Privacy policy

Last updated: September 5, 2026

NAVOA Privacy Policy

NAVOA operates this store and website, including all related information, content, features, tools, products and services, in order to provide you, the customer, with a curated shopping experience (the “Services”). NAVOA is powered by Shopify, which enables us to provide the Services to you.

This Privacy Policy describes how we collect, use, and disclose your personal information when you visit, use, or make a purchase or other transaction using the Services or otherwise communicate with us. If there is a conflict between our Terms and Conditions and this Privacy Policy, this Privacy Policy controls with respect to the collection, processing, and disclosure of your personal information.

Please read this Privacy Policy carefully. By using and accessing any of the Services, you acknowledge that you have read this Privacy Policy and understand the collection, use, and disclosure of your information as described in this Privacy Policy.

Personal Information We Collect or Process

When we use the term “personal information,” we mean information that identifies or can reasonably be linked to you or another person. Personal information does not include information that is collected anonymously or has been de-identified so that it cannot reasonably be linked to you.

Depending on how you interact with the Services, where you live, and as permitted or required by applicable law, we may collect or process the following categories of personal information:

  • Contact details, including your name, billing address, shipping address, phone number, and email address.

  • Financial and payment information, including payment method, transaction details, payment confirmation, and other information required to process payments. Payment-card information may be processed directly by Shopify or our payment providers rather than stored by NAVOA.

  • Account information, where customer accounts are available, including your account credentials, preferences, and settings.

  • Transaction information, including products you view, add to your cart, purchase, return, exchange, or cancel, and information about your past transactions.

  • Communications with us, including information you provide when contacting customer support or otherwise communicating with NAVOA.

  • Device information, including information about your device, browser, network connection, IP address, and similar identifiers.

  • Usage information, including information about how and when you interact with or navigate the Services.

Personal Information Sources

We may collect personal information from the following sources:

  • Directly from you, including when you place an order, create an account where available, use the Services, contact us, or otherwise provide information to us.

  • Automatically through the Services, including from your device when you visit or use our website, and through cookies and similar technologies.

  • From service providers, including Shopify, payment providers, fulfillment providers, shipping carriers, analytics providers, customer-support providers, and other vendors that process information on our behalf.

  • From partners or other third parties, where permitted by applicable law and relevant to the operation, security, marketing, or improvement of the Services.

How We Use Your Personal Information

Depending on how you interact with us or which Services you use, we may use personal information for the following purposes:

  • Provide and operate the Services. We use personal information to process payments, fulfill orders, arrange shipping, provide order updates, facilitate returns and refunds, manage customer accounts where available, remember preferences, provide customer support, and otherwise perform our obligations to you.

  • Improve the Services. We may use personal information to understand how customers use our store, improve site functionality, improve the shopping experience, diagnose technical issues, and improve our products and services.

  • Marketing and Advertising. Where enabled and permitted by applicable law, we may use personal information for marketing and promotional purposes, including sending marketing communications and measuring or personalising advertising. Where consent is required, we will carry out such processing only after obtaining the required consent. You may withdraw your consent or change your marketing preferences using the controls made available to you.

  • Security and Fraud Prevention. We use personal information to provide a secure shopping experience, authenticate accounts where applicable, detect and investigate suspected fraudulent, unlawful, unsafe, or malicious activity, protect the Services, and prevent abuse.

  • Communicating with You. We use personal information to respond to enquiries, provide customer support, communicate about orders, and maintain our relationship with you.

  • Legal Reasons. We may use personal information to comply with applicable law, respond to valid legal processes or government requests, establish or defend legal claims, enforce our policies, and investigate potential violations of our Terms and Conditions.

Legal Bases for Processing

If you are located in the European Economic Area or the United Kingdom, we process your personal information only where we have a valid legal basis under applicable data-protection law.

Depending on the purpose and circumstances, we may rely on the following legal bases:

  • Performance of a contract: where processing is necessary to process your order, take payment, arrange delivery, provide customer support, handle returns or refunds, or otherwise perform our obligations to you.

  • Legal obligations: where processing is necessary to comply with applicable tax, accounting, consumer-protection, fraud-prevention, regulatory, or other legal requirements.

  • Legitimate interests: where processing is necessary for our legitimate interests, such as securing our store, preventing fraud, maintaining and improving the Services, responding to customer enquiries, and operating our business, provided that those interests are not overridden by your rights and interests.

  • Consent: where applicable law requires your consent, including for certain cookies, marketing communications, personalised advertising, or similar technologies. Where processing is based on consent, you may withdraw your consent at any time without affecting the lawfulness of processing carried out before withdrawal.

How We Disclose Personal Information

In certain circumstances, we may disclose personal information to third parties for legitimate purposes and subject to applicable law. This may include:

  • Shopify and service providers that perform services on our behalf or help us operate the store, such as payment processing, IT services, analytics, customer support, cloud services, fulfillment, and shipping.

  • Marketing and advertising partners, where such services are enabled and permitted by applicable law. Depending on your location, consent or opt-out rights may apply to targeted or personalised advertising.

  • Third parties at your direction or with your consent, for example where disclosure is necessary to deliver products or where you choose to use a third-party integration.

  • Professional advisers or authorities, where necessary to comply with legal obligations, respond to lawful requests, establish or defend legal claims, protect our rights, or protect the rights and safety of customers or others.

  • Parties involved in a business transaction, such as a merger, acquisition, restructuring, financing, or transfer of assets, subject to applicable legal requirements.

Relationship with Shopify

The Services are hosted by Shopify, which collects and processes personal information about your access to and use of the Services in order to provide and improve the Shopify services used by NAVOA.

Information you submit through the Services may be transmitted to and processed by Shopify and other service providers, including in countries other than the country where you reside.

Shopify may also process certain information for its own purposes in accordance with its privacy practices. To learn more about how Shopify processes personal information and the rights available to you, please review the Shopify Consumer Privacy Policy:

https://www.shopify.com/legal/privacy/app-users

Depending on your location, you may also be able to exercise certain privacy rights through Shopify’s Privacy Portal:

https://privacy.shopify.com/en

Cookies and Similar Technologies

Our Services may use cookies, pixels, local storage, and similar technologies to operate the website, remember preferences, understand site usage, improve performance, prevent fraud, and, where enabled, support analytics or advertising.

Where required by applicable law, non-essential cookies or similar technologies will be used only after the required consent has been obtained.

Where available, you can manage your cookie and privacy preferences using the controls provided through the store.

Third-Party Websites and Links

The Services may provide links to websites or other online platforms operated by third parties.

If you follow a link to a website or service not controlled by NAVOA, that third party’s privacy and security practices will apply. We encourage you to review the relevant privacy policies before providing personal information.

NAVOA is not responsible for the privacy, security, accuracy, or content of independent third-party websites, except to the extent responsibility cannot legally be excluded.

Children’s Data

The Services are not intended for children, and we do not knowingly collect personal information from children below the age at which they can lawfully provide the relevant consent or enter into the relevant transaction in their jurisdiction.

If you are a parent or guardian and believe that a child has provided personal information to us unlawfully, please contact us so that we can review the situation and take appropriate action.

Security and Retention of Your Information

We use reasonable organisational and technical measures intended to protect personal information.

However, no security system or method of transmission over the internet can be guaranteed to be completely secure. We recommend that you do not send sensitive or confidential information through insecure communication channels.

We retain personal information only for as long as reasonably necessary for the purposes described in this Privacy Policy, including to:

  • provide the Services;

  • maintain transaction and order records;

  • comply with legal, tax, accounting, or regulatory requirements;

  • resolve disputes;

  • prevent fraud and abuse; and

  • establish, exercise, or defend legal claims.

Retention periods may vary depending on the type of information, the purpose of processing, and applicable legal requirements.

Your Rights and Choices

Depending on where you live, you may have some or all of the following rights in relation to your personal information. These rights may be subject to legal conditions, limitations, and exceptions.

  • Right of Access. You may have the right to request information about the personal information we process about you and to obtain a copy of that information.

  • Right to Correction. You may have the right to request correction of inaccurate or incomplete personal information.

  • Right to Deletion. You may have the right to request deletion of personal information in certain circumstances.

  • Right to Portability. You may have the right to receive certain personal information in a structured, commonly used, machine-readable format and, where applicable, transmit it to another controller.

  • Right to Object. You may have the right to object to certain processing based on legitimate interests or to processing for direct marketing.

  • Right to Restriction. You may have the right to request restriction of processing in certain circumstances.

  • Withdrawal of Consent. Where we rely on consent, you may withdraw that consent at any time. Withdrawal does not affect the lawfulness of processing carried out before consent was withdrawn.

  • Managing Marketing Preferences. You may unsubscribe from marketing emails at any time using the unsubscribe option included in the message. We may still send non-promotional communications relating to your orders, account, customer support, or legal obligations.

To exercise applicable rights, please contact us using the details described in the Contact section below.

We may need to verify your identity before responding to a request, where permitted or required by law. We will respond within the period required by applicable law.

You will not be discriminated against for exercising your privacy rights.

Complaints

If you have concerns about how NAVOA processes your personal information, please contact us first so that we can try to resolve the issue.

If you are located in the European Economic Area, you also have the right to lodge a complaint with the competent data-protection supervisory authority.

In Bulgaria, the supervisory authority is the Commission for Personal Data Protection (CPDP).

You may also contact the competent supervisory authority in the EEA country where you live or work, or where you believe an infringement of data-protection law has occurred.

A list of EEA data-protection authorities is available through the European Data Protection Board:

https://edpb.europa.eu/about-edpb/about-edpb/members

International Transfers

We, Shopify, and our service providers may transfer, store, or process personal information outside the country where you live.

Where personal information is transferred outside the European Economic Area or the United Kingdom and applicable law requires safeguards, we will rely on an authorised transfer mechanism, such as:

  • an adequacy decision;

  • the European Commission’s Standard Contractual Clauses;

  • an applicable UK transfer mechanism; or

  • another legally recognised safeguard.

Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes to our practices, Services, legal obligations, or regulatory requirements.

When we make changes, we will publish the updated Privacy Policy on this website and update the “Last updated” date.

Where required by applicable law, we will provide additional notice of material changes.

Contact

If you have questions about our privacy practices or this Privacy Policy, or if you would like to exercise any of your data-protection rights, please contact NAVOA using the email address or postal contact details provided in the Contact Information section of our store.

For the purposes of applicable data-protection law, the person operating the NAVOA store is the controller of the personal information described in this Privacy Policy.

If you are located in the European Economic Area, you also have the right to lodge a complaint with the competent data-protection supervisory authority. In Bulgaria, the supervisory authority is the Commission for Personal Data Protection (CPDP). You may also contact the supervisory authority in the EEA country where you live or work, or where you believe an infringement has occurred.