Privacy policy

Last updated: June 2, 2025

This Privacy Policy has been developed to support Nyvoya, operated by Marta Filipa Neves de Carvalho, a sole proprietor registered under Portuguese tax number 261087690 (hereinafter referred to as “Nyvoya”, “we”, “us” or “our”), in aligning its business practices with the General Data Protection Regulation (GDPR) – Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016.

This policy clearly and transparently explains how we collect, use, share, and protect your personal data when you access our website – nyvoya.com – and associated services (hereinafter referred to as the “Services”), including when you make a purchase or contact us through any digital channel.

Protecting your privacy and the security of your personal information is a top priority for us. This Privacy Policy ensures you are informed about your rights and about how we handle your data, in compliance with applicable law.

By using our website or interacting with our Services, you agree to the terms of this Privacy Policy.

Updates to this Privacy Policy

We may update this Privacy Policy from time to time, for operational, legal, or regulatory reasons. The updated version will be published on our website, with the “Last updated” date adjusted accordingly. We recommend reviewing it regularly to stay informed about how we protect your data.

1. What Personal Data We Collect

The personal data we collect depends on how you interact with us and the Services. The following categories may be collected:

a) Information You Provide Directly:

Name, address, email address, and telephone number
Billing and shipping information
Order details
Account credentials (username and password)
Communication details when contacting customer support

You may choose not to provide certain information, but this may prevent you from using parts of our Services.

b) Automatically Collected Data:

We may collect usage data through cookies, pixels, and similar technologies, including:

IP address
Browser and device information
Site activity (pages visited, time spent, interactions)
General location data derived from IP

For more on cookies, see section 6 – Cookies.

c) Information from Third Parties:

We may receive information from third-party service providers, including:

Shopify (our website platform provider)
Payment processors
Analytics and marketing tools

This data is used in line with this policy and to improve your experience.

2. How We Use Your Personal Data

We use your data only as necessary and for legitimate purposes, such as:

To process your orders and deliver products
To provide customer support
To manage your account
To send you order updates and transactional emails
To personalise your browsing and shopping experience
To send marketing communications (if you’ve given consent)
To comply with legal obligations
To prevent fraud and ensure the security of our systems

3. Legal Basis for Processing Your Data (GDPR)

In accordance with the GDPR, our processing activities are based on one or more of the following legal bases:

Consent: When you have given explicit consent (e.g., to receive newsletters)
Contractual necessity: When data processing is required to fulfil a contract (e.g., placing an order)
Legal obligation: When processing is necessary to comply with the law
Legitimate interests: When processing supports our business operations without overriding your rights (e.g., website security, analytics)

4. Data Sharing and Disclosure

We only share personal data when necessary and in accordance with the GDPR:

With service providers (e.g., Shopify, payment gateways, shipping companies)
With marketing partners, when you have consented to receive marketing
With authorities, when legally required (e.g., to comply with a court order)
In case of business transfers, such as mergers or acquisitions

We do not sell or rent your data. All partners must comply with data protection standards.

5. International Data Transfers

If we transfer your data outside the European Economic Area (EEA), it will only be to countries that offer an adequate level of data protection (as recognised by the European Commission), or where appropriate safeguards (e.g., Standard Contractual Clauses) are in place.

6. Cookies and Tracking Technologies

We use cookies and similar tools to:

Improve website functionality and performance
Remember your preferences (e.g., language, items in cart)
Analyse website traffic and behaviour
Deliver personalised marketing (where consented)

You can control or disable cookies in your browser settings. However, disabling them may affect your experience.

For more information on cookies used by Shopify, see: shopify.com/legal/cookies

7. Data Retention

We keep your personal data only as long as necessary for the purposes described in this policy or to comply with legal requirements, resolve disputes, and enforce agreements.

When no longer needed, your data is securely deleted or anonymised.

8. Your Data Protection Rights

Depending on your location, you may have the following rights under the GDPR:

Right of access – Know what data we hold about you
Right to rectification – Request correction of inaccurate data
Right to erasure – Request deletion of your personal data
Right to restriction – Request restriction of processing
Right to data portability – Request a copy of your data in a machine-readable format
Right to object – Object to processing, including for marketing
Right to withdraw consent – Withdraw any previously given consent
Right to lodge a complaint – Contact your local data protection authority

To exercise these rights, please contact us using the details below. We may need to verify your identity before responding.

9. Children’s Privacy

Our Services are not intended for children under 16 years of age. We do not knowingly collect data from minors. If you are a parent or guardian and believe your child has provided us with personal information, please contact us.

10. Data Security

We implement appropriate technical and organisational measures to safeguard your personal data against loss, misuse, unauthorised access, disclosure, or alteration.

However, no system is completely secure, and we cannot guarantee absolute protection. You are responsible for keeping your account credentials safe.

11. Contact Us

If you have questions about this Privacy Policy or wish to exercise your rights, please contact:

Email: info@nyvoya.com
Address: Rua do Casal, Cotas, Soure, 3130-092, Portugal

Your cart

Your cart is empty