Privacy Notice

Last updated: 15 June 2026

NovaVitality Ltd
Website: novavitality.co.uk
Email: [email protected]
Company Number: 16876356 (UK)

1. Who We Are

NovaVitality Ltd ("we", "us", "our") is a UK-based distributor of research-use products. We act as the data controller for the purposes of the UK General Data Protection Regulation (UK GDPR).

2. What Data We Collect

• Personal details: Name, billing/shipping address, email, phone number
• Order data: Products purchased, batch details, quantities, transaction history
• Age verification: Confirmation of 18+ status (retained for compliance)
• Account data: Login credentials (hashed), purchase history
• Marketing preferences: Email and WhatsApp opt-in status
• Technical data: IP address, browser, device information
• Uploaded content: Images or files submitted via returns or contact forms
• Cookies and tracking data (see Cookie Policy)

3. How We Use Your Data

We use your data to:

• Process, fulfil, and deliver orders
• Provide customer support and handle return requests
• Verify compliance (e.g. age and research-use requirements)
• Maintain legal and financial records
• Prevent fraud and ensure site security
• Send order confirmations and service communications
• Send marketing communications (where consent is given)
• Analyse website performance (with consent)

4. Lawful Basis for Processing

• Contract: Processing orders and providing services
• Legal obligation: Tax, accounting, and regulatory compliance
• Legitimate interests: Fraud prevention and business security
• Consent: Marketing, WhatsApp communication, analytics cookies

5. Data Retention

• Orders and transaction records: 6 years
• Customer accounts: Active period + up to 6 years after last activity
• Returns submissions and uploaded images: Up to 12 months
• Marketing data: Until consent is withdrawn
• Support enquiries: Up to 12 months

6. Sharing Your Data

We may share your data with:

• Payment providers (e.g. Stripe, Klarna)
• Delivery and logistics providers
• Email platforms (e.g. Mailchimp)
• WhatsApp Business (Meta Platforms)
• Analytics providers (e.g. Google Analytics)
• IT and security service providers
• Regulatory authorities where required

We do not sell or rent your personal data.

7. International Transfers

Some data may be processed outside the UK. Where this occurs, we ensure appropriate safeguards such as Standard Contractual Clauses (SCCs) or adequacy decisions are in place.

8. Your Rights

You have the right to:

• Access your data
• Correct inaccurate data
• Request deletion (subject to legal requirements)
• Restrict or object to processing
• Request data portability
• Withdraw consent at any time
• Lodge a complaint with the ICO (ico.org.uk)

To exercise your rights, contact: [email protected]

9. Marketing & Communications

Marketing emails and WhatsApp communications are sent only with your explicit consent. You may withdraw consent at any time by:

• Clicking "Unsubscribe" in emails
• Replying "STOP" to WhatsApp messages
• Contacting support

10. Cookies

We use cookies for:

• Essential site functionality
• Performance and analytics (with consent)
• Marketing and advertising (with consent)

See our Cookie Policy for full details and how to manage preferences.

11. Data Security

We implement appropriate technical and organisational measures to protect your data. This includes encryption, secure servers, and access controls.

12. Data Breaches

In the event of a data breach, we will notify affected users and the Information Commissioner's Office (ICO) within 72 hours where legally required.

13. Children

Our products and services are not intended for individuals under 18. We do not knowingly collect data from minors.

14. Changes to This Policy

We may update this policy from time to time. Updates will be posted on this page with the latest revision date.

15. Contact

For privacy or data protection enquiries:
Email: [email protected]