Privacy Policy

Last updated: June 11, 2026

Flexa Nova operates flexa-nova.com and is committed to protecting the personal information of our customers in accordance with the General Data Protection Regulation (GDPR), the UK GDPR, and other applicable data protection laws. This Privacy Policy explains what personal data we collect, why we collect it, how we use it, and what rights you have over it.

Flexa Nova is powered by Shopify Inc. Where Shopify processes personal data on our behalf, they act as a data processor. Where Shopify processes data for its own purposes, Shopify is an independent data controller. Please refer to Shopify's Privacy Policy at shopify.com/legal/privacy for more information.

1. Data Controller

The data controller responsible for your personal information is Flexa Nova, contactable at: customerservice@flexa-nova.com

If you have any questions about this Privacy Policy or your personal data, please use the contact details above.

2. Personal Information We Collect

Depending on how you interact with our website, we may collect the following categories of personal information:

•    Identity & Contact Data: name, email address, billing and shipping address, phone number

•    Financial Data: payment card type, last four digits (we do not store full card numbers), transaction history

•    Account Data: username, password (encrypted), account preferences

•    Transaction Data: items purchased, order history, returns and refunds

•    Technical Data: IP address, browser type and version, device type, operating system, time zone

•    Usage Data: pages visited, products viewed, time spent on site, referring URLs

•    Marketing Preferences: whether you have opted in to marketing communications and your preferences

•    Communications: content of messages sent to us via email or contact forms

3. How We Collect Personal Information

We collect personal information in the following ways:

•    Directly from you: when you create an account, place an order, subscribe to our newsletter, contact us, or submit a product review

•    Automatically: through cookies and similar tracking technologies as you navigate our website (see our Cookie Policy for details)

•    From third parties: from payment processors (e.g. Shopify Payments, PayPal, Klarna), logistics partners, advertising platforms (e.g. Google, Meta), and analytics providers

4. Legal Basis for Processing (GDPR)

We only process your personal data where we have a valid legal basis to do so under the GDPR. The legal bases we rely on are:

•    Contract performance: to process your orders, arrange delivery, and manage returns and refunds

•    Legitimate interests: to prevent fraud, improve our website, analyse shopping behaviour, and send service communications — where these interests are not overridden by your rights

•    Consent: for marketing emails, newsletters, and non-essential cookies — you may withdraw consent at any time

•    Legal obligation: to comply with applicable laws, tax obligations, and regulatory requirements

5. How We Use Your Personal Information

•    To process and fulfil your orders, including payment processing and delivery coordination

•    To create and manage your customer account

•    To send order confirmations, shipping notifications, and customer service communications

•    To send marketing emails and promotional offers (only where you have consented or where permitted by applicable law)

•    To show you personalised advertising on third-party platforms (e.g. Google, Meta, TikTok, Pinterest) based on your browsing and purchase behaviour

•    To analyse website usage and improve site performance, product range, and user experience

•    To detect, prevent, and investigate fraud or other illegal activities

•    To comply with our legal and regulatory obligations

6. Sharing Your Personal Information

We may share your personal information with the following categories of third parties, strictly for the purposes described in this policy:

•    Shopify Inc. — our e-commerce platform provider (data processor)

•    Payment processors — including PayPal, Klarna, Stripe, and card networks (Visa, Mastercard, etc.)

•    Logistics & delivery partners — carriers responsible for fulfilling your shipment

•    Advertising platforms — Google, Meta, TikTok, Pinterest (for marketing and remarketing)

•    Analytics providers — Google Analytics, Shopify Analytics

•    Legal and regulatory authorities — where required by applicable law or in response to valid legal process

We do not sell your personal information to third parties.

7. International Data Transfers

Your personal data may be transferred to and processed in countries outside the European Economic Area (EEA) and the United Kingdom, including the United States. Where such transfers occur, we ensure appropriate safeguards are in place, such as the European Commission's Standard Contractual Clauses (SCCs) or equivalent mechanisms.

For data processed by Shopify and other infrastructure providers, data may be stored on servers located in the US or other jurisdictions. Shopify complies with applicable international transfer mechanisms.

8. Retention of Personal Information

We retain your personal data for as long as is necessary to fulfil the purposes for which it was collected, and to comply with applicable legal obligations. In general:

•    Customer account and order data: retained for 7 years to comply with tax and accounting obligations

•    Marketing preferences: retained until you withdraw consent or request deletion

•    Technical and usage data: typically retained for up to 26 months

•    Customer support communications: retained for up to 3 years

9. Your Rights Under GDPR

If you are located in the EEA or UK, you have the following rights in relation to your personal data:

•    Right of Access: to request a copy of the personal data we hold about you

•    Right to Rectification: to request correction of inaccurate or incomplete personal data

•    Right to Erasure: to request deletion of your personal data ('right to be forgotten'), subject to certain conditions

•    Right to Restriction: to request that we restrict processing of your personal data in certain circumstances

•    Right to Data Portability: to receive your personal data in a structured, machine-readable format

•    Right to Object: to object to processing based on legitimate interests or for direct marketing

•    Right to Withdraw Consent: where processing is based on consent, to withdraw that consent at any time without affecting the lawfulness of prior processing

To exercise any of these rights, please contact us at customerservice@flexa-nova.com. We will respond within 30 days. You may also have the right to lodge a complaint with your local data protection authority. In the EU, you can find your national authority at edpb.europa.eu. In the UK, the relevant authority is the Information Commissioner's Office (ICO) at ico.org.uk.

10. Children's Privacy

Our website is not directed at children under the age of 16. We do not knowingly collect personal data from children. If you believe a child has provided us with personal information, please contact us at customerservice@flexa-nova.com and we will delete it promptly.

11. Security

We implement appropriate technical and organisational measures to protect your personal data against unauthorised access, alteration, disclosure, or destruction. These include SSL/TLS encryption for data in transit and access controls for our systems. However, no method of transmission over the internet or electronic storage is completely secure, and we cannot guarantee absolute security.

12. Cookies

We use cookies and similar technologies to enhance your experience on our website. For detailed information on the cookies we use and how to manage your preferences, please see our Cookie Policy.

13. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, technology, or legal requirements. When we make material changes, we will notify you by posting the updated policy on this page and updating the "Last updated" date. For significant changes, we may also notify you by email. Continued use of our website after the effective date of any changes constitutes acceptance of the revised policy.

14. Contact

For any questions, requests, or complaints relating to this Privacy Policy or the handling of your personal data, please contact us at:

Email: customerservice@flexa-nova.com

Website: flexa-nova.com