Privacy Policy

Last updated: January 1, 2026

Novy operates this store and website, including all related information, content, features, tools, products, and services, to provide customers with a curated shopping experience collectively referred to as the “Services.”

Our store is powered by Shopify, which enables us to provide the Services to you.

This Privacy Policy explains how we collect, use, and disclose your personal information when you visit or use the Services, make a purchase or other transaction, or otherwise communicate with us.

If there is a conflict between our Terms of Service and this Privacy Policy, this Privacy Policy will control concerning the collection, processing, and disclosure of your personal information.

Please read this Privacy Policy carefully. By accessing or using any of the Services, you acknowledge that you have read and understood how we collect, use, and disclose your information as described in this Privacy Policy.

Personal Information We Collect or Process

When we use the term “personal information,” we mean information that identifies you or can reasonably be linked to you or another person.

Personal information does not include information collected anonymously or information that has been de-identified so that it cannot reasonably be linked to an individual.

Depending on how you interact with the Services, where you live, and what is permitted or required by applicable law, we may collect or process the following categories of personal information:

• Contact details, including your name, billing address, shipping address, phone number, and email address.
• Financial information, including payment card information, transaction details, payment methods, payment confirmations, and other payment-related details.
• Account information, including your username, password, security questions, preferences, and settings.
• Transaction information, including products you view, place in your cart, add to a wishlist, purchase, return, exchange, or cancel, as well as your past transactions.
• Communications with us, including information you provide when contacting customer support.
• Device information, including information about your device, browser, network connection, IP address, and other unique identifiers.
• Usage information, including information about how and when you interact with or navigate the Services.

Personal Information Sources

We may collect personal information from the following sources:

• Directly from you when you create an account, visit or use the Services, communicate with us, make a purchase, or otherwise provide us with your personal information.
• Automatically through the Services, including from your device and through cookies and similar technologies.
• From service providers that enable certain technologies or process personal information on our behalf.
• From business partners or other third parties.

How We Use Your Personal Information

Depending on how you interact with us and which Services you use, we may use your personal information for the following purposes:

Providing, Tailoring, and Improving the Services

We use personal information to provide the Services and fulfill our contractual obligations to you.

This may include:

• Processing payments and purchases
• Fulfilling and shipping orders
• Processing returns, refunds, exchanges, and other transactions
• Remembering your preferences and products in which you may be interested
• Sending notifications relating to your account or orders
• Creating, maintaining, and managing your account
• Allowing customers to submit product reviews
• Providing a customized shopping experience
• Recommending products related to your interests or purchases
• Improving the Services and customer experience

Marketing and Advertising

We may use personal information for marketing and promotional purposes, including sending promotional communications by email, text message, or postal mail.

We may also use information to display advertisements for products or services on our website or other websites, including advertisements based on products you previously purchased, viewed, or added to your cart.

Security and Fraud Prevention

We may use personal information to:

• Authenticate your account
• Provide a secure payment and shopping experience
• Detect, investigate, or respond to potentially fraudulent, illegal, unsafe, or malicious activity
• Protect public safety
• Protect and secure our Services

You are responsible for keeping your account credentials secure. We recommend that you do not share your username, password, or other account access information with anyone.

Communicating With You

We use personal information to provide customer support, respond to inquiries, provide effective services, and maintain our business relationship with you.

Legal Reasons

We may use personal information to comply with applicable laws or valid legal processes, including requests from law enforcement agencies or government authorities.

We may also use personal information to investigate or participate in civil discovery, litigation, or other legal proceedings and to enforce or investigate possible violations of our terms and policies.

How We Disclose Personal Information

In certain circumstances, we may disclose personal information to third parties for legitimate purposes and subject to this Privacy Policy.

These circumstances may include:

• Sharing information with Shopify, vendors, and service providers that perform services on our behalf, such as payment processing, IT management, data analysis, customer support, cloud storage, fulfillment, and shipping.
• Sharing information with business and marketing partners that provide marketing services or display advertisements.
• Sharing information when you direct us, request that we do so, or otherwise consent to the disclosure.
• Sharing information with our affiliates or within our corporate group.
• Sharing information in connection with a business transaction, such as a merger, acquisition, restructuring, financing, or bankruptcy.
• Sharing information when required to comply with legal obligations, respond to subpoenas or warrants, enforce our policies, or protect the Services, our rights, our customers, or other individuals.

Depending on where you live, you may have the right to opt out of certain sharing or processing of your personal information for targeted advertising.

Relationship With Shopify

The Services are hosted by Shopify.

Shopify collects and processes personal information relating to your access to and use of the Services to provide and improve the Services.

Information you submit through the Services may be transmitted to and shared with Shopify and other third parties, including parties located outside the country where you live.

We may use Shopify features that incorporate information obtained from your interactions with our store, other merchants, and Shopify. In these circumstances, Shopify may be responsible for processing your personal information, including responding to certain requests to exercise your privacy rights.

You can learn more about how Shopify processes personal information by reviewing the Shopify Consumer Privacy Policy and Shopify Privacy Portal.

Third-Party Websites and Links

The Services may include links to websites or online platforms operated by third parties.

When visiting a third-party website that is not owned or controlled by Novy, you should review its privacy policy, security practices, and terms and conditions.

We do not guarantee and are not responsible for the privacy, security, accuracy, completeness, or reliability of third-party websites or platforms.

Information you post in public or semi-public areas, including third-party social media platforms, may be viewable and used by other individuals.

The inclusion of a third-party link does not necessarily mean that Novy endorses the third party, its website, or its content.

Children’s Data

The Services are not intended for use by children, and we do not knowingly collect personal information from children under the age of majority in their jurisdiction.

A parent or legal guardian who believes that a child has provided us with personal information may contact us to request that the information be deleted.

As of the effective date of this Privacy Policy, we do not have actual knowledge that we sell or share, as those terms may be defined under applicable law, the personal information of individuals under 16 years of age.

Security and Retention of Your Information

No security measures are perfect or impenetrable, and we cannot guarantee complete or perfect security.

Information sent to us may not be secure while it is being transmitted. Please do not use unsecured communication channels to send sensitive or confidential information.

How long we retain personal information depends on several factors, including whether we need the information to:

• Maintain your account
• Provide the Services
• Fulfill legal obligations
• Resolve disputes
• Prevent fraud
• Enforce contracts, terms, or policies

Your Rights and Choices

Depending on where you live, you may have some or all of the following rights regarding your personal information.

These rights are not absolute and may only apply in certain circumstances. We may decline a request where permitted or required by applicable law.

Right to Access or Know

You may have the right to request access to the personal information we hold about you.

Right to Delete

You may have the right to request that we delete personal information we maintain about you.

Right to Correct

You may have the right to request that we correct inaccurate personal information.

Right to Portability

You may have the right to receive a copy of certain personal information we hold about you or request that it be transferred to another party, subject to applicable exceptions.

Right to Opt Out of Sale, Sharing, or Targeted Advertising

Depending on where you live, you may have the right to opt out of the sale or sharing of personal information or its processing for targeted advertising.

Where required by applicable law, we may recognize Global Privacy Control signals sent through your browser or device as an opt-out request.

Other than Global Privacy Control signals where applicable, we may not recognize other “Do Not Track” signals sent by browsers or devices.

Managing Communication Preferences

You may unsubscribe from promotional emails at any time by using the unsubscribe option included in those emails.

Even after you unsubscribe from promotional communications, we may continue sending non-promotional messages concerning your account, purchases, or orders.

Additional Rights for UK and EEA Residents

Residents of the United Kingdom or European Economic Area may have the following additional rights, subject to applicable exceptions and limitations:

Objection to or Restriction of Processing

You may have the right to object to or request that we restrict the processing of personal information for certain purposes.

Withdrawal of Consent

Where we rely on consent to process personal information, you may withdraw that consent.

Withdrawing consent does not affect the lawfulness of processing performed before the consent was withdrawn.

Exercising Your Rights

You may exercise your rights through the options available through the Services or by contacting us using the information provided below.

We will not discriminate against you for exercising your privacy rights.

We may need to verify your identity before processing a request, as permitted or required by applicable law.

You may also be permitted to appoint an authorized agent to submit a request on your behalf. Before accepting a request from an authorized agent, we may require proof that you authorized the individual to act for you. We may also ask you to verify your identity directly.

We will respond to valid requests within the period required by applicable law.

Complaints

If you have a complaint about how we collect, use, or process personal information, please contact us using the information below.

Depending on where you live, you may have the right to appeal our response or submit a complaint to your local privacy or data protection authority.

Residents of the European Economic Area may contact the appropriate data protection supervisory authority in their jurisdiction.

International Transfers

We may transfer, store, and process personal information outside the country where you live.

When personal information is transferred outside the European Economic Area or United Kingdom, we will use recognized transfer mechanisms where required, such as the European Commission’s Standard Contractual Clauses or equivalent mechanisms approved by the relevant UK authority.

These transfer mechanisms may not be required where the recipient country has been formally recognized as providing an adequate level of privacy protection.

Changes to This Privacy Policy

We may update this Privacy Policy periodically to reflect changes to our practices or for operational, legal, or regulatory reasons.

When changes are made, we will publish the revised Privacy Policy on our website, update the “Last updated” date, and provide any additional notice required by applicable law.

Contact Us

For questions about our privacy practices or this Privacy Policy, or to exercise any privacy rights available to you, please contact us at:

Email: support@shopnovy.com