Privacy Policy

Last updated: April 1, 2026

Welcome to the Privacy Policy of Novastila. We are committed to protecting your personal information and being transparent about how we collect, use, and safeguard your data. Please read this policy carefully before using our website or placing an order.

This policy applies to customers in the United Kingdom and, where applicable, visitors from the European Union.

1. Data Controller

Store name: Novastila
Registered address: 25 John Martin St, Haydon Bridge, Hexham NE47 6AB, England, United Kingdom
Email: support@novastila.com

2. Information We Collect

2.1 Information You Provide

Full name
Email address
Billing and shipping address
Payment information (processed securely by our payment providers — we do not store full card details)
Order history and preferences
Messages sent to our customer support team or website chat

2.2 Information Collected Automatically

When you visit our website, certain technical information is automatically collected and stored in server log files. This may include:

Pages visited on our website
Date and time of access
Volume of data transferred
Referring URL
Browser type and version
Operating system
IP address (truncated or anonymised where technically possible)

Legal basis: Legitimate interest in maintaining a secure and functional website (Art. 6(1)(f) UK GDPR).

3. How We Use Your Information

We use the information we collect to:

Process and fulfil your orders
Send order confirmations and shipping updates
Respond to your enquiries via email and website chat
Improve our website, products, and shopping experience
Detect and prevent fraud or unauthorised transactions
Comply with applicable legal obligations
Send marketing communications (only with your consent)

4. Google Analytics

We may use Google Analytics to analyse website usage and improve our store's performance. Google Analytics uses cookies and similar technologies to collect information about how visitors use our site. Your IP address may be processed in a truncated or anonymised form where technically possible.

Information generated by Google Analytics may be transmitted to and stored on Google's servers, which may be located outside the UK/EEA. We rely on appropriate safeguards such as the UK International Data Transfer Agreement (IDTA) or Standard Contractual Clauses for any such transfers.

Legal basis: Consent (via our cookie banner) or legitimate interest in analysing site performance.

5. Cookies

We use cookies and similar technologies to ensure our website functions properly, improve user experience, and, with your consent, analyse website traffic and support our marketing activities.

What Are Cookies?

Cookies are small text files stored on your device when you visit a website. They help websites recognise your device and store certain information about your preferences or past actions.

Types of Cookies We Use

Essential cookies
These cookies are necessary for the operation of our website and cannot be disabled in our systems. They are usually set in response to actions made by you, such as adding items to your cart, logging in, or completing checkout.

Analytics cookies (subject to your consent)
These cookies help us understand how visitors interact with our website by collecting and reporting information anonymously. We use services such as Google Analytics for this purpose.

Marketing cookies (subject to your consent)
These cookies may be used to deliver relevant advertisements and track the effectiveness of our marketing campaigns.

Legal Basis for Cookies

Essential cookies: Legitimate interest (to provide a functional website)
Analytics and marketing cookies: Consent (via our cookie banner)

Cookie Consent

When you first visit our website, you will be presented with a cookie banner that allows you to:

Accept all cookies
Reject non-essential cookies
Manage your cookie preferences

Non-essential cookies (analytics and marketing) are only placed on your device after you have given your consent.

You can withdraw or change your consent at any time via the cookie settings tool available on our website.

Managing Cookies

You can also control and delete cookies through your browser settings. However, please note that disabling essential cookies may affect the functionality of our website.

Cookie Details

Below is an overview of the cookies we may use:

_ga – Google Analytics – Used to distinguish users – Retention: 2 years
_gid – Google Analytics – Used to distinguish users – Retention: 24 hours
_gat – Google Analytics – Used to limit request rate – Retention: 1 minute

Additional cookies may be set by Shopify and other service providers to enable core functionality such as checkout, payment processing, and security.

We may update this list from time to time to reflect changes in the cookies we use.

6. Sharing Your Information

We do not sell your personal information. We may share your data with trusted third parties only where necessary to operate our store, including:

Payment processors (e.g. PayPal, Shopify Payments) — to securely process transactions
Shipping carriers — to fulfil and deliver your orders
Shopify Inc. — our e-commerce platform provider
Analytics providers (e.g. Google Analytics) — to analyse site performance
Legal authorities — where required by law or to protect our rights

All third-party providers are required to handle your data in accordance with applicable privacy laws and our data processing agreements.

7. International Data Transfers

As Novastila is registered in the Netherlands, some data processing may occur within the EU/EEA. Where data is transferred outside the UK or EEA, we ensure appropriate safeguards are in place, including the UK International Data Transfer Agreement (IDTA) or Standard Contractual Clauses (SCCs).

8. Data Retention

Order data: Retained for a minimum of 7 years to comply with applicable tax and accounting obligations.
Customer account data: Retained until you request deletion.
Marketing data: Retained until you unsubscribe or withdraw consent.

9. Your Rights

Under UK GDPR and the Data Protection Act 2018, you have the following rights:

Right of access (Art. 15 UK GDPR)
Right to rectification (Art. 16 UK GDPR)
Right to erasure / "right to be forgotten" (Art. 17 UK GDPR)
Right to restriction of processing (Art. 18 UK GDPR)
Right to data portability (Art. 20 UK GDPR)
Right to object (Art. 21 UK GDPR)
Right to withdraw consent at any time (Art. 7(3) UK GDPR)

To exercise your rights, contact us at support@novastila.com or via our website chat.

You also have the right to lodge a complaint with the Information Commissioner's Office (ICO): Website: https://ico.org.uk Phone: 0303 123 1113

As Novastila is registered in the Netherlands, EU visitors may also contact the Autoriteit Persoonsgegevens (AP): https://www.autoriteitpersoonsgegevens.nl

10. Data Security

We implement appropriate technical and organisational measures to protect your data against unauthorised access, loss, misuse, alteration, or disclosure. Our website is protected by a valid SSL certificate, ensuring all data exchanged between your browser and our server is encrypted.

11. Children's Privacy

Our website is not directed to children under the age of 13. We do not knowingly collect personal information from children under 13. If you believe we have inadvertently collected such information, please contact us at support@novastila.com.

12. Cookie Consent Banner

When you first visit our website, a cookie consent banner will be displayed. By accepting cookies, you consent to their use for essential functions and, depending on your selection, for analytics and marketing purposes. You may change or withdraw your consent at any time by adjusting your browser settings.

13. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in legal requirements, our business practices, or our services. The current version will always be published on this page, and the "Last updated" date will be adjusted accordingly.

Your cart is empty

Your cart

Estimated total