Novva Living Privacy Policy
Your Guide to All Things Privacy
- What we collect — the personal information covered by this policy.
- How we use it — why we process your information.
- Who we share it with — the providers supporting our store.
- Your choices — marketing preferences, cookies and privacy rights.
- Keeping in touch — policy updates, questions and complaints.
Frequently Asked Questions
Who we are
Novva Living is an online retailer based in the United Kingdom. We process personal information to operate our store, fulfil orders, provide customer support, protect our services and meet applicable legal obligations.
Contact: hello@novvaliving.com.
Information we collect
The information collected depends on how you interact with our store and may include:
| Data type | Examples |
|---|---|
| Identity and contact information | name, email, telephone number and billing or delivery address. |
| Transaction information | purchases, payment records, refunds, shipping information and order history. |
| Account information | account identifiers, saved preferences and authentication information. |
| Technical information | IP address, browser, device information, cookies and similar technologies. |
| Usage information | pages visited, links selected and website interactions. |
| Communications | emails, live-chat messages, forms, reviews and support history. |
| Marketing preferences | subscription, consent and communication choices. |
Payment providers process complete card or payment credentials. Novva Living does not directly store complete card details.
How we use information
- Processing and fulfilling orders, under performance of a contract.
- Managing accounts and saved preferences, under performance of a contract.
- Sending confirmations, tracking details and service updates, under performance of a contract.
- Providing customer support, under contractual necessity or legitimate interests.
- Preventing fraud, misuse and security incidents, under legitimate interests or legal obligation.
- Improving our website and services, under legitimate interests.
- Sending permitted marketing communications, under consent or another applicable basis.
- Meeting tax, accounting, regulatory and legal obligations.
Sharing information
We may share information with service providers where necessary to operate our business, fulfil purchases, provide support and protect our services.
- Shopify, our ecommerce and checkout platform.
- Payment providers, which securely process transactions.
- Suppliers, fulfilment providers and delivery partners, which prepare and deliver orders.
- Analytics providers, such as Google Analytics, where enabled.
- Advertising platforms, such as Google, Meta, Pinterest or TikTok, where enabled and permitted.
- Email, chat, support and review providers used to communicate with customers.
- Professional advisers and authorities where required or permitted by law.
Your Rights
To exercise any of the rights below, email hello@novvaliving.com. We respond within 30 days.
| Country | Your Rights & Authority |
|---|---|
| Albania | Access, correct, withdraw consent. Complaints: IDP. |
| Argentina | Access, rectify, delete. Complaints: AAIP. |
| Armenia | Access, correct, withdraw consent. Complaints: Personal Data Protection Agency. |
| Australia | Access, correct, complain. Complaints: OAIC. |
| Austria | Full GDPR rights. Complaints: DSB. |
| Bahamas | Contact hello@novvaliving.com for data requests. |
| Barbados | Access, correct, withdraw consent. Complaints: Data Protection Commissioner. |
| Belgium | Full GDPR rights. Complaints: APD/GBA. |
| Bosnia | Access, correct, withdraw consent. Complaints: Personal Data Protection Agency of BiH. |
| Brazil | Access, correct, delete, object. Complaints: ANPD. |
| Canada | Access, correct, withdraw consent. (PIPEDA) |
| Chile | Access, rectify, delete. Complaints: CPLT. |
| Croatia | Full GDPR rights. Contact hello@novvaliving.com for data requests. |
| Czech Republic | Full GDPR rights. Complaints: UOOU. |
| Denmark | Full GDPR rights. Complaints: Datatilsynet. |
| Estonia | Full GDPR rights. Complaints: AKI. |
| Finland | Full GDPR rights. Complaints: Tietosuojavaltuutettu. |
| France | Full GDPR rights. Complaints: CNIL. |
| Germany | Full GDPR rights. Complaints: BfDI or regional authority. |
| Greece | Full GDPR rights. Complaints: HDPA. |
| Hungary | Full GDPR rights. Complaints: NAIH. |
| Ireland | Full GDPR rights. Complaints: DPC. |
| Italy | Full GDPR rights. Complaints: Garante. |
| Japan | Access, correct, request cessation. Complaints: PPC. |
| Kazakhstan | Access, correct, withdraw consent. Complaints: MDIAP. |
| Luxembourg | Full GDPR rights. Complaints: CNPD. |
| Malaysia | Access, correct, withdraw consent. Complaints: JPDP. |
| Mexico | Contact hello@novvaliving.com for data requests and information about your privacy rights. |
| Netherlands | Full GDPR rights. Complaints: Autoriteit Persoonsgegevens. |
| New Zealand | Access, correct, complain. Complaints: OPC. |
| Nigeria | Access, rectify, delete, object. Complaints: NDPC. |
| Norway | Full GDPR rights (EEA). Complaints: Datatilsynet. |
| Poland | Full GDPR rights. Complaints: UODO. |
| Portugal | Full GDPR rights. Complaints: CNPD. |
| Romania | Full GDPR rights. Complaints: ANSPDCP. |
| Serbia | Access, rectify, erase, object. Complaints: Commissioner for Information. |
| Singapore | Access, correct, withdraw consent. Complaints: PDPC. |
| South Africa | Access, correct, delete, object. Complaints: Information Regulator. |
| Spain | Full GDPR rights. Complaints: AEPD. |
| Sri Lanka | Access, correct, withdraw consent. Complaints: Data Protection Authority. |
| Sweden | Full GDPR rights. Complaints: IMY. |
| Switzerland | Access, correct, object. Complaints: FDPIC. |
| Ukraine | Access, correct, delete, object. Complaints: Ombudsman. |
| United Kingdom | Full UK GDPR rights — access, rectify, erase, restrict, port, object, or withdraw consent. Complaints: ICO (ico.org.uk / 0303 123 1113). |
| United States | Right to know, delete, and opt out of sale or sharing. (CCPA/CPRA) |
Your rights depend on where you live and the law applicable to the processing. They may include the right to:
- Request access to personal information held about you.
- Correct inaccurate or incomplete information.
- Request deletion of certain information.
- Restrict or object to certain processing.
- Receive certain information in a portable format.
- Withdraw consent where processing is based on consent.
- Opt out of certain targeted advertising, selling or sharing where applicable.
- Complain to an appropriate privacy authority.
United Kingdom: Rights may include access, correction, erasure, restriction, portability, objection and withdrawal of consent.
European Economic Area: Residents may have GDPR rights and may contact the supervisory authority in their country.
United States: Depending on the state, rights may include access, deletion, correction and certain opt-outs.
Other locations: Additional access, correction, deletion, objection or complaint rights may apply under local law.
Submit a request to hello@novvaliving.com. We may need to verify your identity. Eligible US visitors can also use our Your Privacy Choices page.
Cookies and tracking
We use cookies and similar technologies to operate the store, maintain sessions, remember preferences, understand website performance and support permitted advertising.
- Essential cookies: required for security, accounts, cart and checkout.
- Analytics cookies: used to understand website activity and performance.
- Preference cookies: used to remember choices such as language, currency or region.
- Marketing cookies: used to measure campaigns or support relevant advertising where permitted.
Manage preferences through our consent controls and browser settings. Read our Cookie Policy for more information.
International transfers
Our providers may process information in countries other than the country in which you live.
Where required, we use recognised safeguards such as contractual protections, adequacy regulations or another lawful transfer mechanism.
Security
We use reasonable technical and organisational measures intended to protect personal information against unauthorised access, loss, misuse, alteration or disclosure.
Our store is hosted by Shopify and payments are processed by secure payment providers. No internet transmission or storage system can be guaranteed completely secure.
Data retention
| Data type | Retention period |
|---|---|
| Order and transaction records | generally seven years where required for UK tax and accounting purposes. |
| Marketing information | until consent is withdrawn, you unsubscribe or it is no longer needed. |
| Support records | may be retained for up to two years, subject to operational and legal needs. |
| Account information | while the account is active and for a reasonable period afterwards. |
Marketing communications
Where permitted, we may send information about products, offers or store updates based on your preferences.
You can unsubscribe using the link in a marketing email. This does not stop essential order, account, security or service messages.
Children’s information
Our store is not intended for children unable to enter into a valid purchase contract under applicable law.
If you believe a child provided information improperly, contact us so we can review the matter.
Policy updates
We may update this policy to reflect changes in our services, providers, technology, business practices or applicable requirements.
The revised version will be published on this page with an updated date.
Contact and complaints
Contact hello@novvaliving.com to exercise a privacy right, ask how information is used or raise a concern.
UK residents may also contact the Information Commissioner’s Office at ico.org.uk or by telephone on 0303 123 1113.