, please do not use our Site.

2. Definitions

For purposes of this Privacy Policy, the following definitions apply:

“Personally Identifiable Information” or “PII” means any information that identifies, relates to, describes, or could reasonably be linked, directly or indirectly, to a specific individual. PII includes, but is not limited to:

Full name
Email address
Postal or mailing address
Telephone or mobile number
Internet Protocol (IP) address
Social Security number or government-issued identification number
Date of birth
Financial account numbers, credit or debit card numbers
Username and password
Geolocation data
Device identifiers (e.g., cookie IDs, mobile advertising identifiers)
Any other information that, alone or in combination, can be used to identify a specific individual

“Covered Information” has the meaning assigned to it under NRS 603A.320, and includes any of the categories of PII listed above that are collected from Nevada consumers through the Site.

“Sale” means the exchange of Covered Information for monetary consideration to a person for the person to license or sell the information to additional persons, as defined under NRS 603A.330.

3. Information We Collect

3.1 Information You Provide

We may collect PII that you voluntarily provide to us when you contact us, complete a form, or otherwise interact with the Site. This may include:

Name and contact information (email address, phone number)
Inquiry or message content submitted through contact forms
Any other information you choose to provide

3.2 Information Collected Automatically (Log Data)

When you visit our Site, our servers automatically record certain information your browser sends (“Log Data”). This Log Data may include:

Your device’s Internet Protocol (IP) address
Browser type and version
Operating system
Pages of our Site that you visit and time spent on each page
Date and time of your visit
Referring URL
Other diagnostic and usage statistics

3.3 Cookies and Tracking Technologies

We use cookies and similar tracking technologies to collect and track information about your interaction with the Site. Cookies are small data files placed on your device. You may instruct your browser to refuse all cookies or to notify you when a cookie is being sent; however, some portions of the Site may not function properly if you disable cookies.

We may also use third-party analytics services, such as Google Analytics, that collect, monitor, and analyze Log Data to help us understand Site usage. These third-party providers have their own privacy policies governing their use of such data.

4. How We Use Your Information

We use collected information, including PII, for the following purposes:

To operate, maintain, and improve the Site and our services;
To respond to your inquiries, requests, or communications;
To send you administrative notices, updates, and information regarding the Site;
To detect, prevent, and investigate fraud, security breaches, and other prohibited activities;
To monitor Site usage and enforce our Terms and Conditions and Acceptable Use Policy;
To comply with applicable laws, regulations, legal processes, or governmental requests; and
To analyze trends and gather aggregate demographic information about our users,

We do not sell Covered Information to third parties for monetary consideration in a manner that constitutes a “Sale” under NRS 603A.330. If this practice changes, we will update this Privacy Policy and provide the disclosures required by applicable law.

5. Monitoring of Site Activity

By using the Site, you acknowledge and consent to the fact that Novo and its authorized service providers may monitor your interactions with the Site. Monitoring may include:

Logging of IP addresses, access times, and pages visited
Use of analytics and tracking tools to evaluate user behavior and Site performance
Review of communications submitted through the Site
Security monitoring to detect unauthorized access, fraud, or abuse

Information collected through monitoring may be retained, reviewed, and disclosed as described in this Privacy Policy or as required by applicable law. We reserve the right to share monitored information with law enforcement or regulatory authorities where legally required or where we believe disclosure is necessary to protect our rights, your safety, or the safety of others.

6. Disclosure of Your Information

We may share your PII in the following circumstances:

With trusted third-party service providers who assist us in operating the Site, conducting our business, or servicing you, provided those parties agree to keep such information confidential.
If required by law, regulation, or valid legal process (such as a court order or subpoena).
To protect and defend the rights or property of Novo, including enforcement of our Terms and Conditions.
To prevent or investigate possible wrongdoing in connection with the Site.
With your consent or at your direction.

We do not sell, trade, or otherwise transfer your PII to outside parties for their independent marketing or advertising purposes.

7. State-Specific Privacy Rights and Compliance

Novo is committed to complying with applicable state privacy laws wherever our Site is accessed. The sections below describe our obligations and your rights under the laws of Nevada, Indiana, Alabama, and South Carolina.

7.1 Nevada – NRS 603A / SB 220

Novo is committed to complying with the Nevada Revised Statutes Chapter 603A, Security and Privacy of Personal Information, as amended by Senate Bill 220 (effective October 1, 2019).

7.1.1 Right to Opt Out of Sale

Nevada consumers have the right to submit a verified request directing us not to sell their Covered Information. Although we do not currently sell Covered Information as defined under NRS 603A.330, you may submit an opt-out request to:

Privacy Request Email: sam.reviglio@novo-usa.com

Please include “Nevada Privacy Opt-Out Request” in the subject line. We will respond to verified requests within 60 days of receipt, with the option to extend by an additional 30 days where reasonably necessary, as permitted by NRS 603A.345.

7.1.2 Security Requirements

In accordance with NRS 603A.210, Novo implements and maintains reasonable administrative, technical, and physical safeguards designed to protect PII from unauthorized access, use, modification, or disclosure. These safeguards include:

Encryption of data in transit using industry-standard protocols (e.g., TLS/HTTPS)
Access controls limiting PII access to authorized personnel on a need-to-know basis
Regular review of data collection and storage practices
Training of personnel with access to PII on privacy and security practices

7.1.3 Data Breach Notification (Nevada)

In the event of a data security breach that affects PII of Nevada residents, Novo will provide notification in accordance with NRS 603A.220. Notification will be provided in the most expedient time possible and without unreasonable delay, consistent with the legitimate needs of law enforcement. Notification will be provided:

By email to the email address on file for the affected individual, or
By written notice mailed to the last known address, or
By a conspicuous posting on the Site, where the cost of direct notification would exceed $250,000 or the number of affected individuals exceeds 500,000.

7.2 Indiana – Indiana Consumer Data Protection Act (INCDPA)

The Indiana Consumer Data Protection Act (INCDPA), Senate Bill 5, took effect January 1, 2026. It applies to entities that conduct business in Indiana or produce products or services targeted to Indiana residents and that, during a calendar year, control or process personal data of at least 100,000 Indiana consumers, or control or process personal data of at least 25,000 Indiana consumers and derive more than 50% of gross revenue from the sale of personal data. If the INCDPA applies to your interactions with our Site, the following rights and obligations are available to you:

7.2.1 Indiana Consumer Rights

Indiana residents who qualify as consumers under the INCDPA have the right to:

Confirm whether Novo is processing your personal data and access that data.
Correct inaccuracies in personal data you have provided to us.
Request deletion of personal data you have provided to us or that we have collected about you.
Obtain a portable copy of your personal data in a readily usable format (data portability).
Opt out of the processing of your personal data for purposes of targeted advertising, the sale of personal data, or certain profiling activities.

The INCDPA defines “sale of personal data” as the exchange of personal data for monetary consideration by a controller to a third party. Novo does not sell personal data for monetary consideration.

7.2.2 How to Exercise Indiana Rights

Indiana consumers may submit a verified request to exercise any of the rights above by contacting us at:

Privacy Request Email: sam.reviglio@novo-usa.com

Please include “Indiana Privacy Request” in the subject line and specify the right you wish to exercise. We will respond within 45 days of receiving a verified request. We may extend this period by an additional 45 days where reasonably necessary, provided we notify you of the extension within the initial 45-day period.

7.2.3 Appeals (Indiana)

If we decline to act on your request, we will inform you of our decision and the reasons for it. You may appeal our decision by contacting us at sam.reviglio@novo-usa.com with the subject line “Indiana Privacy Appeal.” We will respond to your appeal within 60 days. If your appeal is denied, you may contact the Indiana Attorney General to submit a complaint at www.in.gov/attorneygeneral/.

7.2.4 Data Protection Assessments (Indiana)

In accordance with the INCDPA, Novo conducts and documents data protection assessments for processing activities that present a heightened risk of harm to consumers, including processing for targeted advertising, sale of personal data, processing of sensitive data, and certain profiling activities. These assessments are conducted for processing activities created or generated after December 31, 2025.

7.3 Alabama – Data Breach Notification Act of 2018

The Alabama Data Breach Notification Act of 2018 (Ala. Code § 8-38-1 et seq.) imposes obligations on any entity that acquires or uses sensitive personally identifying information of Alabama residents. Novo complies with this law as follows:

7.3.1 Sensitive Personally Identifying Information (Alabama)

Under Alabama law, “sensitive personally identifying information” (Sensitive PII) means an Alabama resident’s first name or first initial and last name combined with one or more of the following:

Social Security number or tax identification number
Driver’s license number, state-issued ID number, passport number, military ID, or other government-issued identification number
Financial account number, credit card number, or debit card number, combined with any security code, password, expiration date, or PIN necessary to access the account
Medical history, mental or physical condition, or medical treatment or diagnosis by a healthcare professional
Health insurance policy number, subscriber identification number, or unique identifier used by a health insurer to identify the individual
User name or email address, combined with a password or security question and answer, that permits access to an online account

7.3.2 Security Measures (Alabama)

Novo maintains reasonable security measures to protect Sensitive PII from unauthorized access, use, modification, acquisition, or disclosure, consistent with the requirements of Ala. Code § 8-38-3.

7.3.3 Data Breach Notification (Alabama)

In the event of a data security breach involving the Sensitive PII of Alabama residents, Novo will:

Investigate the breach promptly to determine the scope and nature of the incident.
Notify affected Alabama residents within 45 days of determining that a breach has occurred that is reasonably likely to cause substantial harm to those individuals. Notification may be by written notice to the last known mailing address or by email.
Notify the Alabama Attorney General as expeditiously as possible, but no later than 45 days after notifying affected individuals, if more than 1,000 Alabama residents are affected. Such notification will include a synopsis of events, the approximate number of affected residents, any services being offered to residents free of charge, and contact information for the Attorney General to obtain additional information.
Notify major consumer reporting agencies without unreasonable delay if more than 1,000 Alabama residents are affected.

Notification may be delayed if a law enforcement agency determines that notification will impede a criminal investigation or national security, provided the agency has submitted a written request for the delay.

7.4 South Carolina – Breach Notification and Emerging Privacy Law

South Carolina does not currently have a comprehensive consumer data privacy law in effect. However, South Carolina residents are protected by existing state identity protection laws and a newly enacted minor-specific privacy statute, and a comprehensive privacy bill (HB 3401) is pending in the South Carolina legislature. Novo monitors South Carolina law developments and will update this Privacy Policy as new requirements take effect.

7.4.1 South Carolina Breach Notification

South Carolina residents whose personal information is involved in a data security breach are entitled to notification consistent with applicable South Carolina law and, where applicable, federal law. Novo will provide notification to affected South Carolina residents as expeditiously as practicable following discovery of a qualifying breach.

7.4.2 Protection of Minors (South Carolina – Effective July 1, 2026)

South Carolina has enacted a law specifically protecting minors’ privacy online, effective July 1, 2026. To the extent this law applies to the Site, Novo will:

Disable by default any covered engagement-promoting features for known minor users.
Refrain from engaging in targeted advertising directed at minors.
Restrict the collection of precise geolocation data from known minor users.
Avoid user interface designs (dark patterns) intended to subvert user autonomy or encourage excessive engagement by minors.

South Carolina’s minor privacy law applies to online services that are reasonably likely to be accessed by minors and meet specified revenue or data-processing thresholds. If you believe a minor’s data has been collected by our Site in error, please contact us immediately at sam.reviglio@novo-usa.com.

7.4.3 Pending Comprehensive Law (South Carolina HB 3401)

South Carolina HB 3401, currently under legislative consideration, would establish comprehensive consumer data privacy rights for South Carolina residents, including rights to access, correction, deletion, and opt-out of the sale of personal data. Novo will update this Privacy Policy and implement required compliance measures if and when this bill is enacted. We encourage South Carolina residents to review this Privacy Policy periodically for updates.

8. Security of Your Information

The security of your PII is important to us. We implement commercially reasonable measures to protect the PII we collect and maintain. However, please be aware that no method of transmission over the Internet, or method of electronic storage, is 100% secure. While we strive to use acceptable means to protect your PII, we cannot guarantee its absolute security.

If you believe your PII has been compromised or if you become aware of any security vulnerability on the Site, please notify us immediately at sam.reviglio@novo-usa.com.

9. Security Violations and Incident Response

Novo treats unauthorized access to or misuse of PII as a serious security violation. In the event we detect or are notified of a potential security incident involving PII:

We will promptly investigate the scope and nature of the incident.
We will take reasonable steps to contain and mitigate the impact.
We will notify affected individuals and relevant authorities as required by NRS 603A.220, the Alabama Data Breach Notification Act (Ala. Code § 8-38-5 and 8-38-6), applicable South Carolina law, and any other applicable state or federal breach notification laws.
We will document the incident and our response for compliance purposes.

Individuals who discover or suspect a security vulnerability or unauthorized access to PII are encouraged to report it promptly to sam.reviglio@novo-usa.com. We will not take adverse action against individuals who report security issues in good faith.

10. Children’s Privacy

The Site is not directed to children under the age of 13. We do not knowingly collect PII from children under 13. If we learn that we have inadvertently collected PII from a child under 13, we will take steps to delete such information as soon as practicable. If you believe we may have collected information from a child under 13, please contact us at sam.reviglio@novo-usa.com.

11. Third-Party Links and Services

Our Site may contain links to third-party websites. This Privacy Policy applies only to our Site. We encourage you to read the privacy policies of any third-party websites you visit. We are not responsible for the privacy practices or content of third-party sites.

12. Communications

We may use your PII to contact you with newsletters, operational notices, or other information regarding Novo. You may opt out of receiving non-essential communications from us by contacting us at sam.reviglio@novo-usa.com. Please note that even if you opt out, we may still send you transactional or administrative communications related to your use of the Site.

13. Changes to This Privacy Policy

We reserve the right to update or change this Privacy Policy at any time. This Privacy Policy is effective as of the date stated at the top of this page. We will notify you of material changes by:

Updating the “Last Updated” date at the top of this page
Placing a prominent notice on our Site, and/or
Sending an email notification to the email address you have provided, where applicable

Your continued use of the Site after any modifications to this Privacy Policy are posted constitutes your acknowledgment of the modifications and your agreement to abide by the revised Privacy Policy. We encourage you to review this Privacy Policy periodically.

14. Contact Us

If you have any questions about this Privacy Policy, wish to exercise your rights under applicable law, or wish to report a security concern, please contact us at:

Novo Logistics

Website: https://novo-usa.com/

Email: sam.reviglio@novo-usa.com

You may also submit a concern through our Feeback and Concerns Form.