Privacy Policy
We collect only what we need to take your reservation, run your subscription and contact you. We never sell your data. Payments go through Stripe, email through our email provider, delivery through our carrier. You can ask to see, correct or delete your data at any time by emailing hello@drinknovr.com.
1. Who is responsible for your data
The data controller is Lemon Group International Ltd, trading as NOVR, of 43 Sorrel Crescent, Didcot, OX11 6HQ, United Kingdom. For any privacy question or request, contact hello@drinknovr.com.
2. The data we collect
- Account & contact data — your name, email address, and (where you provide it) postal address and phone number.
- Order & subscription data — what you reserved or bought, deposit and subscription status, dates and correspondence.
- Payment data — handled by Stripe. We receive confirmation of payment and limited card metadata (such as the last four digits and card type). We do not store your full card number.
- Profile data you choose to enter — for example answers in our diurnal/quiz tools (such as sex, age band, height, weight, activity). This is used only to tailor what we show you in that tool and is not used to make decisions about you.
- Technical & usage data — IP address, device and browser type, and how you use the site, collected via cookies and similar technologies (see our Cookie Policy).
We do not knowingly collect special-category health data. Any wellness preferences you enter are treated as ordinary personal data and used only to personalise the on-site experience.
3. Why we use your data, and our lawful basis
- To take and manage your reservation, order and subscription — lawful basis: performance of a contract with you.
- To take payment and prevent fraud — lawful basis: contract and our legitimate interest in secure payments.
- To send service messages (order confirmations, shipping updates, schedule changes) — lawful basis: contract.
- To send marketing emails about NOVR — lawful basis: your consent, or our legitimate interest where you are an existing customer. You can unsubscribe at any time via the link in every email.
- To improve the site and understand usage — lawful basis: consent (for non-essential analytics cookies) or legitimate interest.
- To meet legal and accounting obligations — lawful basis: legal obligation.
4. Who we share it with
We never sell your personal data. We share it only with trusted providers who process it on our behalf under contract:
- Stripe — payment processing.
- Our email/marketing provider — to send service and marketing emails and manage the mailing list.
- Our delivery carrier — to ship your product (name and address only).
- Website hosting and analytics providers — to run and measure the site.
- Professional advisers and authorities — where required by law.
5. International transfers
Some providers may process data outside the UK. Where they do, we rely on appropriate safeguards — such as UK adequacy regulations or the International Data Transfer Agreement / Addendum to EU Standard Contractual Clauses — so your data receives equivalent protection.
6. How long we keep it
- Reservation and account data — for as long as you have an account or reservation, then up to 24 months after it closes, unless you ask us to delete it sooner.
- Order and financial records — 6 years, to meet UK tax and accounting law.
- Marketing data — until you unsubscribe or ask us to erase it.
7. How we protect your data
We use encryption in transit (HTTPS), reputable processors, access controls, and we limit access to the people who need it. No system is perfectly secure, but we take reasonable steps to protect your information and will notify you and the ICO of any breach where the law requires.
8. Your rights
Under UK GDPR you have the right to: access your data; correct it; erase it; restrict or object to processing; data portability; and to withdraw consent at any time. You also have the right to opt out of marketing at any time. To exercise any right, email hello@drinknovr.com — we will respond within one month.
9. Cookies
We use essential cookies to run the site and, with your consent, analytics and marketing cookies. You can manage your choices via our cookie banner and your browser. Full detail is in our Cookie Policy.
10. Children
NOVR is intended for adults aged 18 and over. We do not knowingly collect data from children. If you believe a child has given us their data, contact us and we will delete it.
11. Changes to this policy
We may update this policy from time to time. The current version, with its effective date, is always published here. Material changes will be notified by email where appropriate.
12. Contact and complaints
Questions or requests: hello@drinknovr.com. If you are unhappy with how we handle your data, you can complain to the UK Information Commissioner's Office (ICO): ico.org.uk · 0303 123 1113. We would appreciate the chance to put things right first.