Privacy Policy

NOVIXA Retail Ltd (“NOVIXA”, “we”, “us”, or “our”) is a luxury fragrance and beauty retailer registered in the United Kingdom, operating from our atelier in Mayfair, London.

For the purposes of the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018, NOVIXA Retail Ltd is the data controller responsible for your personal information.

Inquiries: novixaretail@gmail.com · London, United Kingdom.

We only collect information necessary to fulfill your luxury beauty orders and elevate your shopping experience:

• Identity & Contact Data: Full name, billing address, delivery address, email, telephone number.
• Transaction & Order Data: Items purchased, payment confirmation tokens, order history, invoice records. (We do not store full credit card numbers; transactions are processed by certified PCI-DSS providers).
• Technical & Browsing Data: IP address, browser type, device information, and anonymised analytics collected via strictly necessary and analytical cookies.
• Account & Profile Data: Saved addresses, wishlist selections, scent finder preferences, and customer reviews.

Under Article 6 of the UK GDPR, we rely on the following legal grounds to process your data:

• Performance of a Contract: Processing and dispatching your orders via Royal Mail/DPD, notifying you of shipment tracking, and managing customer support.
• Legal Obligation: Maintaining accounting, VAT, and fiscal records mandated by HM Revenue & Customs (HMRC).
• Legitimate Interests: Preventing fraud, enhancing storefront security, analyzing performance, and offering relevant beauty recommendations.
• Consent: Sending promotional newsletters and SMS alerts, which you can opt out of at any moment.

We respect your privacy. We never sell, rent, or trade your personal data to third parties. We only share information with vetted partners essential for our operations:

• Logistics & Couriers: Royal Mail and DPD UK for tracked parcel delivery.
• Payment Gateways: PayPal, certified card processing networks (PCI-DSS compliant).
• Cloud Infrastructure: Secure UK and EU cloud servers with end-to-end SSL/TLS encryption.

As a resident of the United Kingdom, you are entitled to comprehensive rights under the UK GDPR:

• Right of Access: Request a copy of the personal data we hold about you.
• Right to Rectification: Request correction of incomplete or inaccurate data.
• Right to Erasure (“Right to be Forgotten”): Ask us to delete your personal information where no legal override exists.
• Right to Object & Restrict Processing: Object to direct marketing or request temporary data freezing.
• Right to Data Portability: Obtain your data in a structured, machine-readable format.

To exercise any of these rights, email our Data Desk at novixaretail@gmail.com. We will respond within 30 days without fee.

If you believe your data has been handled improperly, we encourage you to contact us first so we can resolve the matter immediately.

You also have the statutory right to lodge a complaint directly with the UK supervisory authority: