Nova Room shop

Shop privacy notice

Last updated: 20 October 2026 (draft)

Who looks after my data?

Studio Next Ltd is the controller of the personal data described here. That means we decide how and why it’s used, and we’re responsible for it.

• Company number: 12945543
• VAT number: GB424859177
• Address: 8 Elstree Gardens, Belvedere DA17 5DN, United Kingdom
• Email: hello@getnovababy.com

This notice covers the Nova Room shop at shop.getnovababy.com: orders and the “Reserve yours” form. Once you set up your Nova Room, its presses and room readings go to the Nova Baby app. How the app handles them is in the Nova Baby app privacy notice.

What do you collect when I order?

When you pay, you’re on Stripe’s secure checkout page. Stripe collects:

• your name, email address and phone number
• your delivery address
• your payment details

Stripe then sends us your name, email address, phone number, delivery address and the order and payment reference. We never see your card number. We store these details in our database, hosted by Supabase.

What do you use my order details for?

Only these things:

• Sending you your Nova Room: packing it, addressing it and giving the delivery company what it needs to deliver it. Legal basis: our contract with you.
• Emailing you about your order: your order, its dispatch and tracking, and any refund. Legal basis: our contract with you.
• Handling cancellations, returns, refunds and faults. Legal basis: our contract with you.
• Keeping accounting records, as UK law requires. Legal basis: legal obligation.

What does the “Reserve yours” form collect?

When checkout isn’t open, or the batch has sold out, the shop shows a “Reserve yours” form instead. If you fill it in, we store:

• your email address
• your first name
• your postcode
• your consent to be emailed

We use these details for one thing: emailing you when Nova Room checkout opens. Legal basis: your consent. Filling in the form isn’t an order, and you don’t pay anything.

You can withdraw your consent at any time by emailing hello@getnovababy.com. We then delete your details.

Do you use cookies or tracking?

No. The shop at shop.getnovababy.com sets no cookies and runs no analytics or advertising pixels.

Two things to know:

• Stripe’s checkout page is run by Stripe, not us. Stripe uses its own cookies there to keep payments secure and prevent fraud, as its privacy policy explains.
• Basic technical data. Like any website, the services that deliver this shop and its database receive standard technical data, such as your IP address and browser type, when your browser loads a page or checks how many units are left. They use it to deliver the page and keep the service secure. We don’t use it to identify or track you. Legal basis: our legitimate interest in running a secure website.

Who else sees my data?

We share your data only with the companies that help us run the shop, and only what each one needs:

• Stripe (Stripe, Inc. and Stripe Payments Europe) processes your payment for us. Stripe may run automated fraud checks that can decline a payment. Stripe also uses some data for its own purposes, such as preventing fraud and meeting its legal duties, under its own privacy policy.
• Supabase hosts our database, where order and reserve details are stored.
• Our delivery company, [carrier], gets your name and delivery address, and may get your email address or phone number to send delivery updates.
• Our email provider, [email service], sends our order emails.
• Our website host, Cloudflare, delivers the shop’s pages.
• Apple or Google, if you pay with Apple Pay or Google Pay, under their own terms.
• Our accountant and HMRC, when the law requires.

We don’t sell your data, and we don’t share it with advertisers.

Does my data leave the UK?

Our database is hosted by Supabase. Stripe operates worldwide and may process your data outside the UK, including in the United States. When data goes outside the UK, it’s protected by the safeguards UK law requires, such as UK adequacy regulations or the UK International Data Transfer Agreement. Email us if you’d like details.

How long do you keep it?

• Order details: 6 years, the period UK rules generally require for accounting records. Then we delete them.
• “Reserve yours” details: until checkout opens, and 12 months at most. If you ask us to delete them sooner, we do.

What are my rights?

Under UK data protection law (the UK GDPR), you have the right to:

• get a copy of the data we hold about you (access)
• have it corrected if it’s wrong (rectification)
• have it deleted (erasure)
• ask us to limit how we use it (restriction)
• object to how we use it (objection)
• get it in a format you can take elsewhere (portability)
• withdraw your consent at any time, where we rely on consent

Some rights have limits. For example, we can’t delete order records the law says we must keep. To use any of your rights, email hello@getnovababy.com. We reply within one month.

If you’re unhappy with how we’ve handled your data, please tell us first so we can put it right. You also have the right to complain to the Information Commissioner’s Office (ICO) at ico.org.uk.

Will this notice change?

If we change how we handle your data, we update this page and the date at the top.

How do I contact you?

Questions about your data? Email hello@getnovababy.com. A person answers.