Privacy Policy
Privacy Policy
Last updated: 3 November 2026
This Privacy Policy describes how Belenita ("we", "us", or "our") collects, uses, and discloses your personal information when you visit, use our services, or make a purchase from belenita.com (the "Site") or otherwise communicate with us regarding the Site (collectively, the "Services"). For the purposes of this Privacy Policy, "you" and "your" means you as the user of the Services, whether you are a customer, website visitor, or another individual whose information we have collected pursuant to this Privacy Policy.
Please read this Privacy Policy carefully.
1. Data Controller
For the purpose of the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018, Belenita is the data controller of your personal information. If you have any questions about this Privacy Policy or how we handle your personal data, please contact us at: contact@novalisplus.com.
2. Changes to This Privacy Policy
We may update this Privacy Policy from time to time, including to reflect changes to our practices or for other operational, legal, or regulatory reasons. We will post the revised Privacy Policy on the Site and update the "Last updated" date. We encourage you to review this Privacy Policy regularly.
3. What Personal Information We Collect
The types of personal information we obtain about you depend on how you interact with our Site and use our Services.
Information We Collect Directly from You
- Contact details: your name, address, phone number, and email address.
- Order information: your name, billing address, shipping address, payment confirmation, email address, and phone number.
- Account information: your username, password, and other information used for account security purposes.
- Shopping information: items you view, add to your basket, save to your account, or purchase.
- Customer support information: information you choose to include in communications with us.
Information We Collect Automatically (Usage Data)
- Device information, browser information, information about your network connection, your IP address, and other information regarding your interaction with the Services.
- We use cookies, pixels, and similar technologies to collect this information. See Section 7 (Cookies) below.
Information from Third Parties
- Companies who support our Site and Services, such as Shopify.
- Our payment processors, who collect payment information to process your payment and fulfil your orders.
- Analytics and advertising partners.
4. Lawful Basis for Processing
Under the UK GDPR, we process your personal data on the following lawful bases:
- Performance of a contract (Article 6(1)(b)): to process your orders, manage your account, arrange shipping, and handle returns and exchanges.
- Legitimate interests (Article 6(1)(f)): for marketing and advertising, security and fraud prevention, and service improvement, where these interests are not overridden by your rights and freedoms.
- Consent (Article 6(1)(a)): where you have given us specific consent, such as for marketing communications or non-essential cookies. You may withdraw consent at any time.
- Legal obligation (Article 6(1)(c)): where we are required to process your data to comply with applicable laws.
5. How We Use Your Personal Information
- Providing Products and Services: processing payments, fulfilling orders, sending order notifications, managing your account, arranging shipping, and facilitating returns and exchanges.
- Marketing and Advertising: sending marketing, advertising, and promotional communications by email or text message, and showing you relevant advertisements. You can opt out of marketing at any time.
- Security and Fraud Prevention: detecting, investigating, or taking action regarding possible fraudulent, illegal, or malicious activity.
- Communicating with You: providing customer support and improving our Services.
6. How We Share Your Personal Information
We may share your personal information with:
- Vendors and third parties who perform services on our behalf (e.g., IT management, payment processing, data analytics, customer support, cloud storage, fulfilment and shipping).
- Our affiliates or corporate group members, in our legitimate interests to run a successful business.
- In connection with a business transaction such as a merger or acquisition.
- To comply with any applicable legal obligations, enforce our terms of service, and protect the rights of our users or others.
We do not sell your personal data. Mobile information and messaging consent will not be shared with third parties or affiliates for their own marketing or promotional purposes.
7. Cookies
We use cookies on our Site to power and improve our Services, remember your actions and preferences, and run analytics to better understand user interaction. For information about the cookies used by Shopify, see https://www.shopify.com/legal/cookies.
You can choose to set your browser to remove or reject cookies through your browser controls. Please note that removing or blocking cookies may negatively impact your user experience.
Our website recognises the Global Privacy Control (GPC) signal. If you enable GPC, we will treat it as a valid request to opt out of the sharing of information for the associated browser or device.
8. International Transfers
Your personal data may be transferred to, stored, and processed in countries outside the United Kingdom. Where we transfer your personal data outside the UK, we will rely on recognised transfer mechanisms, including the UK International Data Transfer Agreement (IDTA) or the UK Addendum to the EU Standard Contractual Clauses, or transfer to a country that has been determined to provide an adequate level of protection, as required by the UK GDPR.
9. Data Retention
We retain your personal data only for as long as is necessary to fulfil the purposes for which it was collected, including to satisfy any legal, accounting, or reporting requirements. To determine the appropriate retention period, we consider the amount, nature, and sensitivity of the data, the potential risk of harm from unauthorised use or disclosure, the purposes for which we process your data, and whether we can achieve those purposes through other means.
10. Your Rights
Under the UK GDPR, you have the following rights in relation to your personal data:
- Right of access: You have the right to request a copy of the personal data we hold about you.
- Right to rectification: You have the right to request correction of inaccurate personal data.
- Right to erasure: You have the right to request deletion of your personal data in certain circumstances.
- Right to restriction of processing: You have the right to request that we restrict the processing of your personal data in certain circumstances.
- Right to data portability: You have the right to receive your personal data in a structured, commonly used, and machine-readable format.
- Right to object: You have the right to object to our processing of your personal data where we are relying on a legitimate interest.
- Right to withdraw consent: Where we rely on consent to process your personal data, you have the right to withdraw that consent at any time.
- Right not to be subject to automated decision-making: You have the right not to be subject to a decision based solely on automated processing, including profiling, which produces legal effects concerning you.
To exercise any of these rights, please contact us at contact@novalisplus.com. We will respond to your request within one month, as required by law.
11. Marketing Communications
We may send you promotional emails, and you may opt out of receiving these at any time by using the unsubscribe link in our emails. If you opt out, we may still send you non-promotional emails, such as those about your account or orders.
12. Children's Data
The Services are not intended to be used by children under the age of 16, and we do not knowingly collect any personal data from children under 16. If you are the parent or guardian of a child who has provided us with their personal data, please contact us to request deletion.
13. Security
We implement appropriate technical and organisational measures to protect your personal data against unauthorised or unlawful processing, accidental loss, destruction, or damage. However, no method of transmission over the Internet or electronic storage is 100% secure, and we cannot guarantee absolute security.
14. Third-Party Websites and Links
Our Site may contain links to websites or platforms operated by third parties. We are not responsible for the privacy practices of such third parties. We encourage you to read their privacy policies before providing any personal data.
15. Complaints
If you have complaints about how we process your personal data, please contact us at contact@novalisplus.com. If you are not satisfied with our response, you have the right to lodge a complaint with the Information Commissioner's Office (ICO), the UK's supervisory authority for data protection:
Information Commissioner's Office
Wycliffe House, Water Lane, Wilmslow, Cheshire SK9 5AF
Telephone: 0303 123 1113
Website: https://ico.org.uk
16. Contact
Should you have any questions about our privacy practices or this Privacy Policy, or if you would like to exercise any of your rights, please email us at contact@novalisplus.com.