Politique de confidentialité
Last updated: 24 May 2026
Your privacy matters to us. This policy explains what data we collect, why we collect it, and how we protect it. If you have any questions, contact us at hello@novvaliving.com or via Live Chat.
1. Who We Are
Novva Living is a United Kingdom-based online retailer selling premium home and lifestyle products worldwide.
Data controller: Novva Living Contact: hello@novvaliving.com
2. What We Collect
| Data Type | Examples |
|---|---|
| Identity & contact | Name, email, billing and delivery address, phone number |
| Transaction | Purchase details, payment records, order history |
| Account | Username, password, preferences |
| Technical | IP address, browser type, device info, cookies |
| Usage | Pages visited, links clicked, on-site behaviour |
| Communications | Live chat, emails, support interactions |
| Marketing preferences | Your opt-in choices for marketing |
3. How We Use Your Data
- Fulfilling and processing your orders (contract)
- Managing your account (contract)
- Providing customer support (legitimate interests)
- Sending order confirmations and shipping updates (contract)
- Sending marketing communications where you've opted in (consent)
- Improving our website and services (legitimate interests)
- Fraud prevention and security (legitimate interests / legal obligation)
- Complying with legal obligations (legal obligation)
4. Who We Share It With
We do not sell your personal data. We work with trusted partners to operate our business:
- Shopify Inc. — our e-commerce platform
- Payment processors — to handle transactions securely
- Delivery and logistics partners — to fulfil your orders
- Analytics providers — such as Google Analytics
- Advertising platforms — such as Meta and TikTok
- Live chat and email marketing providers
- Legal and regulatory authorities — where required by law
5. Your Rights
To exercise any of the rights below, email hello@novvaliving.com. We respond within 30 days.
| Country | Your Rights & Authority |
|---|---|
| Albania | Access, correct, withdraw consent. Complaints: IDP. |
| Argentina | Access, rectify, delete. Complaints: AAIP. |
| Armenia | Access, correct, withdraw consent. Complaints: Personal Data Protection Agency. |
| Australia | Access, correct, complain. Complaints: OAIC. |
| Austria | Full GDPR rights. Complaints: DSB. |
| Bahamas | Contact us at hello@novvaliving.com for data requests. |
| Barbados | Access, correct, withdraw consent. Complaints: Data Protection Commissioner. |
| Belgium | Full GDPR rights. Complaints: APD/GBA. |
| Bosnia | Access, correct, withdraw consent. Complaints: Personal Data Protection Agency of BiH. |
| Brazil | Access, correct, delete, object. Complaints: ANPD. |
| Canada | Access, correct, withdraw consent. (PIPEDA) |
| Chile | Access, rectify, delete. Complaints: CPLT. |
| Czech Republic | Full GDPR rights. Complaints: UOOU. |
| Denmark | Full GDPR rights. Complaints: Datatilsynet. |
| Estonia | Full GDPR rights. Complaints: AKI. |
| Finland | Full GDPR rights. Complaints: Tietosuojavaltuutettu. |
| France | Full GDPR rights. Complaints: CNIL. |
| Germany | Full GDPR rights. Complaints: BfDI or regional authority. |
| Greece | Full GDPR rights. Complaints: HDPA. |
| Hungary | Full GDPR rights. Complaints: NAIH. |
| Ireland | Full GDPR rights. Complaints: DPC. |
| Italy | Full GDPR rights. Complaints: Garante. |
| Japan | Access, correct, request cessation. Complaints: PPC. |
| Kazakhstan | Access, correct, withdraw consent. Complaints: MDIAP. |
| Luxembourg | Full GDPR rights. Complaints: CNPD. |
| Malaysia | Access, correct, withdraw consent. Complaints: JPDP. |
| Netherlands | Full GDPR rights. Complaints: Autoriteit Persoonsgegevens. |
| New Zealand | Access, correct, complain. Complaints: OPC. |
| Nigeria | Access, rectify, delete, object. Complaints: NDPC. |
| Norway | Full GDPR rights (EEA). Complaints: Datatilsynet. |
| Poland | Full GDPR rights. Complaints: UODO. |
| Portugal | Full GDPR rights. Complaints: CNPD. |
| Romania | Full GDPR rights. Complaints: ANSPDCP. |
| Serbia | Access, rectify, erase, object. Complaints: Commissioner for Information. |
| Singapore | Access, correct, withdraw consent. Complaints: PDPC. |
| South Africa | Access, correct, delete, object. Complaints: Information Regulator. |
| Spain | Full GDPR rights. Complaints: AEPD. |
| Sri Lanka | Access, correct, withdraw consent. Complaints: Data Protection Authority. |
| Sweden | Full GDPR rights. Complaints: IMY. |
| Switzerland | Access, correct, object. Complaints: FDPIC. |
| Ukraine | Access, correct, delete, object. Complaints: Ombudsman. |
| United Kingdom | Full UK GDPR rights — access, rectify, erase, restrict, port, object, or withdraw consent. Complaints: ICO (ico.org.uk / 0303 123 1113). |
| United States | Right to know, delete, and opt out of sale or sharing. (CCPA/CPRA) |
6. Cookies & Tracking
We use cookies to run our site, understand how it's used, and deliver relevant advertising.
- Essential cookies — required for the site to function
- Analytics cookies — to understand visitor behaviour (e.g. Google Analytics)
- Marketing cookies — to deliver relevant ads (e.g. Meta Pixel, TikTok Pixel)
Manage your preferences via our cookie banner or browser settings at any time.
7. Security & Data Retention
We use reasonable technical and organisational measures to protect your data. Our platform (Shopify) maintains PCI DSS compliance for all payment data.
| Data Type | Retention Period |
|---|---|
| Order & transaction data | 7 years (UK legal requirement) |
| Marketing data | Until you withdraw consent or unsubscribe |
| Live chat records | Up to 2 years |
| Account data | Duration of account plus a reasonable period thereafter |
8. Changes to This Policy
We may update this policy from time to time. Any changes will be posted on this page — we recommend reviewing it periodically.
Contact Us
Email: hello@novvaliving.com Live Chat: Available on our website
We respond to all privacy enquiries within 30 days.
UK residents may also contact the ICO directly: ico.org.uk | 0303 123 1113