Privacy policy
Last updated: 20 August 2026
This notice explains what personal data Novera Clothing Ltd collects about you, why we collect it, what we do with it, and the rights you have over it. We are the data controller for the personal data described here, and we process it in accordance with the UK GDPR and the Data Protection Act 2018.
1. Who we are
Novera Clothing Ltd
Registered office: 12 Elm Road, Plymouth, PL4 7BA, United Kingdom
Registered in England and Wales, company number [[COMPANY NUMBER]]
Email: support@noveraclothing.shop
We are not required to appoint a Data Protection Officer. Data protection questions should be sent to the email address above and will be handled by our data protection contact.
2. The personal data we collect
| Category | Examples |
|---|---|
| Identity and contact data | Name, billing address, delivery address, email address, telephone number |
| Order and transaction data | Items purchased, order value, order history, delivery status, returns and refunds |
| Payment data | Payment method, the last four digits and expiry of your card, authorisation result. We never see or store your full card number or security code — these go directly to our payment providers |
| Account data | Login credentials, saved addresses, preferences, wish lists |
| Communications data | Emails and messages you send us, customer service notes, marketing preferences |
| Technical and usage data | IP address, device and browser type, pages viewed, referring site, time on site, cookie identifiers |
We do not collect special category data (such as health or biometric data), and we do not knowingly collect data from children under 16. If you believe a child has given us their data, contact us and we will delete it.
3. Where we get your data
- Directly from you — when you place an order, create an account, sign up to our newsletter, contact us, or enter a competition.
- Automatically — through cookies and similar technologies when you use our website (see section 7).
- From our service providers — for example our payment providers confirming a payment result, or our carrier confirming a delivery.
4. Why we use your data, and our lawful basis
| Purpose | Data used | Lawful basis |
|---|---|---|
| Taking and fulfilling your order, processing payment, arranging delivery, handling returns and refunds | Identity, contact, order, payment | Performance of a contract with you |
| Managing your account and saved preferences | Account, identity, contact | Performance of a contract |
| Customer service and responding to your enquiries | Contact, order, communications | Performance of a contract and our legitimate interests in running a responsive business |
| Keeping accounting and tax records | Identity, order, payment | Legal obligation (Companies Act 2006, tax legislation) |
| Fraud prevention, site security and preventing abuse | Technical, order, payment | Legitimate interests in protecting our business and customers, and legal obligation |
| Sending marketing emails to people who have bought from us, about similar products | Contact, order | Legitimate interests, relying on the PECR "soft opt-in". You can opt out at any time |
| Sending marketing emails to people who have signed up but not purchased | Contact | Consent |
| Non-essential cookies, advertising and audience measurement | Technical, usage | Consent given through our cookie banner |
| Product reviews you choose to submit | Identity, communications | Consent |
| Understanding how our site is used so we can improve it | Technical, usage (aggregated) | Legitimate interests in improving our service — you can object at any time |
Where we rely on legitimate interests, we have assessed that our interests do not override your rights and freedoms. You can ask us for details of that assessment.
Providing your name, delivery address, email address and payment details is necessary for us to enter into and perform a contract with you. If you do not provide them, we cannot accept your order.
5. Who we share your data with
We do not sell your personal data. We share it only with organisations that help us run the shop, and only as far as they need it:
- Shopify Inc. — our e-commerce platform and website host, acting as our processor under the Shopify Data Processing Addendum. Shopify also acts as a controller in its own right for certain network-wide security, fraud prevention and enhanced services; you can read the Shopify Consumer Privacy Policy.
- Payment providers — Shopify Payments, and any other payment method offered at checkout (for example PayPal, Apple Pay, Google Pay, Shop Pay or Klarna). These providers are independent controllers of the payment data you give them.
- Delivery carriers — to deliver your order and provide tracking.
- Email and marketing platforms — to send order confirmations and, where you have opted in, marketing emails.
- Analytics and advertising providers — only where you have consented through our cookie banner.
- Professional advisers — accountants, insurers and lawyers, where necessary.
- Authorities — where we are required to disclose data by law, or to establish, exercise or defend legal claims.
- A buyer of our business — if we sell or restructure the business, subject to the same protections.
6. International transfers
Some of our providers, including Shopify, process data outside the United Kingdom. Where personal data leaves the UK we rely on one of the following safeguards:
- a UK adequacy decision covering the destination country; or
- the International Data Transfer Agreement, or the EU Standard Contractual Clauses with the UK International Data Transfer Addendum.
You can request a copy of the safeguards in place by emailing us.
7. Cookies and similar technologies
We use cookies and similar technologies to make the site work and, with your consent, to measure and improve it.
- Strictly necessary — cart contents, checkout session, login, security and fraud prevention. These do not require consent because without them the service you asked for cannot be provided.
- Appearance and functionality — remembering preferences such as language or currency. You can object to these at any time.
- Statistical — aggregated measurement of how the site is used so we can improve it. These do not identify or track you individually, and you can object at any time.
- Advertising and tracking — used only if you give consent, for example advertising pixels and retargeting.
You can accept, reject or change your choices at any time through the cookie banner or the cookie settings link on our site. You can also block or delete cookies in your browser, though blocking strictly necessary cookies will stop parts of the shop working. This section is given under the Privacy and Electronic Communications Regulations 2003.
8. Marketing
If you have bought from us, we may email you about similar products under the PECR soft opt-in, and every message gives you a one-click way to stop. If you have not bought from us, we will only email you if you have opted in. You can withdraw consent or unsubscribe at any time using the link in any email or by emailing support@noveraclothing.shop. Withdrawing consent does not affect the lawfulness of processing before you withdrew it. We will still send you essential service messages such as order confirmations and dispatch notices.
9. How long we keep your data
| Data | Retention period |
|---|---|
| Order, transaction and accounting records | 7 years from the end of the financial year, to meet tax and company law requirements |
| Customer account data | While your account is active, then 3 years after your last activity |
| Customer service correspondence | 3 years from the last contact |
| Marketing consent and preference records | Until you unsubscribe, then 3 years as proof that we honoured your choice |
| Cookie and analytics data | Up to 24 months, or as set out in the cookie banner |
Where we no longer need your data we delete it or irreversibly anonymise it.
10. How we protect your data
Our site runs over encrypted HTTPS connections. Payment card data is handled by PCI DSS compliant payment providers and never stored on our systems. Access to customer data is limited to people who need it, protected by strong passwords and two-factor authentication. We keep our platform and apps up to date and review the third parties we use. No system is perfectly secure, so please do not send us sensitive information such as full card numbers by email.
11. Your rights
Under the UK GDPR you have the right to:
- Be informed about how we use your data — this notice.
- Access a copy of the personal data we hold about you.
- Rectification of inaccurate or incomplete data.
- Erasure of your data, where we have no overriding reason to keep it.
- Restrict processing in certain circumstances.
- Data portability — receive data you gave us in a structured, machine-readable format, or have it sent to another controller.
- Object to processing based on our legitimate interests, and to direct marketing at any time — an objection to direct marketing is always absolute.
- Withdraw consent at any time where we rely on consent.
- Not be subject to solely automated decisions with legal or similarly significant effects. We do not make such decisions.
To exercise any right, email support@noveraclothing.shop. We may need to verify your identity. We will respond within one month, which we may extend by up to two further months for complex requests — we will tell you if that happens. Exercising your rights is free unless a request is manifestly unfounded or excessive.
12. Complaints
If you are unhappy with how we have handled your personal data, please tell us first at support@noveraclothing.shop. You can raise a data protection complaint with us in any form and by any channel. We will acknowledge your complaint within 30 days, take appropriate steps to investigate it without undue delay, and tell you the outcome.
You also have the right to complain to the UK supervisory authority at any time:
Information Commissioner's Office
Wycliffe House, Water Lane, Wilmslow, Cheshire, SK9 5AF
Helpline: 0303 123 1113 — ico.org.uk
13. Changes to this notice
We may update this notice to reflect changes in how we work or in the law. We will change the "last updated" date at the top, and where the change is significant we will tell you by email or a notice on the site.