At Nuvala, we are committed to protecting your personal information and respecting your privacy. This Privacy Statement explains how we collect, use, store, and safeguard your data when you visit our website or purchase any Nuvala sewing patterns, including Nuvala Essential, Nuvala Africa, and Nuvala Gold.
We comply with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

Information you provide directly

• Name

• Email address

• Billing information (processed securely by our payment provider)

• Order details

• Any information you provide when contacting us

Information collected automatically

• IP address

• Browser type and device information

• Pages visited and time spent on the site

We do not collect or store payment card details. These are handled securely by our payment processor

2. How We Use Your Information

We use your information to:

• Process and deliver your orders

• Provide access to digital downloads

• Communicate with you about your purchase

• Respond to enquiries and support requests

• Improve our website and user experience

• Send optional marketing emails (only with your consent)

• Maintain accurate records for tax and legal compliance

We do not sell or rent your personal information to third parties.

​

3. Legal Basis for Processing

We process your data under the following lawful bases:

• Contract: To fulfil your order and provide digital products

• Consent: For marketing emails or newsletters

• Legitimate interest: To improve our website and protect against fraud

• Legal obligation: For accounting and tax purposes

4. Sharing Your Information

We only share your data with trusted third‑party providers who help us operate our business, such as:

• Payment processors (e.g., Stripe, PayPal)

• Digital delivery platforms (e.g., Payhip)

• Email service providers

• Website hosting services

These providers are required to keep your information secure and use it only for the services they provide to us.

We never sell, trade, or disclose your information for unrelated purposes.

 

5. Data Storage & Security

We take appropriate technical and organisational measures to protect your data, including:

• Encrypted connections (HTTPS)

• Secure servers

• Limited access to personal data

• Regular security reviews

• We retain your information only for as long as necessary to fulfil the purposes outlined in this statement or to meet legal obligations.

6. Your Rights

Under UK GDPR, you have the right to:

• Access the personal data we hold about you

• Request corrections to inaccurate information

• Request deletion of your data (in certain circumstances)

• Withdraw consent for marketing at any time

• Request a copy of your data in a portable format

• Object to certain types of processing

To exercise any of these rights, contact us using the details below.

 

 

7. Children’s Privacy

Our website and products are not intended for children under 16.
We do not knowingly collect personal information from children.

​

8. Updates to This Privacy Statement

We may update this Privacy Statement from time to time.
The latest version will always be available on this page, with the date of the most recent update clearly displayed.