Privacy Policy

Last updated: June 2025

This Privacy Policy explains how Softstead (operated by NOVO STORES GROUP LIMITED) collects, uses, and protects your personal data in accordance with UK GDPR and the Data Protection Act 2018.

Who we are

What data we collect

When you place an order or contact us, we collect: your name, email address, phone number, delivery address, order history, payment information (processed securely by Shopify Payments — we do not store card details), and technical data such as IP address and browser type.

If you subscribe to our newsletter, we collect your email address for marketing purposes.

How we use your data

We use your personal data to process and fulfil your orders, send shipping updates and tracking information, respond to your enquiries, send marketing emails if you have opted in, improve our website, and comply with legal obligations.

Legal basis for processing

Contract — to fulfil your order. Legitimate interests — to improve our services and prevent fraud. Consent — for marketing communications. Legal obligation — where required by law.

Who we share your data with

We share data only where necessary: with Shopify Inc. (e-commerce platform and payment processor), shipping and logistics partners (to deliver your order), and email marketing services if you have opted in. We do not sell your personal data.

How long we keep your data

Order and contact data is retained for up to 7 years to comply with UK tax requirements. Marketing data is retained until you unsubscribe.

Your rights

Under UK GDPR you have the right to access, correct, erase, restrict, or port your personal data, and to object to or withdraw consent for processing. To exercise any of these rights, email contact@softstead.co.uk.

Cookies

Our website uses cookies to provide a functional shopping experience and analyse traffic. You can manage cookie preferences through your browser settings.

NOVO STORES GROUP LIMITED — Trading name: Softstead — BR No. 79337387 (HK)