Last updated: July 2025
At Nyssa London, we are committed to protecting your personal data and respecting your privacy. This Privacy Policy explains what information we collect, why we collect it, how we use it, and your rights in relation to it.
Please read this policy carefully. By using our website or placing an order with us, you acknowledge that you have read and understood how we handle your personal data.
1. Who We Are
Nyssa London is a trading name of NYSSA LONDON LTD, a private limited company registered in England and Wales.
|
Company Registration Number |
17313524 |
|
Registered Address |
124-128 City Road, London, England, EC1V 2NX |
|
Contact Email |
help@nyssalondon.co.uk |
NYSSA LONDON LTD is the data controller responsible for your personal data collected through our website.
2. What Personal Data We Collect
From customers placing an order, we may collect:
-
Full name
-
Email address
-
Phone number
-
Delivery address
-
Browsing and purchase behaviour on our website (e.g. pages visited, items viewed, order history)
Payment data: We do not store, access, or process your payment card details. All payment transactions are handled securely by Shopify's payment infrastructure. Please refer to Shopify's Privacy Policy for details of how payment data is managed.
From website visitors who do not place an order, we collect only anonymous, aggregated behavioural data via Google Analytics (e.g. pages visited, time on site, general location by region). This data cannot be used to identify you personally.
3. How We Collect Your Data
We collect your personal data through the following means:
-
Directly from you — when you place an order, create an account, or contact us by email
-
Automatically — through cookies and analytics tools as you browse our website
For full details on how we use cookies, please refer to our Cookie Policy.
4. Legal Basis for Processing Your Data
Under the UK General Data Protection Regulation (UK GDPR), we process your personal data on the following legal bases:
|
Legal Basis |
When We Rely on It |
|
Contract Performance |
To process and fulfil your order, arrange delivery, and handle returns |
|
Legal Obligation |
To retain financial and transactional records as required by UK law |
|
Legitimate Interests |
To analyse website performance, improve our service, and prevent fraud |
|
Consent |
Where you have opted in to receive marketing communications from us |
5. How We Use Your Data
We use the personal data we collect for the following purposes:
-
Order processing & fulfilment — to confirm, process, and deliver your order
-
Customer service — to respond to your enquiries and resolve any issues
-
Personalisation of orders — to produce engraved or customised items as specified at checkout
-
Delivery — to provide your details to Royal Mail for the purpose of delivering your order
-
Website improvement — to analyse how visitors use our website via Google Analytics, enabling us to improve performance and user experience
-
Legal compliance — to maintain accurate financial and transactional records in line with UK legal requirements
-
Fraud prevention — to detect and protect against fraudulent or unauthorised activity
6. Sharing Your Data with Third Parties
We do not sell, rent, or share your personal data with third parties for their own marketing purposes.
We work with the following trusted third-party service providers who may process your data on our behalf, strictly in order to operate our business:
|
Third Party |
Purpose |
|
Shopify |
Website hosting, e-commerce platform, and payment processing |
|
Royal Mail |
Order delivery — your name and delivery address are shared to fulfil your order |
|
Google Analytics |
Anonymous website analytics and performance monitoring |
Each of these providers is bound by their own data protection obligations. We only share the minimum data necessary for them to perform their services.
7. International Data Transfers
Some of our third-party service providers, including Shopify and Google Analytics, are based in or may process data in countries outside the United Kingdom, including the United States.
Where your data is transferred outside the UK, we rely on appropriate safeguards to ensure it remains protected to the same standard required under UK GDPR, including the UK-US Data Bridge and Standard Contractual Clauses where applicable.
For more information on the safeguards applied by these providers, please refer to their respective privacy policies:
-
Shopify Privacy Policy: shopify.com/legal/privacy
-
Google Privacy Policy: policies.google.com/privacy
8. Data Retention
We retain your personal data only for as long as is necessary for the purposes it was collected, or as required by law.
|
Data Type |
Retention Period |
|
Order & transaction records |
6 years (in line with HMRC requirements) |
|
Customer account data |
Duration of account, plus 6 years |
|
Customer service correspondence |
3 years |
|
Anonymous analytics data |
Up to 26 months (Google Analytics default) |
Once the applicable retention period has passed, your data is securely deleted or anonymised.
9. Your Rights Under UK GDPR
As a data subject under UK GDPR, you have the following rights in relation to your personal data:
-
Right of Access — You may request a copy of the personal data we hold about you
-
Right to Rectification — You may ask us to correct any inaccurate or incomplete data
-
Right to Erasure — You may request that we delete your personal data, subject to any legal obligations we must fulfil
-
Right to Restriction — You may ask us to restrict how we process your data in certain circumstances
-
Right to Data Portability — You may request that your data be provided in a structured, machine-readable format
-
Right to Object — You may object to us processing your data where we rely on legitimate interests as our legal basis
-
Right to Withdraw Consent — Where we rely on consent to process your data, you may withdraw it at any time
To exercise any of these rights, please contact us at help@nyssalondon.co.uk. We will respond to all valid requests within 30 days.
If you are not satisfied with how we have handled your data or responded to your request, you have the right to lodge a complaint with the Information Commissioner's Office (ICO):
🌐 ico.org.uk 📞 0303 123 1113
10. Cookies
We use cookies on our website to ensure it functions correctly and to collect anonymous analytics data via Google Analytics. We do not use marketing or advertising cookies.
For full information on the cookies we use and how to manage your preferences, please refer to our Cookie Policy.
11. Data Security
We take the security of your personal data seriously. Our website is hosted on Shopify, which employs industry-standard security measures including SSL encryption. We take reasonable technical and organisational measures to protect your data against unauthorised access, loss, or disclosure.
Please note that no method of transmission over the internet is completely secure. While we strive to protect your data, we cannot guarantee absolute security.
12. Automated Decision-Making
We do not use automated decision-making or profiling processes that produce legal or similarly significant effects on you.
13. Children's Privacy
Our website and products are intended for individuals aged 18 and over. We do not knowingly collect personal data from anyone under the age of 18. If you believe a minor has provided us with personal data, please contact us immediately at help@nyssalondon.co.uk and we will take steps to delete the information promptly.
14. Changes to This Privacy Policy
We may update this Privacy Policy from time to time to reflect changes in our practices or applicable law. Any updates will be published on this page with a revised date at the top. We encourage you to review this policy periodically.
Your continued use of our website following any changes constitutes your acceptance of the updated policy.
15. Contact Us
For any privacy-related questions, data requests, or concerns, please contact us:
📧 help@nyssalondon.co.uk 🕐 Monday – Friday, 10:00am – 4:00pm
We aim to respond to all enquiries within 5 business days.
Nyssa London — Made for no one else.