Privacy Policy

Last updated: 3 September 2026

This Privacy Policy explains how NoxVeli collects, uses, shares and protects personal information when you visit noxveli.com, place an order, contact us, subscribe to marketing or otherwise interact with the store.

Who is responsible for your personal information

The data controller is Karol Karolkowski trading as NoxVeli.

31 Mosaic Close
Southampton
England
SO19 6RR
United Kingdom

Email: info@noxveli.com

Information we may collect

Name, email address, telephone number, billing address and delivery address.
Order, payment-status, delivery, return, refund and customer-service information.
Device, browser, IP address and website-interaction information where permitted.
Marketing subscription and communication preferences.
Messages, enquiries, reviews, photographs or videos that you choose to send us.
Security, fraud-prevention and account-protection information generated by us or our service providers.

How we use personal information

We use personal information to process and deliver orders, take payment, handle returns and support, maintain required business records, protect the store and customers, respond to enquiries, improve our services and send marketing where permitted.

Depending on the purpose, our lawful basis may be performance of a contract, compliance with a legal obligation, our legitimate interests or your consent.

Shopify and payment processing

Our store is hosted on Shopify. Shopify provides ecommerce, checkout, order administration, security, customer-privacy and related functions. Payment is handled by the secure payment services available through checkout. NoxVeli does not ordinarily receive or store your full payment-card number.

You can learn more about Shopify's handling of consumer data through the Shopify Privacy Portal.

Delivery and service providers

We may share information reasonably needed to fulfil and support an order with providers involved in payment processing, delivery, warehousing or fulfilment, tracking, communications, fraud prevention and customer support.

Analytics — Microsoft Clarity

We use Microsoft Clarity to understand how the website is used and to improve the shopping experience. Depending on your consent choice and Clarity's configuration, this can include page views, browser and device characteristics, clicks, scrolling, heatmaps and session recordings. Sensitive content is masked by the service.

For visitors in the United Kingdom, NoxVeli's Shopify customer-privacy configuration requires consent for non-essential tracking. Clarity receives the consent signal from Shopify's native cookie-consent system. When the required consent is not granted, Clarity does not set its normal analytics cookies and may operate only in a restricted no-cookie mode provided by Microsoft.

Email marketing and Klaviyo

We use Klaviyo for email marketing and onsite signup functionality. If you subscribe, we use the contact information and preferences you provide to send marketing in line with your choices. You can unsubscribe using the link in a marketing email or by contacting us. Optional tracking associated with onsite marketing is subject to applicable consent requirements.

Advertising and measurement

We may use advertising and measurement services through Shopify or connected advertising channels. Where UK law requires consent for non-essential marketing or analytics technologies, the required permission is requested through the store's cookie-consent controls before Shopify pixels configured to require that permission can run.

Cookies and similar technologies

We use cookies, pixels, local storage and similar technologies for checkout, security, preferences, analytics and, where enabled, advertising measurement. Some are necessary for the service; others are controlled by your consent choice. Read our Cookie & Tracking Notice for more detail.

Who we may share information with

Depending on how you use the store, information may be shared with Shopify, payment providers, delivery and fulfilment services, Klaviyo, Microsoft Clarity, customer-support and communications providers, analytics and security providers, professional advisers and public authorities where disclosure is legally required.

We do not sell personal information to advertisers.

International processing

Some service providers may process personal information outside the United Kingdom. Where UK data-protection law requires safeguards for an international transfer, an appropriate recognised transfer mechanism is used.

How long we keep information

We keep personal information only for as long as reasonably necessary for the purpose for which it was collected, including order support, guarantees, accounting and tax requirements, dispute resolution and legal claims. Different types of information can have different retention periods.

Security

We use reasonable technical and organisational measures intended to protect personal information. No online service can guarantee absolute security.

Your data-protection rights

Depending on the circumstances, you may have rights to request access, correction, erasure, restriction, objection or portability, and to withdraw consent where processing is based on consent. You can object to direct marketing at any time.

To make a request, email info@noxveli.com. We may need to verify your identity.

Complaints

Please contact us first if you have a privacy concern so that we can try to resolve it. You also have the right to complain to the UK Information Commissioner's Office.