NOVATIONLAB
Privacy notice
This notice describes the processing of personal data when you visit novationlab.com or contact us. Contact and project enquiries are intended for businesses and other interested adults.
1. Controller
OM Group Limited, 6/F, Cheung Hing Industrial Building, 12P Smithfield Road, Kennedy Town, Hong Kong. For privacy enquiries, contact hello@novationlab.com.
2. Providing the website
The website is hosted on Cloudflare Pages. When you access it, technically necessary connection data is processed, including your IP address, the requested file or URL, the time of access, the request status and the browser and device information transmitted by your browser. This data is used to deliver the website, troubleshoot issues and maintain security.
Where the GDPR applies, this processing is based on Article 6(1)(f) GDPR. Our legitimate interest is to provide the website securely and reliably. Cloudflare is involved in processing as a hosting and security provider. Further information is available in Cloudflare’s privacy policy.
3. Cookie choice and Google Analytics
We use Google Analytics 4 to understand website usage only if you select “Allow analytics” in the cookie banner. Before consent and after rejection, we do not load the Analytics script or send Analytics requests to Google. Technically necessary processing by our hosting provider is separate from this choice.
After consent, we record page views and clicks on our email contact link, together with browser and device information, usage times, a pseudonymous browser identifier and the referring website. A contact click means the email link was opened, not that a message was sent. Our measurement excludes URL query strings and fragments. The connection transmits your IP address to Google; Google states that it does not log or store IP addresses from users in the EU, Switzerland or the United Kingdom. We do not use account-based identification, Google Signals or advertising personalisation.
After consent, Analytics uses cookies named _ga and _ga_* to recognise browsers and associate sessions. We limit their lifetime to 180 days. Your choice is stored for 180 days in this browser’s local storage under novationlab-consent-v1. You can change it at any time through “Cookie settings” in the footer. Withdrawal stops further measurement, removes Analytics cookies for this domain and reloads the page. Withdrawal does not affect the lawfulness of earlier processing.
The basis for optional analytics and the related access to your device is your consent, including Article 6(1)(a) GDPR and applicable device-access rules where relevant. Google, the provider of Google Analytics, receives the analytics data. Processing outside the European Economic Area, particularly in the United States, is possible. See Google’s privacy policy and Google Analytics 4 privacy information.
Game and external content
The game at /familie/ does not include Google Analytics and requires no code, account or login. No game-access cookie is set. Any access cookie left over from the earlier family test is deleted on the next visit to the game. The prototype does not create player profiles or permanently store progress. Technically necessary connection data is also processed when you access the game.
There are no embedded social media, video or map services. Images and fonts are served locally, or use system fonts already available on your device.
4. Contact by email
If you write to us, we process your email address, message content and any information you voluntarily provide to handle your enquiry. Messages to hello@novationlab.com are forwarded via Cloudflare Email Routing to the existing company mailbox. The email providers involved process the data necessary to receive, forward and respond to your message.
Where applicable, the legal basis is Article 6(1)(b) GDPR for contractual or pre-contractual enquiries. Other enquiries are handled under Article 6(1)(f) GDPR based on our interest in responding to your message. Contacting us does not automatically subscribe you to a newsletter.
5. Project and game enquiries
Adults can send project enquiries and feedback about the game to the email address above. Please do not send names, photos, dates of birth or other personal information about children.
6. Recipients and international processing
OM Group Limited is based in Hong Kong. Connection and communication data may also be processed outside the European Economic Area through the hosting and email services used. Transfers subject to the GDPR must meet the applicable requirements of Article 44 et seq. GDPR. You may request information about the providers and transfer arrangements used for specific processing by contacting us at the address above.
7. Retention
User- and event-level Analytics data is retained for two months, without resetting the period on new activity. Aggregated standard reports are not affected by this limit. The local consent choice and Analytics cookies have a lifetime of up to 180 days.
We retain contact enquiries for as long as necessary to handle them and, where applicable, continue any agreed communication. Statutory retention requirements or the establishment, exercise or defence of legal claims may require longer retention. Technical connection data is processed as part of the hosting provider’s operational and security processes.
8. Your rights
Where the legal requirements are met, your rights include access, rectification, erasure, restriction of processing and data portability. You may object to processing based on legitimate interests on grounds relating to your particular situation. Any consent given may be withdrawn with effect for the future. You may also lodge a complaint with a competent data protection supervisory authority.
To exercise your rights, please contact hello@novationlab.com.
Last updated: 26 October 2026