Privacy Policy

Privacy Policy

NuvaStep operates this store and website—including all associated information, content, features, tools, products, and services—to provide you, as a customer, with a curated shopping experience (the “Services”). NuvaStep is hosted by Shopify, which enables us to provide the Services to you.

This Privacy Policy describes how we collect, use, and disclose your personal data when you visit or use the Services, make a purchase or other transaction through them, or otherwise interact with us.

If there is any conflict between our Terms of Use and this Privacy Policy, this Privacy Policy will prevail with respect to the collection, processing, and disclosure of your personal data.

Please read this Privacy Policy carefully. By accessing or using the Services, you acknowledge that you have read this Privacy Policy and understand how we collect, use, and disclose your information.

Personal Data We Collect or Process

“Personal data” means information that identifies you or another person, or that can reasonably be linked to you or another person. Personal data does not include anonymized or sufficiently de-identified information.

Depending on how you interact with the Services, where you live, and to the extent permitted or required by law, we may collect or process the following categories of personal data (including derived inferences):

Contact Information:

Name, address, billing address, shipping address, phone number, email address.

Financial Information:

Credit/debit card information, financial account numbers, payment information, payment confirmations, transaction details, and payment method.

Account Information:

Username, password, security questions, preferences, and settings.

Transaction Information:

Items you view, add to cart, add to wishlist, purchase, return, exchange, or cancel, as well as your previous transactions.

Communication Data:

Content you provide when communicating with us (e.g., support inquiries).

Device Information:

Details about your device, browser, or network connection, IP address, and other unique identifiers.

Usage Information:

Data about how you interact with the Services, including when and how you use or navigate them.

Sources of Personal Data

We may collect personal data from:

  • Directly from you, when you create an account, use the Services, communicate with us, or otherwise provide data.

  • Automatically, through your device when you use our Services or visit our website, including via cookies or similar technologies.

  • Service providers, when they collect or process data on our behalf.

  • Business partners or third parties.

How We Use Your Personal Data

Depending on your interactions with the Services, we use your personal data for the following purposes:

Providing, customizing, and improving the Services

This includes processing payments, fulfilling orders, storing preferences, sending account notifications, handling returns and exchanges, managing your account, enabling reviews, and personalizing your experience (e.g., product recommendations).

Marketing and Advertising

We may send marketing, promotional, or advertising messages via email, SMS, or mail and display targeted ads based on your purchases, shopping behavior, or online activity.

Security and Fraud Prevention

To authenticate accounts, maintain secure transactions, detect or investigate fraudulent or harmful activities, and protect the safety of our Services.

Communication

Customer support, responding to inquiries, and maintaining our business relationship with you.

Legal Compliance

To comply with laws, respond to lawful government or judicial requests, and enforce our terms and policies.

How We Disclose Personal Data

We may disclose your personal data to third parties for legitimate purposes, including:

  • Shopify, service providers, and other third parties performing services on our behalf (IT operations, payments, analytics, support, fulfillment, shipping, cloud storage).

  • Business and marketing partners, to enable advertising and marketing services.
    For example, we use Shopify to support personalized advertising across merchants and websites.
    You may have the right to opt out of sharing for targeted advertising, depending on your location.

  • With your instruction or consent, such as when shipping products or using social media integrations.

  • Affiliates or corporate group members.

  • In connection with corporate transactions, legal obligations, or to protect our rights or the rights of others.

Relationship with Shopify

The Services are hosted by Shopify, which collects and processes personal data to provide and improve the Services.
Data you submit through the Services is transmitted to Shopify and relevant third parties, possibly in other countries.

We also use Shopify’s advanced data features, which may incorporate your interactions with our store and other merchants.
In such cases, Shopify is responsible for processing this data, including responding to rights requests related to that processing.

More information can be found in the Shopify Consumer Privacy Policy or via the Shopify Privacy Portal.

Third-Party Websites and Links

The Services may contain links to third-party websites.
We are not responsible for the privacy, security, accuracy, or reliability of such sites.
Information you post in public or semi-public areas (including social media) may be visible to others and used by third parties.

Children’s Data

The Services are not intended for children, and we do not knowingly collect personal data from individuals below the age of majority in your jurisdiction.

If you are a parent or guardian and believe a child has provided personal data, you may contact us to request deletion.

We have no knowledge that we “sell” or “share” the personal data of individuals under 16 years old.

Security and Data Retention

While we take measures to protect your data, no method of transmission or storage is fully secure.
Do not use insecure channels to send sensitive information.

We retain personal data for as long as necessary for account management, service delivery, legal compliance, dispute resolution, and contract enforcement.

Your Rights and Choices

Depending on your location, you may have rights including:

  • Right to access personal data we hold about you

  • Right to deletion

  • Right to correction

  • Right to data portability

  • Right to opt out of selling/sharing data for targeted advertising

  • Right to restrict or object to processing (EEA/UK)

  • Right to withdraw consent

We may need to verify your identity before fulfilling requests.
Authorized agents may act on your behalf if legally permitted.

We do not discriminate against you for exercising your rights.

Complaints

If you have concerns about our data practices, contact us using the details below.
Depending on your location, you may have the right to appeal or file a complaint with your local data protection authority.

International Data Transfers

Your personal data may be transferred, stored, or processed outside your country.
For EEA/UK data, transfers may rely on Standard Contractual Clauses (SCCs) or other approved mechanisms.

Changes to This Privacy Policy

We may update this Privacy Policy from time to time. Changes will be posted on this page, with the “Last Updated” date revised.
Where legally required, we will notify you of significant changes.

Contact

If you have questions about this Privacy Policy or wish to exercise your rights, contact us:

📧 Email: contact@nuvastep.com
📍 Address: 7901 4th St N, STE 300, St. Petersburg, FL, 33702, US

We are the data controller of your personal data for purposes of applicable privacy laws.