Effective Date: 21/06/2025
1. Introduction
GadgetNova (“we”, “us”, “our”) is committed to protecting your privacy and complying fully with the General Data Protection Regulation (GDPR) and UK Data Protection Act 2018. This policy explains clearly how we handle your personal information.
2. Data Controller
GadgetNova (trading under GG Digital Innovators Limited, registered in England and Wales, Company Number: 15945318, Registered Address: 82, Unit A James Carter Road, Bury St. Edmunds, Suffolk, United Kingdom, IP28 7DE) acts as the data controller responsible for your personal information.
3. Why We Collect Data
We collect the minimum data required to:
Process and fulfil orders & payments
Provide effective customer support
Personalise user experience and improve our site/services
Comply with legal obligations (e.g., tax reporting, regulatory requirements)
4. What Data We Collect
We collect the following categories of personal data:
User-provided data: Name, email, billing/shipping address, phone number (if provided), and customer reviews.
Technical/system data: IP address, device and browser information, site usage data (“cookie data”).
Transactional data: Details of items purchased, order totals, payment method, shipping preferences, and history of orders.
We never intentionally collect sensitive personal data (e.g. racial or ethnic origin, religious beliefs, health data), unless explicitly and voluntarily provided by you.
5. How We Use Your Data
| Purpose | Data Used | Legal Basis |
|---|---|---|
| Process and fulfil your orders | Billing, shipping, payment, order data | Contractual necessity |
| Provide customer support | Contact information, order history | Legitimate interests |
| Personalise site experience & marketing | Cookies and browsing data | Consent |
| Order updates, newsletters, reminders | Email address, name | Consent |
| Improve and analyse services | System data, transactional data | Legitimate interests |
| Compliance with legal requirements | Order data, billing information | Legal obligation |
We also process data for fraud prevention, dispute resolution, and legal defence based on legitimate interests.
6. Cookies & Tracking Technologies
Necessary cookies (e.g., login, shopping cart) do not require consent and are always active.
Optional cookies (analytics, marketing) are used only with your explicit consent via our cookie banner.
You can withdraw cookie consent or disable cookies through your browser settings at any time.
7. Data Sharing & Storage
We do not sell your personal data.
We share data strictly with trusted third parties required for operational purposes, including:
Payment gateways (e.g., Stripe, PayPal)
Shipping carriers for order fulfilment
Marketing platforms (with explicit consent)
Regulatory authorities when legally obliged
Your data is securely stored on our hosting provider servers located in the UK/EU. We retain your data only as long as necessary (see section 9).
8. International Data Transfers
We ensure adequate safeguards for international data transfers (e.g., payment processing or fulfilment outside the UK/EU), including using Standard Contractual Clauses (SCCs) or other legal mechanisms approved by UK/EU law.
9. Data Retention Policy
Retention periods are clearly defined:
Completed orders: 7 years (required by HMRC tax obligations)
Cancelled, refunded or unsuccessful orders: 2 years
Marketing and cookie consent records: 3 years from last active consent
Inactive user accounts: deleted after 2 years of inactivity
You can request deletion, correction, or export of your data at any time (see Section 10).
10. Your Rights (under UK GDPR and EU GDPR)
You have the following rights regarding your data:
Access: Request copies of your data.
Correction: Update inaccurate or incomplete data.
Deletion (Right to Erasure): Request deletion of unnecessary data.
Restriction: Limit how we use your data.
Portability: Receive your data in a structured, commonly used format.
Objection: Opt-out of direct marketing and object to certain processing activities.
Withdraw Consent: Withdraw previously given consent at any time.
To exercise these rights, please contact us at: support@gadgetnova.co.uk
We respond to requests within 30 days.
You also have the right to lodge a complaint with the Information Commissioner’s Office (ICO): https://ico.org.uk/.
11. Data Security & Breach Notification
We protect your data using industry-standard security measures (SSL encryption, firewalls, regular backups).
In the event of a personal data breach, we will promptly inform affected individuals and report the breach to ICO within 72 hours, as required by law.
12. Minors
We do not intentionally collect personal data from anyone under 16. If we become aware of such collection, we delete the data promptly.
13. Third-Party Links
Our website may contain links to external sites. We are not responsible for their privacy practices, and we recommend reviewing their individual privacy policies.
14. Changes to this Policy
This policy may be updated periodically. Changes will be clearly communicated by updating this page and the Effective Date above. Please review this policy regularly to stay informed.
This website uses cookies.