Your Cart
0 Item(s)Shipping
€50.00 away
Your Discounts:
-€0.00
Total:
€0.00
Last Updated: May 2026
At Nervilla, your trust is everything. We treat your personal information with the same care we put into every product we ship — securely, transparently, and only for purposes you understand and agree to.
This Privacy Policy explains exactly what information we collect, why we collect it, who we share it with, how long we keep it, and the rights you have over your data. We've written it to be as clear and readable as possible — privacy shouldn't require a law degree to understand.
Nervilla is operated by a company registered in the United Kingdom and ships to customers worldwide. We act as the data controller for personal information collected through our website.
This policy is governed primarily by the UK General Data Protection Regulation (UK GDPR) and the UK Data Protection Act 2018, with additional rights provided to customers based on their country of residence (including the EU GDPR for EEA customers, the California Consumer Privacy Act for California residents, and other applicable data protection laws).
For any privacy enquiry, contact us at contact@nervilla.com — we respond within 1 business day.
| Topic | Summary |
|---|---|
| Who we are | Nervilla, a UK-registered company shipping worldwide |
| What we collect | Contact details, order info, payment confirmation, technical/usage data |
| Why we collect it | To process orders, support you, prevent fraud, and improve our service |
| Who we share it with | Trusted service providers only — never sold to third parties |
| Your rights | Access, correction, deletion, portability, opt-out, and more — depending on your jurisdiction |
| How to reach us | contact@nervilla.com — within 1 business day |
| Complaint | UK ICO (www.ico.org.uk) or your local data protection authority |
Nervilla ("we", "us", "our") is a brand operated by a company registered in the United Kingdom, with registered office at 71-75 Shelton Street, Covent Garden, London, WC2H 9JQ, United Kingdom.
We operate this online store and all related Services, including order processing, customer support, and marketing communications. We are the data controller responsible for the personal information you provide to us.
"Personal information" means any information that identifies you or can reasonably be linked to you as an individual, as defined under the UK GDPR, EU GDPR, and other applicable data protection laws.
We collect the following categories of personal information:
We do not knowingly collect sensitive personal data (race, ethnicity, political opinions, religious beliefs, health data, sexual orientation, biometric data) beyond what is strictly necessary to provide our Services.
We collect personal information from the following sources:
We use your personal information only for purposes directly related to our activities, or where you have given us consent.
Where you are located in the United Kingdom or the European Economic Area, we process your personal data on the following lawful bases under Article 6 of the UK GDPR / EU GDPR:
We do not sell or rent your personal information to third parties. We disclose your personal information only in the following circumstances:
We share information with trusted third-party vendors who perform functions on our behalf, including:
These parties are contractually required to handle your information securely and only for the purposes we specify.
Our Services are hosted on the Shopify platform. Shopify processes personal information as part of providing the technical infrastructure for our store. For full details, see Shopify's Privacy Policy at www.shopify.com/legal/privacy.
Where you have consented or where permitted by applicable law, we may share certain information with advertising and analytics partners to deliver relevant advertising and measure campaign performance. You may opt out of targeted advertising at any time by contacting us.
In connection with a merger, acquisition, restructuring, or sale of assets, your personal information may be transferred as part of that transaction. We will notify you of any such change in accordance with applicable law.
Where required to comply with a legal obligation, court order, or lawful request from a government or regulatory authority — or to protect the rights, property, or safety of Nervilla, our customers, or others.
In any other circumstance where you have given us your express consent.
Nervilla is operated by a UK-registered company shipping worldwide. Your personal information may be transferred to, stored in, or processed in countries other than your country of residence — including the United Kingdom, the European Economic Area, the United States, and other jurisdictions where Shopify's infrastructure and our service providers operate.
Where personal information is transferred internationally, we apply appropriate safeguards in accordance with applicable data protection law, including:
The rights you have over your personal information depend on the data protection law that applies to you. We honour all applicable rights under the law of your country of residence.
If you are located in the United Kingdom or the European Economic Area, you have the following rights:
We will respond to requests within 30 days, extendable by 60 additional days for complex requests.
If you are a California resident, you have additional rights under the CCPA:
If you are located in Canada (outside Quebec), you have rights under the Personal Information Protection and Electronic Documents Act (PIPEDA), including:
Quebec residents have additional rights under Loi 25 — see our Quebec-specific Privacy Policy.
If you are located in Australia, you have rights under the Privacy Act 1988 and the Australian Privacy Principles, including the right to access, correct, and complain about the handling of your personal information.
If you are located in another country, your rights are determined by local data protection law. We honour all applicable rights and respond within the timeframes required by your jurisdiction.
You may unsubscribe from marketing communications at any time by:
Contact us at contact@nervilla.com. We will verify your identity before processing your request and respond within the timeframes required by applicable law. We will never penalise you for exercising your privacy rights.
Our Services are not directed at children under the age of 18. We do not knowingly collect personal information from minors.
If you believe a minor has provided us with their personal information without appropriate consent, please contact us at contact@nervilla.com and we will promptly delete it.
We implement appropriate technical and organisational security measures to protect your personal information against unauthorised access, disclosure, alteration, or destruction. These include:
However, no method of transmission over the internet or electronic storage is completely secure. We cannot guarantee absolute security and recommend that you do not transmit sensitive information through unsecured channels.
In the event of a personal data breach that is likely to result in a risk to your rights and freedoms, we will:
We retain your personal information only for as long as necessary to fulfil the purposes set out in this Privacy Policy, unless a longer retention period is required by applicable law (including tax, accounting, and consumer protection obligations).
Typical retention periods:
| Type of information | Retention period |
|---|---|
| Order and transaction records | 7 years (UK tax and accounting compliance) |
| Customer support communications | 3 years from last contact |
| Marketing data | Until you unsubscribe, plus a short retention period |
| Account information | While your account is active, plus 2 years |
| Cookies and tracking | See Section 12 |
When personal information is no longer required, we securely delete or anonymise it.
In accordance with Article 22 UK GDPR / EU GDPR, we inform you that:
To exercise this right, contact contact@nervilla.com.
We use cookies and similar tracking technologies to:
In accordance with the UK Privacy and Electronic Communications Regulations (PECR), the EU ePrivacy Directive, and similar laws in other jurisdictions, we will request your consent before placing non-essential cookies on your device.
You can manage your cookie preferences through:
For full details, see our Cookie Policy on the website.
Our Services may contain links to third-party websites or platforms. We are not responsible for the privacy practices or content of those websites.
We recommend reviewing the privacy policies of any third-party site you visit.
We may update this Privacy Policy from time to time to reflect changes in our practices, legal requirements, or operational needs.
When we make material changes, we will:
Your continued use of our Services following any update constitutes your acceptance of the revised policy.
If you have any questions about this Privacy Policy, wish to exercise your privacy rights, or wish to make a complaint about how we have handled your personal information, please contact us:
Email: contact@nervilla.com Response Time: Within 1 business day Registered Office: 71-75 Shelton Street, Covent Garden, London, WC2H 9JQ, United Kingdom
For the purposes of applicable data protection legislation, Nervilla is the data controller of your personal information.
If you are not satisfied with our response, you may escalate your concern to the supervisory authority in your country:
This Privacy Policy was last updated in May 2026 and applies to all customers accessing our Services from the date of publication.
