Privacy policy
Novanila Privacy Policy
Last updated: 16 October 2026
This policy explains what personal information Novanila collects when you visit novanila.com, buy from us or contact us, why we use it, who we share it with and what your rights are.
1. Who we are
Novanila Ltd, trading as Novanila Jewellery, is the data controller for your personal information. We are registered in England and Wales, company number 17229043, and registered with the Information Commissioner's Office (ICO).
- Registered office: Suite RA01, 195–197 Wood Street, London, E17 3NU, United Kingdom
- Email: info@novanila.com (please use the subject line "Privacy")
- Phone / WhatsApp: +44 7776 604181
We are a small business and have not appointed a Data Protection Officer. Please send any privacy question to the email above.
2. What we collect
Information you give us
- Orders: name, delivery and billing address, email, phone number, what you bought, and your order and returns history.
- Account: if you create one, your login details and saved addresses.
- Messages: what you send us by email, WhatsApp, Instagram, TikTok or our contact form.
- Marketing: your email address and preferences if you sign up for our emails or the 10% welcome offer.
- Reviews: your review, name or username, and any photos you choose to share.
Payment details are entered directly with our payment providers (Shopify Payments, PayPal, Klarna). We never see or store your full card number.
Information collected automatically
- Device and browser type, IP address, approximate location (town or country level), pages viewed, products added to basket, and how you reached our site.
- This comes from cookies and similar technologies. Non-essential ones are only used if you accept them (see section 7).
3. Why we use it, and our legal basis
|
What we use it for |
Legal basis under UK GDPR |
|---|---|
|
Taking payment, sending your order, tracking, returns and refunds |
Performing our contract with you |
|
Answering your messages and complaints |
Contract, or our legitimate interest in providing good service |
|
Keeping accounting and tax records |
Legal obligation |
|
Preventing fraud and keeping our website secure |
Legitimate interests |
|
Understanding how our site is used so we can improve it (analytics) |
Your consent, via the cookie banner |
|
Showing you our ads on social media and measuring them (advertising pixels) |
Your consent, via the cookie banner |
|
Sending marketing emails |
Your consent; you can unsubscribe at any time |
|
Showing your review on our website or social media |
Your consent when you submit it |
You don't have to give us your information, but we can't take or deliver an order without your name, address and email.
We don't make decisions about you based solely on automated processing that have legal or similarly significant effects. Our payment providers run their own automated fraud and credit checks; Klarna's privacy notice explains how it assesses you.
4. Who we share it with
We only share what each provider needs to do its job for us:
- Shopify — hosts our shop, processes orders and payments, and sends some of our emails.
- Payment providers — Shopify Payments, PayPal, Apple Pay, Google Pay and Klarna. If you use Klarna, you are also its customer and its own privacy notice applies.
- Delivery companies — Royal Mail or another UK courier, for your name, address and contact details.
- WhatsApp (Meta) — if you message us there.
- Advertising and analytics — Meta (Facebook and Instagram), TikTok and Google, only if you accept these cookies.
- Professional advisers — such as our accountant, where needed.
- Authorities — such as HMRC or the police, if the law requires it.
We never sell your personal information.
5. International transfers
Some of these providers store or process information outside the UK, for example in Canada, the United States or the European Economic Area. Where this happens, they protect it with safeguards recognised by UK law, such as UK adequacy regulations or the UK International Data Transfer Agreement or Addendum. You can ask us for more detail.
6. How long we keep it
|
Information |
How long |
|---|---|
|
Orders, payments, refunds |
6 years from the end of the financial year (tax law) |
|
Your account |
Until you close it, or after 3 years with no activity |
|
Customer service messages |
2 years after the last contact |
|
Marketing email list |
Until you unsubscribe |
|
Reviews |
While they're shown, or until you ask us to remove them |
|
Analytics and advertising data |
As set by each provider, and no longer than 26 months |
7. Cookies
We use cookies that are strictly necessary for the shop to work, such as your basket and checkout. These don't need your consent.
With your permission, we also use analytics cookies (Google Analytics) and advertising cookies and pixels (Meta, TikTok, Google). When you first visit, our cookie banner lets you accept or reject these. You can change your choice at any time through the cookie or privacy settings link in our website footer, or by clearing cookies in your browser.
8. Marketing emails
We only send marketing emails if you've opted in. Every email has an unsubscribe link, and you can also email us to stop them. We'll still send emails about your orders.
9. Your rights
Under UK data protection law you can ask us to:
- give you a copy of the information we hold about you;
- correct anything that's wrong;
- delete your information (unless we must keep it, for example for tax records);
- restrict or object to how we use it, including stopping direct marketing at any time;
- send your information to you or another organisation in a portable format;
- withdraw any consent you've given, without affecting what we did before.
To use any of these rights, email info@novanila.com. We may ask you to confirm your identity. It's free, and we'll reply within one month (we may extend this by up to two months for complex requests, and we'll tell you why).
10. Children
Our shop is for adults. You must be 18 or over to place an order, and we don't knowingly collect information from children.
11. Keeping your information safe
Our shop runs on Shopify, which uses encryption (HTTPS) and is certified to the payment card industry security standard (PCI DSS). We limit who can access customer information and protect our accounts with strong passwords and two-step verification.
12. Complaints
If you're unhappy with how we've handled your information, please contact us first at info@novanila.com and we'll try to put it right.
You also have the right to complain to the Information Commissioner's Office (ICO): ico.org.uk, 0303 123 1113.
13. Changes to this policy
We may update this policy, for example if we start using a new service. The latest version will always be on this page with its date. If we make a significant change, we'll tell you by email or on our website.
© 2026 Novanila Ltd. All rights reserved.
