Section 01
Who we are
Nuvane is a fine jewellery brand based in New York, selling directly to customers through this store. When we say "we", "us" or "Nuvane" in this policy, we mean the company operating this website. We are the data controller for the personal information described below.
Our store runs on Shopify, which processes orders and payments on our behalf. This policy covers the information we hold about you; Shopify's own privacy notice covers their role as our platform provider.
Section 02
What we collect
We only ask for what an order, a delivery or a reply actually requires. Depending on how you use the store, that can include:
Information you give us
- Name, email address, phone number and shipping and billing addresses when you place an order.
- Your email address when you subscribe to our list, and nothing else.
- Gift notes, engraving details, sizing preferences and anything else you add to an order.
- The content of messages you send us by email, contact form or social media.
- Reviews, photos and ratings you choose to submit about a piece.
Information collected automatically
- Device and browser type, operating system, language and approximate location from your IP address.
- Pages you view, products you open, items added to cart, and the site or ad you arrived from.
- Cookie and session identifiers that keep your cart intact while you shop.
Payment information
Card numbers are entered directly into Shopify's PCI-compliant checkout and are never stored on our systems. We receive only the confirmation of payment, the card brand and the last four digits so we can match a payment to an order and handle refunds.
Section 03
How we use it
- Fulfilling your order — taking payment, packing, shipping, sending tracking updates, and handling returns, exchanges and warranty claims.
- Customer care — answering questions about sizing, stones, delivery or repairs.
- Marketing you asked for — new pieces, restocks and private sales, sent only with your consent and never more than twice a month.
- Improving the store — understanding which pages and products people find, so we can fix what doesn't work.
- Fraud prevention and legal duties — verifying suspicious orders, keeping tax and accounting records, and responding to lawful requests.
Where the law requires a legal basis, we rely on performance of our contract with you (orders and delivery), your consent (marketing and non-essential cookies), our legitimate interests (site security, fraud prevention, product improvement) and legal obligation (tax and consumer records).
Section 04
Cookies and tracking
Cookies are small files stored by your browser. We use three kinds, and you can refuse everything except the first.
- Essential — keep your cart, session and checkout working, and protect against fraud. The store cannot function without them.
- Analytics — tell us anonymously how many people visited a page and where they left.
- Marketing — let us measure whether an ad led to an order and show relevant pieces on other platforms.
You can clear or block cookies in your browser settings at any time, and where required we ask for your consent before setting anything non-essential. Blocking essential cookies will stop the cart and checkout from working.
Section 05
Who we share it with
We do not sell, rent or trade your personal information. We share it only with the service providers who make the store run, and only with what they need:
- Our e-commerce platform and payment processors, to host the store and take payment securely.
- Carriers and fulfilment partners, to deliver your parcel and handle returns.
- Email and review providers, to send the messages you subscribed to and collect feedback.
- Analytics and advertising platforms, subject to your cookie choices.
- Professional advisers and authorities, where we are legally required to disclose information.
Each provider is bound by contract to use your data only for the service they provide to us, and to keep it secure.
Section 06
How long we keep it
- Order and invoice records: seven years, as tax and accounting law requires.
- Customer service correspondence: two years after the conversation closes.
- Marketing subscriptions: until you unsubscribe, then a minimal record so we don't email you again.
- Analytics data: up to fourteen months, in aggregated form wherever possible.
When a retention period ends, we delete the data or irreversibly anonymise it.
Section 07
Your rights and choices
Depending on where you live, you have some or all of the following rights over your personal information:
- Ask for a copy of the data we hold about you.
- Correct anything inaccurate or incomplete.
- Ask us to delete data we no longer need to keep.
- Object to or restrict certain processing, including profiling for advertising.
- Receive your data in a portable, machine-readable format.
- Withdraw consent for marketing at any time, without affecting your orders.
- Opt out of the sharing of personal information for targeted advertising.
Email privacy@nuvane.com and we will respond within 30 days. We may need to confirm your identity first, and we will never charge you or treat you differently for exercising a right. If you are in the EEA or UK, you may also complain to your local data protection authority.
Section 08
Security
The store is served over encrypted HTTPS connections, checkout is PCI-DSS compliant, and access to customer records is limited to the members of our team who need it, protected by two-factor authentication. No system is perfect: if a breach ever affects your data, we will notify you and the relevant regulator without undue delay.
Section 09
International transfers
We are based in the United States, and some of our providers process data in other countries. When personal information leaves the EEA or the UK, we rely on transfer mechanisms approved by regulators — such as the European Commission's Standard Contractual Clauses — so your data keeps an equivalent level of protection wherever it is handled.
Section 10
Children's privacy
Our store is intended for adults. We do not knowingly collect personal information from anyone under 16. If you believe a child has provided us with data, write to us and we will delete it promptly.
Section 11
Changes to this policy
We update this page when our practices, our providers or the law change. The date at the top always reflects the current version. If a change materially affects how we use your information, we will tell you by email or with a notice on the store before it takes effect.
Section 12
Contact us
Questions about this policy, or a request about your data? Write to privacy@nuvane.com — a real person on our team answers every message within one business day.