Privacy policy

Who we are

Nervitix UK, 71-75 Shelton Street, Covent Garden, London WC2H 9JQ, United Kingdom, is the data controller for personal data collected through this website. You can contact us at support@nervitix.co.uk.

What we collect

We keep data collection to what an order actually requires:

• Order data: name, email address, phone number, delivery address, items ordered and order value
• Payment confirmation data: the payment status, last four digits and card brand supplied by our payment processor — we never receive or store your full card number
• Support correspondence: emails you send us and our replies
• Technical data: standard server logs and basic analytics used to keep the site working and secure

Why we process it and our lawful basis

We process order and delivery data to perform our contract with you. We process support correspondence on the basis of legitimate interests in answering your questions. We keep transaction records to comply with legal accounting and tax obligations.

We do not send marketing email unless you have explicitly opted in, and every marketing email carries a one-click unsubscribe link.

Who we share it with

We share only what is necessary, with: Stripe (payment processing), our UK fulfilment partner and courier (name and delivery address so your parcel arrives), and our email and hosting providers.

We do not sell your personal data, and we do not share it with data brokers or advertisers.

How long we keep it

Transaction records are kept for six years to satisfy UK tax and accounting requirements. Support correspondence is kept for two years. Marketing consent records are kept for as long as you remain subscribed, plus two years.

Your rights under UK GDPR

You have the right to:

• Request a copy of the personal data we hold about you
• Ask us to correct anything inaccurate
• Ask us to delete data where we have no ongoing legal reason to keep it
• Object to or restrict certain processing
• Withdraw marketing consent at any time
• Complain to the Information Commissioner's Office at ico.org.uk

Cookies

We use only the cookies required for the site and checkout to function securely, plus privacy-respecting aggregate analytics. We do not run third-party advertising cookies or cross-site tracking pixels.

Security

The site is served over HTTPS and payment pages are hosted and encrypted by Stripe, a PCI DSS Level 1 certified provider. Access to order data internally is limited to staff who need it to fulfil orders and answer support requests.