Privacy Policy
How we collect, use and protect your personal data when you shop with Novum Healthcare.
Last updated: [LAST UPDATED DATE — TO BE CONFIRMED]
1. Who we are
This Privacy Policy explains how Novum Healthcare (we, us or our) collects and uses your personal data when you use novumcare.co.uk (the Site) or place an order with us.
Novum Healthcare is a trading name of Nadoron Biotech Ltd. The data controller is Nadoron Biotech Ltd, a company registered in England and Wales under company number [COMPANY REGISTRATION NUMBER — TO BE CONFIRMED], with its registered office at [REGISTERED OFFICE ADDRESS — TO BE CONFIRMED].
We are registered with the UK Information Commissioner's Office (ICO) under registration number [ICO REGISTRATION NUMBER — TO BE CONFIRMED].
For any privacy question, or to exercise your rights, contact us at [CONTACT EMAIL — TO BE CONFIRMED].
2. The personal data we collect
When you place an order or contact us, we collect:
- Identity and contact data: your name, email address and phone number;
- Delivery data: your shipping address;
- Order data: the products you order, order value, order reference, payment method (Bitcoin or bank transfer) and payment status;
- Bitcoin refund data: where a refund is due, the Bitcoin address you provide to receive it;
- Enquiry data: any information you include when you contact us;
- Technical data: IP address and limited device or browser information, including data processed by our bot-protection provider when you submit forms.
We do not collect or store your card details and never take card payments through the Site. Bitcoin payments are made directly by you to a Bitcoin address we provide, and bank transfers are made directly by you to our account using the reference we provide; in each case we do not receive your wallet or online-banking credentials.
3. How we use your data and our lawful basis
| Purpose | Lawful basis (UK GDPR) |
|---|---|
| To process and fulfil your order, arrange delivery and provide order updates | Performance of a contract |
| To verify Bitcoin payment and process refunds | Performance of a contract |
| To respond to enquiries and provide customer support | Legitimate interests / contract |
| To protect the Site against fraud, bots and abuse | Legitimate interests |
| To keep records required for tax, accounting and legal compliance | Legal obligation |
| To send service emails (order confirmation, payment verification, dispatch) | Performance of a contract |
We do not use your data for marketing without your consent.
4. Who we share your data with
We share data only with service providers (processors) who help us run the Site and fulfil orders, and only as needed:
- Hosting and platform: [Vercel Inc. — TO BE CONFIRMED];
- Database and storage: [Supabase — region TO BE CONFIRMED];
- Transactional email: [Resend];
- Bot protection and security: [Cloudflare (Turnstile)];
- Delivery: our courier or postal carrier [CARRIER — TO BE CONFIRMED], which receives your name and delivery address;
- Professional advisers and authorities: where required by law.
We do not sell your personal data.
5. International transfers
Some of our providers may process data outside the UK. Where they do, we ensure an appropriate safeguard is in place (such as UK adequacy regulations or the International Data Transfer Agreement or Addendum). Details: [TRANSFER SAFEGUARDS / PROVIDER LOCATIONS — TO BE CONFIRMED].
6. How long we keep your data
We keep order and transaction records for six years after the end of the relevant tax year, to meet legal and accounting obligations. Enquiry data is kept for 24 months. After these periods we delete or anonymise your data.
7. Your rights
Under UK data protection law you have the right to: access your data; have inaccurate data corrected; have data erased; restrict or object to processing; data portability; and to withdraw consent where processing relies on consent. To exercise any right, email [CONTACT EMAIL — TO BE CONFIRMED].
You also have the right to complain to the ICO (ico.org.uk; 0303 123 1113), though we would ask you to contact us first so that we can help.
8. Cookies and similar technologies
We use only strictly necessary browser storage to make the Site work, for example, to remember your basket and checkout progress. Our bot-protection provider may set strictly necessary cookies to secure form submissions. We do not use advertising or analytics cookies, and so we do not display a cookie-consent banner.
9. Security
We use appropriate technical and organisational measures to protect your data, including encryption in transit, access controls and the use of reputable processors. No method of transmission over the internet is completely secure.
10. Children
The Site and our products are intended only for customers aged 18 or over. We do not knowingly collect data from anyone under 18.
11. Changes to this policy
We may update this policy from time to time. The “Last updated” date shows the latest version.
12. Contact
Nadoron Biotech Ltd (trading as Novum Healthcare), [TRADING/CONTACT ADDRESS — TO BE CONFIRMED]. Email: [CONTACT EMAIL — TO BE CONFIRMED].