Privacy policy

Last updated: 2 September 2026

Nova Echo respects your privacy. This Privacy Policy explains how we collect, use and share personal information when you visit novaecho.co.uk, place an order, create an account, contact us, subscribe to marketing or otherwise interact with our store.

Personal information we collect

Depending on how you interact with us, we may collect:

• identity and contact details, such as your name, email address, telephone number and billing or delivery address;
• order and transaction details, including products viewed or purchased, payment status, delivery information, returns and correspondence;
• account details, preferences and saved settings;
• communications you send to customer support or submit through forms;
• marketing preferences and engagement with our messages;
• device and usage information, such as IP address, browser type, device identifiers, pages viewed and interactions with our site; and
• reviews, photographs or other content you choose to submit.

Payments are processed through authorised payment providers. We do not receive or store complete payment card numbers.

How we collect personal information

We receive information directly from you, automatically through our website and cookies, and from service providers that support our store, payments, delivery, fraud prevention, analytics, marketing and customer service.

How we use personal information

We use personal information to:

• process payments, fulfil and deliver orders, manage returns and provide customer service;
• create and manage customer accounts;
• operate, maintain and improve our website, products and customer experience;
• send service messages about orders, accounts or policy changes;
• prevent fraud, misuse and security incidents;
• maintain business, tax and transaction records;
• establish, exercise or defend legal rights; and
• send marketing where permitted and measure its effectiveness.

Under UK data protection law, we rely on one or more of the following legal bases:

• Contract: processing needed to take steps at your request or perform our contract with you.
• Legal obligation: processing needed to meet legal, tax, accounting or regulatory duties.
• Legitimate interests: operating and improving our business, protecting customers and the store, preventing fraud, understanding performance and communicating with existing customers, where those interests are not overridden by your rights.
• Consent: where consent is required, including certain marketing or non-essential cookie activities. You may withdraw consent at any time.

Cookies and similar technologies

We and our service providers use cookies and similar technologies to keep the site working, remember preferences, understand site performance, protect the checkout and, where you allow it, support analytics and relevant marketing.

You can manage available choices through our cookie banner and your browser settings. Blocking essential cookies may affect site functions such as the basket, account or checkout. Withdrawing consent does not affect processing that took place before withdrawal.

How we share personal information

We share information only where reasonably necessary with:

• Shopify, which hosts and operates our ecommerce platform;
• payment processors and fraud-prevention providers;
• fulfilment, delivery and returns providers;
• website, hosting, customer-service, analytics and marketing providers;
• professional advisers, insurers, regulators, courts and public authorities where appropriate; and
• a buyer, investor or successor in connection with a proposed or completed business reorganisation, subject to appropriate safeguards.

These recipients may act as our processors or as independent controllers under their own privacy notices. We do not sell personal information for money.

Our store is powered by Shopify. Further information about Shopify's handling of customer information is available in the Shopify Consumer Privacy Policy.

International transfers

Some providers may process information outside the United Kingdom. Where required, we use recognised safeguards such as UK adequacy regulations, the UK International Data Transfer Agreement or the UK Addendum to approved standard contractual clauses.

How long we keep personal information

We keep information only for as long as reasonably needed for the purpose for which it was collected, including to fulfil orders, support customers, maintain required tax and accounting records, resolve disputes, prevent fraud and enforce agreements. Retention periods vary according to the type of record and applicable legal requirements. Information is then deleted or anonymised where appropriate.

Security

We use proportionate technical and organisational measures designed to protect personal information. Access is limited to people and providers that need it for authorised purposes. You are responsible for keeping account credentials confidential and for contacting us promptly if you suspect unauthorised use.

Your rights

Subject to applicable conditions and exemptions, you may ask us to:

• provide access to your personal information;
• correct inaccurate or incomplete information;
• delete information;
• restrict how information is used;
• provide certain information in a portable format;
• stop processing based on legitimate interests; or
• stop direct marketing at any time.

Where processing relies on consent, you may withdraw it. To exercise a right, email support@novaecho.co.uk. We may request information needed to verify your identity and protect your account.

You may also complain to the UK Information Commissioner's Office at ico.org.uk. We would appreciate the opportunity to address your concern first.

Marketing

You can unsubscribe from promotional emails using the link in any marketing message or by contacting us. We may still send non-marketing messages concerning orders, accounts, customer service or legal notices.

Children

Our store is intended for adults. We do not knowingly collect personal information from children. If you believe a child has provided information to us, contact us so that we can take appropriate action.

Third-party services and links

Our site may link to services operated by third parties. Their handling of personal information is governed by their own notices. A link does not make Nova Echo responsible for a third party's service or practices.

Changes to this Privacy Policy

We may update this policy to reflect changes to our services, practices or legal obligations. The current version will be posted on this page with its updated date. Where required, we will provide additional notice.

Contact

For questions about this Privacy Policy, how we handle personal information or a request concerning your rights, visit our Contact page or email support@novaecho.co.uk.