Privacy policy
Last Updated: 5 August 2026
This Privacy Policy explains how Norvelith ("we", "us", "our") collects, uses, stores, and shares your personal data when you visit our website, place an order, contact us, or otherwise use our services. We process personal data in accordance with the UK General Data Protection Regulation (UK GDPR), the Data Protection Act 2018, and other applicable UK data protection laws.
By using our website, you acknowledge that your personal data will be handled as described in this Privacy Policy.
1. Personal Data We Collect
We may collect the following categories of personal data:
Identity Data
This may include your name and, where relevant, billing and delivery details.
Contact Data
This may include your email address, telephone number, and postal address.
Transaction Data
This may include details of products ordered, order value, delivery details, payment status, and refund information.
Technical Data
This may include your IP address, browser type, time zone setting, device type, and operating system.
Usage Data
This may include information about how you use our website, including pages viewed, links clicked, and browsing activity.
Marketing and Communications Data
This may include your preferences for receiving marketing communications and your communication history with us.
Payment card details are processed securely by authorised payment providers. We do not store full card numbers or card security codes on our systems.
2. How We Collect Personal Data
We collect personal data in the following ways:
Directly from you
When you place an order, contact us by email, submit a contact form, subscribe to marketing, or otherwise communicate with us.
Automatically through your use of the website
When you browse our website, certain technical and usage information may be collected through cookies and similar technologies.
From service providers
We may receive limited information from payment processors, delivery partners, analytics providers, or fraud prevention tools where necessary to complete transactions, provide services, or protect our business.
3. How We Use Your Personal Data
We use personal data to:
- process and fulfil your orders
- arrange delivery and provide order updates
- respond to customer service requests and enquiries
- manage returns, refunds, and payment-related matters
- operate, maintain, and improve our website and services
- personalise and improve your shopping experience
- send marketing communications where you have given consent
- detect, investigate, and prevent fraud, misuse, or other unlawful activity
- comply with legal, tax, accounting, and regulatory obligations
4. Lawful Bases for Processing
Under UK data protection law, we process personal data on the following lawful bases:
Contract
Where processing is necessary to take steps before entering into a contract or to perform our contract with you, such as processing your order and arranging delivery.
Legal Obligation
Where processing is necessary for compliance with legal or regulatory obligations, including tax, accounting, and fraud prevention requirements.
Legitimate Interests
Where processing is necessary for our legitimate interests in operating, protecting, and improving our website, services, and customer experience, provided those interests are not overridden by your rights and interests.
Consent
Where you have given consent, such as for marketing emails or the use of non-essential cookies.
5. Cookies and Similar Technologies
Our website uses cookies and similar technologies to help the site function properly, understand website usage, and support advertising and performance measurement.
We may use:
- Essential cookies, which are necessary for the operation of the website and checkout
- Analytics cookies, which help us understand how visitors use our website
- Advertising cookies, which may be used to measure ad performance and show more relevant advertising
Where required by law, non-essential cookies will only be placed on your device after you provide consent through our cookie banner or consent tool. You can also manage or disable cookies through your browser settings. If your browser or device allows it, you may also be able to update your cookie preferences at a later time.
6. Sharing Your Personal Data
We share personal data only where necessary to operate our business, provide services, fulfil orders, or comply with legal obligations.
We may share personal data with:
- Shopify, which provides our ecommerce platform and store infrastructure
- Payment providers, to process payments securely
- Delivery and logistics providers, to fulfil and deliver your order
- Analytics and marketing providers, to measure website performance, improve services, and support advertising
- Fraud prevention and security providers, to help detect and prevent suspicious or unauthorised activity
- Professional advisers or authorities, where necessary for legal, compliance, insurance, accounting, or regulatory purposes
Where we use Google services for analytics, advertising, conversion tracking, or related performance measurement, data may be processed through cookies, tags, or similar technologies in line with your consent preferences and applicable law.
We do not sell your personal data.
7. International Data Transfers
Some of the third-party service providers we use may process personal data outside the United Kingdom. Where this happens, we take appropriate steps to ensure that personal data is protected in accordance with UK data protection law, including by relying on approved transfer mechanisms or other appropriate safeguards where required.
8. Data Retention
We retain personal data only for as long as reasonably necessary for the purposes described in this Privacy Policy, including to fulfil orders, manage customer service, meet legal obligations, resolve disputes, and enforce our agreements.
- Order and transaction records may be retained for at least 6 years where necessary to comply with UK tax and accounting requirements.
- Marketing data will generally be retained until you unsubscribe, withdraw consent, or ask us to stop using it for marketing purposes.
- Technical and usage data may be retained for shorter periods unless needed for security, fraud prevention, or legal compliance.
9. Your Rights
Under UK data protection law, you may have the right to:
- request access to the personal data we hold about you
- request correction of inaccurate or incomplete personal data
- request erasure of your personal data in certain circumstances
- request restriction of processing in certain circumstances
- object to processing based on legitimate interests
- withdraw consent where processing is based on consent
- request transfer of your personal data to you or another provider, where applicable
If you would like to exercise any of these rights, please contact us at info@norvelith.co.uk.
You also have the right to lodge a complaint with the Information Commissioner's Office (ICO), the UK supervisory authority for data protection matters.
10. Data Security
We take reasonable technical and organisational measures to help protect personal data against unauthorised access, loss, misuse, disclosure, or alteration.
Our website uses secure transmission technology such as SSL/TLS encryption where appropriate. Payment information is processed through PCI-DSS compliant payment providers. We do not store full payment card numbers or card security codes on our systems.
11. Third-Party Links
Our website may contain links to third-party websites or services. We are not responsible for the content, privacy practices, or security of third-party websites, and we encourage you to review their privacy policies before providing personal data.
12. Changes to This Privacy Policy
We may update this Privacy Policy from time to time to reflect changes to our business, services, legal obligations, or website functionality. The latest version will always be posted on this page, and the date at the top will show when it was last updated.
13. Contact Us
If you need more information regarding this Privacy Policy or how we handle personal data, please get in touch using the details below. We will be glad to help!
Email: info@norvelith.co.uk
Phone: +44 7348 949965
Customer Support Hours:
Monday to Friday: 9:00 AM - 5:00 PM (GMT)
Saturday: 10:00 AM - 4:00 PM (GMT)
Sunday: Closed
Our team responds to all enquiries within 24 hours - Sunday messages answered on Monday.