Privacy policy

Privacy Policy

Last updated: October 15, 2026

Welcome to Noviloo, operated by AUREN LONDON LTD (Company Number: 17479614). We respect your privacy and are committed to handling your personal information responsibly and transparently.

This Privacy Policy explains how we collect, use, store, disclose, and protect your personal information when you visit our website, browse our products, make a purchase, or contact us through https://noviloo.com (the "Website").

This policy applies to customers and visitors, including those located in the United Kingdom.

For the purposes of applicable UK data protection legislation, including the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018, AUREN LONDON LTD is the data controller responsible for the personal information collected through Noviloo.

1. Personal Information We Collect

We collect personal information necessary to operate our online store, process purchases, provide customer support, and improve our services.

Information you provide directly:

  • Full name
  • Email address
  • Telephone number
  • Billing and shipping addresses
  • Order details and purchase history
  • Information provided in customer service enquiries
  • Marketing preferences, where applicable

Payment information:

When you make a purchase, payment details are processed through our checkout and payment service providers. These providers handle the payment information necessary to complete your transaction. We receive payment-related information needed to manage and confirm your order.

Information collected automatically:

When you visit our Website, we may automatically collect certain technical and usage information, including:

  • IP address
  • Browser type and device information
  • Operating system
  • Pages and products viewed
  • Referral sources
  • Website interactions
  • Approximate location based on IP address
  • Cookie identifiers and preferences

This information helps us operate the Website, maintain security, understand customer interactions, and improve the shopping experience.

2. How We Use Your Personal Information

We use personal information for the following purposes:

  • Order processing: To process payments, confirm purchases, prepare orders, and arrange delivery.
  • Customer support: To respond to enquiries, manage returns, process refunds, and resolve complaints.
  • Order communication: To send order confirmations, shipping updates, and other essential transactional notifications.
  • Security and fraud prevention: To identify suspicious activity, protect customer accounts, and prevent fraudulent transactions.
  • Website improvement: To analyse Website performance, identify technical problems, and improve functionality.
  • Marketing: To send promotional information or display relevant advertising where permitted by applicable law and your privacy preferences.
  • Legal compliance: To fulfil applicable accounting, tax, consumer protection, and other legal obligations.

We do not use your personal information for purposes incompatible with those described in this policy unless permitted or required by law.

3. Legal Basis for Processing Personal Data

Under the UK GDPR, we rely on the following lawful bases, as applicable:

  • Performance of a contract: Processing information needed to complete purchases, deliver orders, and provide services requested by customers.
  • Legal obligations: Processing information necessary to comply with applicable laws and regulatory requirements.
  • Legitimate interests: Processing necessary for our legitimate business interests, such as maintaining Website security, preventing fraud, providing customer support, and improving our services, where those interests are not overridden by your rights and freedoms.
  • Consent: Where required, obtaining your permission for activities such as non-essential cookies, certain analytics or advertising technologies, and direct marketing.

Where processing is based on consent, you may withdraw your consent at any time. Withdrawal does not affect processing that was lawful before consent was withdrawn.

4. Cookies and Tracking Technologies

Our Website uses cookies and similar technologies to support essential functionality, remember preferences, and, where enabled, measure Website performance and support advertising activities.

Cookies may include:

  • Essential cookies: Necessary for shopping cart functionality, checkout, security, and other core Website services.
  • Preference cookies: Used to remember selected Website preferences.
  • Analytics cookies: Used to understand Website visits and interactions where analytics services are enabled.
  • Advertising cookies: Used, where enabled and permitted, to measure advertising performance and support relevant advertising.

Where required by applicable law, we request your consent before placing or accessing non-essential cookies or similar tracking technologies.

You can manage your cookie preferences through the cookie consent controls provided on our Website. You can also manage or delete cookies through your browser settings, although disabling essential cookies may affect certain Website features.

For questions about our use of cookies, please contact info@noviloo.com.

5. Sharing Your Personal Information

We may share personal information with trusted third-party service providers where necessary to operate our online store and provide our services.

These may include:

  • Shopify: Our ecommerce platform provider, which supports the operation of our online store, checkout, and order management.
  • Payment service providers: To securely process transactions, refunds, and payment-related enquiries.
  • Shipping and delivery providers: To fulfil orders and deliver purchased products.
  • Google Analytics: Where enabled, to help us understand Website traffic and customer interactions.
  • Advertising and marketing providers: Where used and permitted, to support marketing communications, advertising measurement, and campaign performance.
  • Professional advisers and service providers: Where necessary for accounting, technical support, legal compliance, or business operations.

We share only the information reasonably necessary for the relevant purpose, subject to applicable legal requirements.

We may also disclose personal information where legally required, to respond to lawful requests from public authorities, or to protect our legal rights.

You can learn more about Shopify's privacy practices at Shopify Privacy Policy.

You can learn more about Google's privacy practices at Google Privacy Policy.

6. International Data Transfers

Some of our service providers may process or store personal information outside the United Kingdom.

Where personal information is transferred internationally, we take steps to ensure that the transfer is carried out in accordance with applicable UK data protection legislation.

Depending on the destination and circumstances, appropriate protections may include UK adequacy regulations, contractual safeguards, or another lawful transfer mechanism.

For further information about relevant international transfers and applicable safeguards, please contact info@noviloo.com.

7. Your Privacy Rights

Under applicable UK data protection legislation, you may have the following rights regarding your personal information:

  • Right of access: Request access to personal information we hold about you.
  • Right to rectification: Request correction of inaccurate or incomplete personal information.
  • Right to erasure: Request deletion of your personal information in circumstances where this right applies.
  • Right to restrict processing: Request limitations on certain uses of your personal information.
  • Right to data portability: Request your personal information in a portable format where applicable.
  • Right to object: Object to certain processing activities, including processing based on legitimate interests.
  • Right to withdraw consent: Withdraw consent for processing activities that rely on consent.
  • Rights relating to automated decision-making: Exercise applicable rights concerning certain decisions made solely through automated processing.

Your right to object: You may object at any time to the processing of your personal information for direct marketing purposes. Where you exercise this right, we will stop processing your information for those purposes.

To exercise your privacy rights, please contact our team at info@noviloo.com.

We will review and respond to requests in accordance with applicable legal requirements. We may need to verify your identity before fulfilling certain requests.

Some rights are subject to legal conditions and exceptions, including circumstances where we are required to retain information for legal or regulatory purposes.

8. Data Retention

We retain personal information only for as long as reasonably necessary to fulfil the purposes described in this Privacy Policy or to comply with legal obligations.

For example:

  • Order and transaction records may be retained to comply with tax, accounting, and legal requirements.
  • Customer service correspondence may be retained for dispute resolution and record-keeping purposes.
  • Marketing-related information is retained according to applicable requirements and your preferences.
  • Technical and security information is retained for periods appropriate to its operational purpose.

Retention periods depend on the type of information, its purpose, applicable legal requirements, and whether it is needed to establish, exercise, or defend legal claims.

When information is no longer required, we take appropriate steps to delete or anonymise it.

You may request deletion of your personal information by contacting info@noviloo.com, subject to applicable legal exceptions.

9. Data Security

We recognise the importance of keeping customer information secure.

We use appropriate technical and organisational measures designed to protect personal information against unauthorised access, alteration, disclosure, or loss.

Our Website uses HTTPS encryption to protect information transmitted between your browser and the Website.

Payment transactions are handled through our checkout and payment service providers using their applicable security measures.

While we take reasonable precautions to safeguard personal information, no method of internet transmission or electronic storage can be guaranteed to be completely secure.

10. Marketing Communications

Where permitted by applicable law and your marketing preferences, we may send you information about our products, promotions, or special offers.

You can opt out of marketing emails at any time by using the unsubscribe link provided in those communications or by contacting info@noviloo.com.

Opting out of promotional communications will not prevent us from sending essential transactional messages, such as order confirmations, delivery updates, or important customer service notifications.

11. Third-Party Websites

Our Website may contain links to third-party websites or services.

We are not responsible for the privacy practices or content of websites operated by independent third parties.

We encourage visitors to review the privacy policies of external websites before sharing personal information with them.

12. Changes to This Privacy Policy

We may update this Privacy Policy periodically to reflect changes in our business operations, services, legal obligations, or data protection practices.

Any updates will be published on this page, along with a revised "Last updated" date.

We encourage customers to review this Privacy Policy periodically to remain informed about how their personal information is handled.

13. Privacy Enquiries and Complaints

If you have questions or concerns about the way your personal information is processed, please contact us directly.

You may submit a privacy complaint by emailing info@noviloo.com. We will review complaints and respond in accordance with applicable data protection requirements.

You also have the right to complain to the UK's Information Commissioner's Office (ICO), the independent authority responsible for enforcing data protection legislation.

For further information, visit https://ico.org.uk/.

14. Contact Information

For questions about this Privacy Policy, requests concerning your personal information, or other privacy-related enquiries, please contact:

Store Name: Noviloo
Company Name: AUREN LONDON LTD
Company Number: 17479614
Physical Address: 104 Heathfield Rd, Handsworth, Birmingham B19 1HJ, United Kingdom
Phone: +44 7456 059383
Email: info@noviloo.com
Website: https://noviloo.com
Customer Service Hours: Monday–Friday, 09:00–18:00 (London Time)