Legal

Privacy Policy.

Last updated: 04 July 2026

1. Who we are

Narovella Ltd ("Narovella", "we", "us", or "our") is committed to protecting your privacy. This policy explains how we collect, use, store, and share your personal information when you visit our website (narovella.com) or make a purchase from us.

Contact: hello@narovella.com

2. What data we collect

We collect the following types of personal information:

Information you provide directly

  • Account & order information: Name, email address, shipping address, billing address, telephone number
  • Payment information: Card details are processed securely by our payment provider (Shopify Payments / Stripe) — we do not store your full card number
  • Communications: Messages you send via our contact form, email, or customer service
  • Newsletter: Email address when you subscribe to our mailing list

Information collected automatically

  • Browsing data: Pages visited, time spent on site, referral source, and click patterns
  • Device information: Browser type, operating system, screen resolution, and device type
  • IP address: Used for fraud prevention and approximate location
  • Cookies: Small text files stored on your device (see Section 6 below)

3. How we use your data

We use your personal data for the following purposes:

  • Fulfilling orders: Processing your purchase, arranging shipping, and sending order confirmations and tracking updates
  • Customer support: Responding to your enquiries, processing returns, and resolving issues
  • Improving our website: Analysing browsing patterns to improve site performance, layout, and product offerings
  • Marketing: Sending promotional emails and newsletters (only if you've opted in — you can unsubscribe at any time)
  • Fraud prevention: Protecting against fraudulent transactions and unauthorised account access
  • Legal obligations: Complying with tax, accounting, and other regulatory requirements

4. Legal basis for processing

We process your data on the following legal bases:

  • Contract: Processing necessary to fulfil your order and provide our services
  • Consent: Marketing emails and non-essential cookies (you can withdraw consent at any time)
  • Legitimate interest: Improving our website, fraud prevention, and business analytics
  • Legal obligation: Tax records and regulatory compliance

5. Sharing your data

We may share your personal data with the following third parties, solely for the purposes described above:

  • Shipping carriers: To deliver your order
  • Payment processors: To process your payment securely
  • Email marketing: To send newsletters and marketing emails (only if you've opted in)
  • Analytics: To understand how visitors use our website (anonymised data)

We do not sell your personal data to third parties. We only share data where necessary to provide our services or where required by law.

6. Cookies

Our website uses cookies to enhance your browsing experience. Cookies are small text files placed on your device that help us:

  • Essential cookies: Remember items in your shopping bag, maintain your session, and process payments
  • Analytics cookies: Understand how visitors interact with our site
  • Marketing cookies: Deliver relevant advertising and measure ad performance

You can control cookie preferences through your browser settings. Disabling essential cookies may affect website functionality.

7. Data retention

We retain your personal data only for as long as necessary to fulfil the purposes outlined above, including legal and accounting requirements.

8. Your rights

You have the following rights regarding your personal data:

  • Right of access: Request a copy of the personal data we hold about you
  • Right to rectification: Request correction of inaccurate or incomplete data
  • Right to erasure: Request deletion of your personal data (subject to legal obligations)
  • Right to restrict processing: Request that we limit how we use your data
  • Right to data portability: Request your data in a structured, machine-readable format
  • Right to object: Object to processing based on legitimate interest, including direct marketing
  • Right to withdraw consent: Withdraw consent at any time where processing is based on consent

To exercise any of these rights, please email hello@narovella.com. We will respond within 30 days.

9. Data security

We take appropriate technical and organisational measures to protect your personal data, including SSL encryption for all website traffic, secure payment processing, and access controls for our internal systems. However, no method of transmission over the internet is 100% secure, and we cannot guarantee absolute security.

10. Changes to this policy

We may update this Privacy Policy from time to time. Any changes will be posted on this page with an updated revision date. We recommend checking this page periodically for updates.