Privacy Policy

Privacy Policy

 

Last Updated: 22 July 2025

1. Introduction Welcome to Inova Story. We are committed to protecting and respecting your privacy in compliance with the UK General Data Protection Regulation (UK GDPR). This policy explains what personal data we collect from you, how we use it, the conditions under which we may disclose it to others, and how we keep it secure.

By using our website, [www.inovastory.co.uk], you are agreeing to be bound by this policy.

2. Who We Are For the purpose of the UK GDPR, the data controller is Inova Story. Contact Email: Contact@inovastore.store.

3. The Data We Collect About You We may collect, use, store, and transfer different kinds of personal data about you, including:

  • Identity Data: Includes first name, last name, and username.

  • Contact Data: Includes billing address, delivery address, email address, and telephone numbers.

  • Financial Data: Includes payment card details. We do not store this data; it is processed securely by our third-party payment providers (e.g., Stripe, PayPal).

  • Transaction Data: Includes details about payments and the products you have purchased from us.

  • Technical Data: Includes internet protocol (IP) address, browser type and version, time zone setting, and location.

  • Marketing and Communications Data: Includes your preferences in receiving marketing from us.

4. How We Use Your Personal Data We will only use your personal data when the law allows us to. Most commonly, we use your data for purposes such as processing your order (performance of a contract), sending marketing communications (where you have given consent or where it is of legitimate interest), and complying with legal obligations.

5. Disclosures of Your Personal Data We may share your data with trusted third parties to perform our services, including:

  • Service Providers: such as payment gateways, delivery and courier services (e.g., Royal Mail, DPD), and marketing platforms.

  • Professional Advisers: including lawyers, bankers, and auditors.

  • UK Authorities: such as HM Revenue & Customs, regulators, and other authorities who require reporting of processing activities in certain circumstances.

     

We require all third parties to respect the security of your personal data and to treat it in accordance with the law.

 

6. Data Security & Retention We have implemented appropriate security measures to prevent your personal data from being accidentally lost, used, or accessed in an unauthorised way.

We will only retain your personal data for as long as necessary to fulfil the purposes we collected it for, including for the purposes of satisfying any legal, accounting, or reporting requirements. By law, we are required to keep basic information about our customers (including Contact, Identity, Financial and Transaction Data) for six years after they cease being customers for tax purposes.

7. Your Legal Rights under UK GDPR Under data protection law, you have rights including:

  • Right of access: to ask for copies of your personal information.

  • Right to rectification: to ask us to rectify inaccurate information.

  • Right to erasure: to ask us to erase your personal information.

  • Right to restriction of processing: to ask us to restrict the processing of your information.

  • Right to object to processing: to object to the processing of your information.

  • Right to data portability: to ask that we transfer the information you gave us to another organisation.

You are not required to pay any charge for exercising your rights. If you make a request, we have one month to respond to you. Please contact us at Contact@inovastore.store if you wish to make a request.

8. How to Complain If you have any concerns about our use of your personal information, please contact us first at Contact@inovastore.store so we can resolve your issue.

You also have the right to lodge a complaint with the Information Commissioner's Office (ICO), the UK's supervisory authority for data protection issues.