Privacy Policy
This policy explains how HITCHNOVA handles personal data through its website, accounts, enquiries, support and project administration.
Controller and Processor Roles
For HITCHNOVA website, accounts, enquiries, support, security and business administration, Fantasy Flowers Trading is the controller for the relevant processing. For client projects, HITCHNOVA may act as a processor where the client determines the purposes and means of processing.
Data We May Collect
Depending on the service, data may include name, business email, telephone number, company name, country, industry, project interest, enquiry content, account identifiers, support records, billing references, technical logs, IP-derived security signals and consent records.
Public Forms and Explicit Consent
Demo and contact forms require explicit consent for the processing needed to handle the enquiry. Where the submitted data must be transferred to technology providers outside Oman, a separate explicit transfer consent is required. Marketing consent is not bundled into these required consents.
Website Analytics
Non-essential first-party analytics is disabled until the visitor makes an analytics choice. If accepted, HITCHNOVA may create a random visitor identifier in local storage and a session identifier in session storage and record limited events such as page views, CTA clicks and form interaction. Form-field content is not sent as analytics payload and identifiers are hashed server-side before storage.
Purposes
Personal data may be processed to operate the website and accounts, respond to enquiries, deliver services, manage client projects, provide support, prevent abuse, maintain security, comply with law, maintain accounting records, manage disputes and improve service quality.
AI and Data Minimisation
HITCHNOVA minimises personal data sent to AI systems, avoids unnecessary sensitive data, isolates client environments and prohibits cross-client reuse of confidential client data, credentials or identifiable business information.
Third Parties and Cross-Border Transfers
HITCHNOVA may use hosting, AI, communications, analytics, payment or other technology providers. Before transferring personal data outside Oman, HITCHNOVA must apply the consent, protection and transfer-assessment requirements applicable under Omani law.
Automated Decisions and Human Review
Individuals may object to decisions resulting from automated processing where applicable. Material objections must be reviewed with appropriate human involvement.
Your Rights
Individuals may exercise rights available under applicable law, including withdrawal of consent where applicable, access, correction, update, transfer, blocking or deletion as applicable. Reasonable identity verification may be required.
Retention
Approved retention periods are: first-party site analytics — 90 days; public inquiry rate-limit records — approximately 48 hours; unconverted demo, sales and contact enquiries — 12 months from the last meaningful activity; resolved or closed support and complaint records — 24 months after closure; client project operational data — project duration plus 90 days after confirmed closure, subject to controlled dependency review; ordinary security and audit evidence — 12 months. Documented legal, accounting, active-dispute, high-risk incident or retention holds may require longer retention for the affected records.
Data Protection Officer
Hisham Albadi is appointed as the Personal Data Protection Officer for Fantasy Flowers Trading / HITCHNOVA effective 18 September 2026. Privacy requests and DPO communications may be sent to hitchnova.official@gmail.com.
Security and Incidents
HITCHNOVA applies layered access control, role separation, MFA where supported, server-side secret handling, validation, rate limiting, audit logging and tenant isolation. Qualifying personal-data breaches must be assessed, documented and notified within the time limits required by applicable Omani law.
No Sale of Personal Data
HITCHNOVA does not sell personal data as a business model.
Contact
Questions may be sent to hitchnova.official@gmail.com until dedicated domain addresses are activated and tested.
Versioning
Version: 1.0. Effective date: 19 September 2026.