Privacy Policy

Who Controls Your Data

Nivarela is a trading name of Datavex Labs Ltd, a company registered in England and Wales under number 17036825 with its registered office at Unit A3, Castle Road, Sittingbourne, England, ME10 3EW. We are the data controller for the personal information collected through this website, which means we decide why and how it is used. Questions about anything on this page can be sent to contact@nivarela.com.

What We Collect

When you buy from us we collect your name, delivery and billing addresses, email address and, if you provide one, a telephone number. Payment is handled by our payment provider, so we receive confirmation that a payment succeeded together with the last digits and type of card; we never receive or store your full card number. If you create an account we hold your login details and order history, and if you contact us we keep the correspondence so we can follow up properly.

We also collect limited technical information automatically as you browse: your IP address, device and browser type, the pages you visit and how you arrived at the site. Where this depends on cookies or similar technologies, it happens only if you have agreed to it through the cookie banner.

Why We Use It, and on What Basis

We use your details to take payment, deliver your order, keep you informed about it and handle any return. The lawful basis for that is the performance of our contract with you. We also keep records of sales because company and tax law obliges us to, which is a legal obligation. Beyond that, we use analytics to understand how the site is used and to improve it, and we protect the store against fraudulent orders, both on the basis of our legitimate interests in running a business well. Marketing messages are sent only with your consent, and you can withdraw it at any time using the unsubscribe link in any email.

Who We Share It With

We never sell your personal data. We do share it with the companies that make the store work: our ecommerce and hosting providers, our payment provider, the carriers who deliver your parcel, the suppliers who dispatch it where they ship directly, our email provider and our analytics provider. Each receives only what it needs to do its job, and each is bound to handle it securely on our instructions. We may also disclose information where the law requires it.

Transfers Outside the UK

Some of these providers operate outside the United Kingdom, and some of our suppliers are based overseas, so your delivery details may be transferred abroad in order to fulfil your order. Where that happens we rely on the UK Government's adequacy decisions or, where no such decision applies, on standard contractual clauses approved for use in the UK, so that your information continues to be protected to a comparable standard.

How Long We Keep It

Order and transaction records are retained for six years after the end of the financial year they relate to, as UK tax law requires. Account details are kept for as long as your account is open, and removed on request. Customer service correspondence is kept for two years. Analytics data is held in aggregated or pseudonymised form and retained no longer than we need it.

Your Rights

Under UK data protection law you can ask for a copy of the personal data we hold about you, ask us to correct it if it is wrong, or ask us to delete it where we have no continuing reason to keep it. You can object to processing we carry out on the basis of legitimate interests, ask us to restrict processing while a concern is looked into, request your data in a portable format, and withdraw consent wherever you have given it. Write to contact@nivarela.com and we will respond within one month. There is no charge.

Security

The site runs over an encrypted connection, payment details are handled entirely by our payment provider on their own systems, and access to customer data is limited to the people who need it to run the store. No system can be guaranteed absolutely secure, but we take these measures seriously and review them as the store grows.

Cookies

Cookies and similar technologies are covered separately on our Cookie Policy page, where you can also see how to change the choice you made when the banner first appeared.

Complaints

If you are unhappy with how we have handled your personal data, please tell us first so we have the chance to put it right. You also have the right to complain to the Information Commissioner's Office, the UK supervisory authority for data protection, at ico.org.uk.