Privacy policy

Last updated: 17 August 2026

Nivaya (nivaya.uk) is operated by Unity Digital Group LLC, a Limited Liability Company incorporated in the State of Wyoming, United States ("Nivaya", "we", "us", or "our").

This Privacy Policy explains how we collect, use, share, and protect personal information when you visit or shop at nivaya.uk (the "Site"). We are committed to protecting your privacy in accordance with the UK General Data Protection Regulation (UK GDPR), the Data Protection Act 2018, and the Privacy and Electronic Communications Regulations (PECR).

If you have any questions about this policy or how we handle your personal data, please contact us at hello@nivaya.uk.

1. Who We Are

For the purposes of UK data protection law, Unity Digital Group LLC is the data controller responsible for your personal data collected through the Site, even though we are incorporated in the United States. Because we offer goods to customers in the United Kingdom, UK GDPR applies to our processing of your personal data.

2. Information We Collect

We collect the following categories of personal data:

Identity and contact data: name, billing and shipping address, email address, telephone number.
Order and transaction data: details of products purchased, order value, order history, returns and refund requests.
Payment data: we do not store your full card details. Payments are processed securely by Shopify Payments, our third-party payment processor, which collects and handles your card and payment information directly.
Technical and usage data: IP address, browser type and version, device information, pages visited, referral source, and other data collected automatically through cookies and similar technologies.
Marketing preferences: your communication preferences and history of opening or clicking marketing emails, if you sign up to our mailing list.

3. How We Collect Your Data

Directly from you, when you place an order, create an account, contact customer service, or subscribe to our newsletter.
Automatically, through cookies and similar tracking technologies when you browse the Site (see Section 7).
From third parties, such as our payment processor (Shopify Payments) and analytics/advertising partners.

4. How We Use Your Information

We use your personal data for the following purposes and legal bases under UK GDPR:

Purpose	Legal Basis
Processing and fulfilling your order, arranging shipping	Performance of a contract
Processing payments (via Shopify Payments)	Performance of a contract
Customer service, handling returns, refunds, and complaints	Performance of a contract / Legitimate interests
Sending order confirmations and shipping updates	Performance of a contract
Sending marketing emails (e.g. via Klaviyo), where you have opted in	Consent
Running advertising and analytics (Google, Meta/Facebook, TikTok)	Consent (cookies) / Legitimate interests
Preventing fraud and ensuring Site security	Legitimate interests / Legal obligation
Complying with tax, accounting, and legal obligations	Legal obligation

You may withdraw your consent to marketing communications at any time by clicking "unsubscribe" in any email or by contacting us at hello@nivaya.uk.

5. Sharing Your Information

We share personal data with trusted third parties who help us operate our business, including:

Shopify – our e-commerce platform provider, which hosts the Site and processes orders.
Shopify Payments – our payment processor.
Klaviyo – our email marketing platform.
Google (Google Analytics, Google Ads), Meta/Facebook (Meta Pixel), and TikTok (TikTok Pixel) – for website analytics and advertising purposes.
Shipping carriers, to deliver your order.
Professional advisors (e.g. accountants, lawyers) and authorities, where required by law.

We do not sell your personal data to third parties.

6. International Data Transfers

Unity Digital Group LLC is based in the United States, and some of our service providers (including Shopify, Google, Meta, TikTok, and Klaviyo) may process data outside the UK, including in the United States. Where we transfer personal data outside the UK, we ensure appropriate safeguards are in place, such as the UK International Data Transfer Agreement (IDTA), an addendum to the EU Standard Contractual Clauses, or transfers to organisations certified under an approved data protection framework.

7. Cookies and Tracking Technologies

We use cookies and similar technologies (including pixels from Google, Meta/Facebook, and TikTok) to operate the Site, remember your preferences, understand how visitors use the Site, and deliver personalised advertising.

Categories of cookies we use:

Strictly necessary cookies – required for the Site and checkout to function (e.g. shopping cart).
Analytics cookies – help us understand how visitors interact with the Site (e.g. Google Analytics).
Advertising/marketing cookies – used to show you relevant ads and measure campaign performance (e.g. Meta Pixel, TikTok Pixel, Google Ads).

When you first visit the Site, you will be asked to consent to non-essential cookies via our cookie banner. You can change or withdraw your consent at any time through your browser settings or the cookie preference tool on the Site.

8. Data Retention

We retain your personal data only for as long as necessary to fulfil the purposes described in this policy, including to satisfy legal, accounting, or reporting requirements (for example, UK tax law generally requires us to keep order records for at least 6 years). Marketing data is retained until you unsubscribe or request deletion, or after a period of inactivity.

9. Your Rights Under UK GDPR

If you are located in the UK, you have the right to:

Access the personal data we hold about you.
Rectify inaccurate or incomplete data.
Erase your data ("right to be forgotten"), in certain circumstances.
Restrict or object to our processing of your data.
Data portability – receive your data in a structured, machine-readable format.
Withdraw consent at any time, where processing is based on consent.
Lodge a complaint with the UK Information Commissioner's Office (ICO) at ico.org.uk if you believe your data protection rights have been violated.

To exercise any of these rights, contact us at hello@nivaya.uk. We will respond within one month, as required by law.

10. Data Security

We implement appropriate technical and organisational measures to protect your personal data against unauthorised access, loss, or misuse, including relying on Shopify's PCI-DSS compliant infrastructure for payment processing.

11. Children's Privacy

The Site is not directed at children under 16. We do not knowingly collect personal data from children. If you believe a child has provided us with personal data, please contact us so we can delete it.

12. Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices or legal requirements. The "Last updated" date at the top of this page indicates when it was last revised. We encourage you to review this page periodically.