Privacy policy

Privacy Policy

Last updated: March 31, 2025

This Privacy Policy describes how A&A Digital Ltd, trading as Nuvora ("we", "us", "our") collects, uses, and protects your personal data when you visit, use our services, or make a purchase from ekxgh3-u8.myshopify.com (the "Site"). It also applies to any personal data we collect when you interact with us regarding the Site (collectively, the "Services").

Please read this Privacy Policy carefully. If you do not agree with our practices, please do not use our Services.

1. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, legal or regulatory obligations. When we do, we will update the "Last updated" date above and take any additional steps required by law.

2. How We Collect and Use Your Personal Data

We collect personal data from you in several ways, depending on your interaction with us. We only collect and process data where we have a lawful basis to do so under the UK GDPR or EU GDPR.

Information You Provide to Us

  • Contact Details: name, email address, phone number, postal address

  • Order Information: billing and shipping details, payment confirmation, order history

  • Account Information: username, password, security questions

  • Support Inquiries: any data you provide in messages or support requests

Lawful basis: Contractual necessity (Article 6(1)(b)), Legitimate interest (Article 6(1)(f))

Information We Automatically Collect

We use cookies and similar tracking technologies to collect data like:

  • IP address, device type, browser, referral URLs

  • Browsing and interaction data

  • Location information inferred from your device or connection

Lawful basis: Legitimate interest (Article 6(1)(f)), Consent (Article 6(1)(a)) where required

See our Cookie Policy for full details.

Information from Third Parties

We may receive data from:

  • Shopify (store platform)

  • Payment processors (for secure payment handling)

  • Marketing and analytics tools

  • Advertising partners and affiliates

Lawful basis: Contractual necessity, Consent, Legitimate interest

3. How We Use Your Personal Data

To Provide Our Services

To process orders, deliver goods, send notifications, and administer your account.
Lawful basis: Contract (Article 6(1)(b))

Marketing and Advertising

We may send marketing communications or show you ads based on your browsing behaviour.
Lawful basis: Legitimate interest (Article 6(1)(f)) or Consent (Article 6(1)(a))

You may opt out of direct marketing at any time.

Fraud Prevention and Security

We use data to detect suspicious activity and protect our Site.
Lawful basis: Legitimate interest (Article 6(1)(f))

Improving Services and Communications

We analyse data to improve the performance and user experience of our Site.
Lawful basis: Legitimate interest (Article 6(1)(f))

4. Cookies and Tracking Technologies

We use cookies to:

  • Operate our Site

  • Remember preferences

  • Analyse traffic and usage

  • Provide targeted ads

You can manage your cookie preferences through our cookie banner or browser settings. Blocking cookies may limit some features.

We honour the Global Privacy Control (GPC) signal as an opt-out request from profiling and marketing cookies.

5. Sharing Your Personal Data

We only share your personal data when necessary and in compliance with data protection law. This may include:

Data Category Shared With
Identifiers, contact details Service providers (e.g. shipping, payment)
Order and transaction data Shopify, payment processors
Usage data and analytics Analytics and marketing partners (e.g. Shopify, Meta, Google)
Device and geolocation data Marketing and personalisation services

We do not sell your data. We do not use or share special category data (sensitive data) without explicit consent.

6. Your Rights Under UK and EU Law

Depending on your location, you may have the following rights:

  • Access – to request a copy of the data we hold about you

  • Rectification – to correct inaccurate or incomplete data

  • Erasure ("right to be forgotten") – in certain circumstances

  • Restriction – to limit how your data is processed

  • Objection – to processing for direct marketing or profiling

  • Data portability – to receive your data in a machine-readable format

  • Withdraw consent – where processing is based on your consent

  • Lodge a complaint – with your data protection authority (e.g., ICO in the UK)

You can exercise these rights by emailing us at Help@getnuvora.com. We may need to verify your identity.

7. International Data Transfers

Your data may be processed outside the UK or EEA, including by Shopify and other third-party providers. Where required, we ensure appropriate safeguards are in place, such as:

  • Standard Contractual Clauses (SCCs) approved by the European Commission or UK

  • Adequacy decisions (e.g., for countries deemed to provide sufficient data protection)

8. Data Retention

We retain your personal data only as long as necessary for the purposes for which it was collected, including to:

  • Maintain your account

  • Fulfil contracts and transactions

  • Meet legal and regulatory requirements

9. Children’s Privacy

Our Services are not intended for children under 16, and we do not knowingly collect data from them. If you believe a child has provided us their data, please contact us for deletion.

10. Third-Party Sites and Services

Our Site may contain links to external sites. We are not responsible for their privacy practices. You should review their privacy policies separately.

11. Contact Us

For any questions about this Privacy Policy or to exercise your rights, contact:

A&A Digital Ltd (t/a Nuvora)
Company Number: 16425478
Flat 17, 47–51 Tollington Park,
Finsbury Park, London, N4 3QX,
United Kingdom
Email: Help@getnuvora.com

You may also lodge a complaint with the UK Information Commissioner’s Office (ICO) or your local EU data protection authority.