Privacy policy
Last updated: November 2025
This Privacy Policy explains how Nouva Company Limited ("Nucca", "we", "us", or "our") collects, uses, and protects your personal information when you visit nuccasleep.com (the "Site") or make a purchase from us.
We are committed to protecting your privacy and handling your data transparently. By using our Site, you agree to the terms of this policy.
1. Who We Are
Data Controller: Nouva Company Limited 71-75 Shelton Street, London, WC2H 9JQ, United Kingdom Email: help@nuccasleep.com
For any questions about this policy or how we handle your data, contact us at the email above.
2. Information We Collect
We collect personal information in three ways:
A. Information you provide to us:
- Name, shipping address, billing address
- Email address and phone number
- Payment information (processed securely by our payment providers — see Section 5)
- Order history and product preferences
- Communications you send us (emails, customer service requests)
B. Information collected automatically when you visit our Site:
- IP address (anonymized where possible)
- Browser type, operating system, and device information
- Pages visited, time spent, and referring URL
- Date and time of access
- Cookie data (see Section 4)
C. Information from third parties:
- Payment confirmation data from Shopify Payments, Stripe, and Klarna
- Marketing engagement data from Meta and Google Ads (when you interact with our ads)
3. How We Use Your Information
We use your personal information to:
- Process and fulfill your orders — including shipping, payment processing, and customer service
- Communicate with you — order confirmations, shipping updates, customer support replies
- Send marketing communications — only with your consent, and you can opt out at any time
- Improve our Site and products — through analytics on how visitors use our pages
- Show you relevant advertising — through Meta and Google Ads (see Section 6)
- Prevent fraud and abuse — verifying orders, flagging suspicious activity
- Comply with legal obligations — tax records, consumer protection laws, dispute resolution
Legal basis for processing (GDPR):
- Contract performance — to deliver products you've ordered (Art. 6(1)(b) GDPR)
- Legitimate interests — to improve our Site, prevent fraud, and run our business (Art. 6(1)(f) GDPR)
- Consent — for marketing emails, advertising cookies, and retargeting (Art. 6(1)(a) GDPR)
- Legal obligations — to comply with applicable laws (Art. 6(1)(c) GDPR)
4. Cookies and Tracking
Our Site uses cookies — small text files stored on your device — to make the Site work properly and to understand how visitors use it.
Types of cookies we use:
| Type | Purpose | Consent Required |
|---|---|---|
| Essential | Cart, checkout, login, security | No (necessary for the Site to function) |
| Analytics | Understanding how visitors use the Site | Yes |
| Marketing | Showing relevant ads on Meta and Google | Yes |
| Functional | Remembering preferences (language, currency) | Yes |
Managing cookies: When you first visit our Site, our cookie consent banner lets you accept or reject non-essential cookies. You can change your preferences at any time by clicking the cookie settings link in the footer.
You can also disable cookies through your browser settings, but doing so may limit some Site functionality.
5. Payment Processing
We do not store or process your payment information directly. All payments are handled by certified third-party providers:
Shopify Payments (powered by Stripe) Processes credit and debit card transactions. Privacy policy: https://www.shopify.com/legal/privacy Stripe privacy policy: https://stripe.com/privacy
Klarna Available as a "buy now, pay later" option at checkout. Klarna may perform a soft credit check to approve your payment method, which does not affect your credit score. Privacy policy: https://www.klarna.com/international/privacy-statement/
When you complete a purchase, we receive a payment confirmation but never the full card number or sensitive financial data.
6. Marketing and Advertising
We use the following marketing tools to show you relevant products and measure ad performance. These run only with your consent, given through our cookie banner.
Meta Pixel (Facebook and Instagram) We use the Meta Pixel to measure ad performance and show you relevant ads on Facebook and Instagram. Meta receives data about your interaction with our Site (pages viewed, products added to cart, purchases). This data is processed by Meta Platforms Ireland Limited. Meta privacy policy: https://www.facebook.com/privacy/policy
Google Ads Tag We use the Google Ads conversion tag to measure how visitors arrive at our Site through Google Ads and which ads lead to purchases. This data is processed by Google Ireland Limited. Google privacy policy: https://policies.google.com/privacy
Email Marketing (Shopify Email) If you sign up for our newsletter or opt in during checkout, we send you marketing emails through Shopify Email. You can unsubscribe at any time by clicking the link at the bottom of any marketing email, or by emailing help@nuccasleep.com.
7. Sharing Your Information
We share your personal information only with the following categories of recipients:
- Payment processors — Shopify Payments, Stripe, Klarna (for processing transactions)
- Shipping carriers — to deliver your order
- E-commerce platform — Shopify (which hosts our Site)
- Marketing platforms — Meta and Google (only with your consent)
- Customer service tools — to respond to your inquiries
- Legal authorities — when required by law, court order, or to protect our rights
We do not sell your personal data to third parties.
International transfers: Some of our service providers (such as Meta, Google, Shopify) are based outside the United Kingdom and European Economic Area. When your data is transferred internationally, we ensure appropriate safeguards are in place, including Standard Contractual Clauses approved by the European Commission.
8. Data Retention
We keep your personal information only as long as necessary for the purposes described in this policy:
- Order and transaction data — kept for at least 7 years to comply with tax and accounting laws
- Customer service communications — kept for up to 3 years after the last contact
- Marketing data — kept until you withdraw consent or unsubscribe
- Analytics data — typically anonymized within 14 months
- Cookie data — varies by cookie type, generally up to 24 months
After these periods, data is either deleted or anonymized.
9. Your Rights
Under GDPR (for EU/UK residents), CCPA (for California residents), and similar laws, you have the following rights:
- Right of access — request a copy of the personal data we hold about you
- Right to rectification — ask us to correct inaccurate or incomplete data
- Right to erasure ("right to be forgotten") — ask us to delete your data, subject to legal limits
- Right to restriction — ask us to limit how we process your data
- Right to data portability — receive your data in a structured, machine-readable format
- Right to object — object to processing based on our legitimate interests, including direct marketing
- Right to withdraw consent — withdraw consent at any time for processing based on consent
- Right to lodge a complaint — file a complaint with your local data protection authority
To exercise any of these rights, email us at help@nuccasleep.com. We respond within 30 days.
California residents (CCPA): You have the additional right to know what personal information is collected, to request deletion, and to opt out of the sale of personal information. We do not sell your personal information.
10. Data Security
We implement appropriate technical and organizational measures to protect your personal information:
- SSL/TLS encryption on all pages where data is transmitted (look for "https://" in the address bar)
- Payment data processed exclusively by PCI-DSS compliant providers
- Restricted access to personal data within our team
- Regular security reviews and updates
No method of transmission over the internet is 100% secure, but we take reasonable steps to protect your data.
11. Children's Privacy
Our Site is not directed to children under 16. We do not knowingly collect personal information from children under 16. If you believe a child has provided us with personal information, contact us at help@nuccasleep.com and we will delete it promptly.
12. Changes to This Policy
We may update this Privacy Policy from time to time to reflect changes in our practices, technology, or legal requirements. The "Last updated" date at the top shows when the policy was last revised.
For material changes, we will notify you by email or by posting a notice on our Site before the changes take effect.
13. Contact Us
For any questions, requests, or concerns about this Privacy Policy or how we handle your data:
Nouva Company Limited 71-75 Shelton Street, London, WC2H 9JQ, United Kingdom Email: help@nuccasleep.com Response time: within 2 business days for general inquiries; within 30 days for formal data rights requests