Privacy Policy
Privacy Policy
Last updated: 8 August 2026
NUVTO (“we”, “us”, “our”) operates nuvto.com. We respect your privacy and are committed to protecting the personal data you share with us. This policy explains what we collect, why we collect it and the choices you have.
1. Information We Collect
When you place an order: name, email address, delivery address, billing address, phone number and payment details. Payment is processed securely through our payment providers; we do not see or store your full card number.
When you create an account: email address, name and the password you choose.
When you visit our site: technical and usage data may be collected through cookies and similar technologies, including pages viewed, device/browser information, referring source and interactions with the site.
When you contact us: information you include in emails or messages sent to [email protected].
2. How We Use Your Information
- To process and deliver your order
- To send order confirmations, dispatch updates and support messages
- To respond to questions or requests
- To improve the website, products and service
- To send marketing emails only where you have consented
- To meet legal, tax, accounting, security and fraud-prevention obligations
We do not sell or rent your personal data.
3. Who We Share Data With
We share personal data with service providers where needed to run the shop, fulfil orders, process payments, provide customer support, analyse site performance or meet legal obligations. These may include:
- WooPayments / Stripe and PayPal for payment processing
- Royal Mail or courier partners for delivery
- Hostinger, WordPress, WooCommerce and related service providers for website hosting and store operation
- Google Analytics / Site Kit for analytics and site measurement
- Microsoft Clarity for analytics, heatmaps and session-replay style diagnostics
- Email, CRM and support tools for newsletters, order messages and customer support
Meta for WooCommerce is currently inactive on the site, but if Meta advertising or measurement tools are enabled in future, they should only operate where the relevant consent and configuration requirements are met.
4. Cookies
We use essential cookies for basket, account, checkout, security and website functions. Non-essential analytics or measurement cookies may be used to understand site performance and improve the store. See our Cookie Policy for more detail.
Where consent controls are shown, use them to accept or reject non-essential cookies. You can also remove or block cookies in your browser settings. Blocking essential cookies may affect basket, account or checkout functions.
5. How Long We Keep Your Data
Order records are retained for as long as needed for customer service, accounting, tax and legal purposes. Account data is kept while your account remains active unless deletion is requested and no legal retention requirement applies.
6. Your Rights
Under UK GDPR you may have rights to access, correct, erase, restrict, transfer or object to certain uses of your personal data. You can also opt out of marketing communications at any time.
To exercise your rights, email [email protected]. We aim to respond within 30 days.
7. Security
Our site uses SSL encryption for data in transit. Payment processing is handled by third-party payment providers. Access to customer data is restricted to authorised use.
8. Children
Our store is not directed at anyone under 16. We do not knowingly collect personal data from children.
9. Changes to This Policy
We may update this policy from time to time. Changes will be published on this page with an updated date.
10. Contact
For privacy questions, contact NUVTO at [email protected]. If you are not satisfied with our response, you can contact the Information Commissioner’s Office at ico.org.uk.
Customer support chat and AI-assisted drafts
What the chat collects
When you use Nuvto Chat, we store the messages you send, message and conversation timestamps, a public conversation identifier, and the minimum technical information needed to keep the chat secure and reliable. If you are signed in, the conversation may be linked to your Nuvto account. You can optionally provide an email address if you want a reply after leaving the website; email is not required to continue chatting while the page remains open.
Where chats are stored and why we use them
The canonical conversation record is stored in Nuvto’s WordPress database on Nuvto’s existing hosting. Authorised support staff use the staff inbox to answer product and policy questions, manage handoffs, protect the service from abuse, and maintain an auditable support history. Chat data is included in Nuvto’s normal hosting backups and is removed from backup copies through the hosting provider’s normal backup-rotation process.
AI-assisted and automatic chat replies
Nuvto may use a paid Google Gemini service to prepare internal staff drafts and, when automatic replies are enabled, to answer routine product or policy questions directly in the chat. Automatic answers are sent only when the response is high-confidence and supported by relevant Nuvto policy or product sources; they are labelled as AI assistant. Order-specific questions, payments, refunds, complaints, personal-data requests, and uncertain questions are routed to a member of the Nuvto team. Only the relevant conversation excerpts and limited Nuvto product or policy information needed for the reply are sent. Nuvto does not send order records, payment data, delivery addresses, private customer profiles, or private WooCommerce metadata to the AI provider. The AI does not take store actions.
OpenAI is not an active provider in the current chatbot version. If Nuvto later enables OpenAI or another provider to process customer chat data, this notice will be reviewed and updated before that provider is activated.
Retention and deletion
Chat-derived personal data is hard-deleted 365 days after the conversation’s last activity. This deletion includes the conversation, messages, optional guest email address, AI-run records, related tool-call records, and identifying audit context. Nuvto may retain anonymous aggregate usage and cost totals that cannot be used to reconstruct a conversation.
You can delete a guest conversation using the chat controls. You can also contact Nuvto through the privacy contact shown on this page to request access to or deletion of chat data, subject to any information Nuvto must retain for legal, security, or dispute-resolution purposes.