Privacy policy

Last updated: 24 May 2026

  1. Introduction

Novva Living is a United Kingdom-based online retailer dedicated to enhancing everyday life through a carefully curated selection of quality products. This Privacy Policy explains how we collect, use, store, and share your personal information when you visit or make a purchase from novvaliving.com.

We are committed to protecting your personal data and complying with applicable data protection legislation, including the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018. By using our website, you agree to the practices described in this policy.

  1. Data We Collect

We may collect the following personal information: name, email address, billing and delivery address, telephone number, payment information, IP address, browser type, device information, purchase history, and communications with our customer service team.

  1. How We Use Your Data

We use your data to process and fulfil orders, manage your account, send order confirmations and shipping updates, provide customer support, send marketing communications (where you have opted in), improve our website and services, prevent fraud, and comply with legal obligations.

  1. Sharing Your Data

We do not sell your personal data. We may share it with trusted third parties including Shopify Inc. (our e-commerce platform), payment processors, delivery partners, analytics providers (e.g. Google Analytics), and advertising platforms (e.g. Meta, TikTok), solely to operate our business and fulfil your orders.

  1. Your Rights

Depending on where you are located, you may have the following rights regarding your personal data:

🇬🇧 UK (UK GDPR) Right to access, rectify, erase, restrict, port your data, object to processing, or withdraw consent.

🇺🇸 United States (CCPA/CPRA) Right to know, delete, and opt out of the sale or sharing of your data.

🇨🇦 Canada (PIPEDA) Right to access, correct, and withdraw consent.

🇦🇺 Australia (Privacy Act 1988) Right to access, correct, and lodge a complaint with the OAIC.

🇳🇿 New Zealand (Privacy Act 2020) Right to access, correct, and lodge a complaint with the OPC.

🇧🇪 Belgium (EU GDPR) Right to access, rectify, erase, restrict, port your data, object to processing, or withdraw consent. Complaints may be lodged with the APD/GBA.

🇨🇿 Czech Republic (EU GDPR) Right to access, rectify, erase, restrict, port your data, object to processing, or withdraw consent. Complaints may be lodged with the UOOU.

🇫🇷 France (EU GDPR & Loi Informatique et Libertés) Right to access, rectify, erase, restrict, port your data, object to processing, or withdraw consent. Complaints may be lodged with the CNIL.

🇩🇪 Germany (EU GDPR) Right to access, rectify, erase, restrict, port your data, object to processing, or withdraw consent. Complaints may be lodged with the BfDI or your regional data protection authority.

🇳🇬 Nigeria (Nigeria Data Protection Act 2023) Right to access, rectify, delete, and object to processing. Complaints may be lodged with the NDPC.

🇸🇬 Singapore (Personal Data Protection Act 2012) Right to access, correct, and withdraw consent. Complaints may be lodged with the PDPC.

🇲🇾 Malaysia (Personal Data Protection Act 2010) Right to access, correct, and withdraw consent. Complaints may be lodged with the JPDP.

🇪🇸 Spain (EU GDPR) Right to access, rectify, erase, restrict, port your data, object to processing, or withdraw consent. Complaints may be lodged with the AEPD.

🇿🇦 South Africa (POPIA 2013) Right to access, correct, delete, and object to processing. Complaints may be lodged with the Information Regulator.

🇱🇰 Sri Lanka (Personal Data Protection Act 2022) Right to access, correct, and withdraw consent. Complaints may be lodged with the Data Protection Authority.

To exercise any of these rights, contact us at hello@novvaliving.com. We will respond within 30 days.

  1. Cookies

We use essential, analytics, and marketing cookies. You may manage your preferences via our cookie banner or browser settings. For full details, please see our Cookie Policy.

  1. Data Retention

We retain order and transaction data for 7 years (UK legal requirement), marketing data until you unsubscribe, and account data for the duration of your account plus a reasonable period thereafter.

  1. Security

We implement appropriate technical and organisational measures to protect your data. Our website is hosted on Shopify, which maintains PCI DSS compliance for payment data.

  1. Changes to This Policy

We may update this policy periodically. Any changes will be posted on this page with an updated date.

  1. Contact Us

Email: hello@novvaliving.com Live Chat: Available on our website at novvaliving.com

UK residents may also contact the ICO: ico.org.uk | 0303 123 1113