Privacy Policy

This Privacy Policy explains how BELLA NOVA (“we”, “us” or “our”) collects, uses, stores and protects your personal information when you visit our website or make a purchase.

We are committed to protecting your privacy and handling your personal information responsibly, in accordance with applicable UK data protection laws, including the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

1. Information We Collect

When you visit our website, place an order or contact us, we may collect the following information:

Personal details: your name and contact information, including your email address.
Delivery information: your billing address, delivery address and any details required to fulfil your order.
Payment information: payment details processed securely by our payment service providers. We do not store full payment card details on our own systems.
Order information: products purchased, order history, payment status and delivery details.
Device and browsing information: your IP address, browser type, device information, pages visited and interactions with our website, including information collected through cookies and similar technologies.

2. How We Use Your Information

We use your personal information for the following purposes:

To process, manage and fulfil your orders.
To arrange delivery and provide order confirmations and tracking updates.
To respond to customer enquiries and provide customer support.
To maintain, improve and personalise our website and shopping experience.
To detect and prevent fraudulent transactions, misuse and security threats.
To comply with applicable legal, tax and regulatory obligations.
To send marketing communications where permitted by law and, where required, with your consent.

We process personal information only where we have a lawful basis to do so, such as fulfilling a contract, complying with a legal obligation, pursuing legitimate interests or obtaining your consent, where applicable.

3. Sharing Your Information

We may share the personal information necessary to operate our business with trusted third-party service providers, including:

Payment providers, such as PayPal, Stripe or other providers available at checkout.
Delivery and fulfilment partners, to process and deliver your orders.
Website and e-commerce providers, including Shopify.
Analytics and security providers, to help us understand website performance and protect our services.
Professional advisers or public authorities, where disclosure is required by law or necessary to protect our legal rights.

We do not sell your personal information to third parties.

Our service providers may process your information only as necessary to provide their services, subject to applicable legal requirements and contractual safeguards.

4. Cookies and Tracking Technologies

Our website may use cookies and similar technologies to:

Ensure the website and checkout function correctly.
Remember your preferences and shopping basket.
Understand website traffic and performance.
Support advertising measurement and marketing activities, where applicable.

Strictly necessary cookies may be used to provide the services you request. We will request your consent before using non-essential cookies where required by applicable law.

You can manage your cookie preferences through our website's cookie settings, where available, or through your browser settings. Disabling certain cookies may affect some website functionality.

5. Data Protection and Security

We take appropriate technical and organisational measures to protect your personal information against unauthorised access, loss, misuse, alteration or disclosure.

These measures may include secure systems, access controls, encryption where appropriate and fraud prevention tools.

Although we take reasonable steps to protect your information, no method of electronic transmission or storage is completely secure. We therefore cannot guarantee absolute security.

6. International Data Transfers

Some of our service providers may process personal information outside the United Kingdom, including in countries where data protection laws may differ from those in the UK.

Where an international transfer is subject to UK data protection law, we will take the steps required to ensure that the transfer is lawful and that appropriate safeguards are in place.

7. Your Privacy Rights

Depending on the circumstances and applicable law, you may have the right to:

Request access to your personal information.
Request the correction of inaccurate or incomplete information.
Request the erasure of your personal information.
Request the restriction of certain processing activities.
Object to processing carried out on the basis of legitimate interests.
Request the transfer of certain personal information to you or another provider.
Withdraw your consent where processing is based on consent.
Complain to the UK Information Commissioner's Office (ICO) if you believe your personal information has been handled unlawfully.

These rights are subject to applicable legal conditions and exceptions.

To exercise your rights or ask a question about how we handle your information, please contact us at:

Email: contato@ohlyra.com

You can also find information about your rights on the Information Commissioner's Office website.

8. How Long We Keep Your Information

We retain personal information only for as long as reasonably necessary for the purposes described in this policy, including:

Processing and fulfilling orders.
Maintaining business and transaction records.
Meeting tax, accounting and other legal obligations.
Handling complaints, disputes and potential legal claims.
Maintaining security and preventing fraud.

The applicable retention period depends on the type of information and the reason it was collected.

9. Children's Privacy

Our website is intended for general consumers and is not specifically directed at children. We do not knowingly collect personal information from children in circumstances where parental consent or other legal authorisation is required.

If you believe that a child has provided us with personal information inappropriately, please contact us so that we can review the matter.