Privacy policy

Who is responsible for your data

NEUROVAI, the operator of neurovai.shop, is the data controller for the personal data described here. Write to support@neurovai.shop about anything on this page and we will answer within one business day.

What we collect

Data	Where it comes from
Name, delivery address, billing address, email address, telephone number if you give one	You, at checkout
Order contents, order number, order history, delivery status	Created when you order
Account username and a hashed password, if you create an account	You
Payment confirmation, the last four digits of the card and the card brand	Our payment provider — we never see or hold the full card number
Emails you send us and our replies	You
IP address, browser and device type, pages requested, timestamps	Web server logs, created automatically

We do not collect special category data. We do not ask for your date of birth, and we do not buy personal data from third parties.

Why we use it, and on what legal basis

• To perform our contract with you — taking and confirming your order, taking payment, arranging delivery, handling returns, refunds and cancellations, answering your emails about an order.
• To comply with a legal obligation — keeping records of sales and tax for the period the law requires, and responding to a lawful request from an authority.
• For our legitimate interests — keeping the site secure, preventing and investigating fraud and card testing, keeping server logs, and defending legal claims. We balance this against your rights and keep the data to a minimum.
• With your consent — only if you actively ask us to email you about new pieces. We do not run a marketing list by default, and you can withdraw consent at any time by replying to any such email or writing to support@neurovai.shop.

Who we share it with

• Our payment provider, which processes the payment and carries out fraud checks. Your card details go to them directly, not through us.
• Our supply partners and their carriers, which receive the name, delivery address, contact details and the contents of the order so the parcel can be picked, shipped and tracked. Some of them are outside the United Kingdom.
• Our hosting and email providers, which store the site and its data on our instructions.
• Authorities, professional advisers or a court, where the law requires it or to establish or defend a legal claim.

We do not sell your personal data, and we do not share it for anyone else’s marketing.

Transfers outside the UK

Because some supply partners and service providers are based outside the United Kingdom, your delivery and order data may be transferred abroad. Where that happens we rely on UK adequacy regulations, or on the International Data Transfer Agreement or the UK Addendum to the EU Standard Contractual Clauses, so that your data keeps an equivalent level of protection.

How long we keep it

• Order and transaction records: six years after the end of the tax year the order falls in, as UK tax law requires.
• Account data: until you ask us to close the account, then deleted within 30 days apart from anything we must keep for tax.
• Customer service emails: two years from the last message in the thread.
• Server logs: 90 days.

Your rights

Under UK GDPR you may ask us to give you a copy of your data, correct it, delete it, restrict how we use it, or send it to another provider in a portable format. You may object to processing we carry out for our legitimate interests, and you may withdraw consent at any time where we rely on it.

Email support@neurovai.shop and we will respond within one month. We do not charge for this. We may ask you to confirm your identity first so that we do not disclose your data to someone else.

If you are not satisfied with our answer you may complain to the Information Commissioner’s Office at ico.org.uk or on 0303 123 1113. We would rather you told us first so we can put it right.

Security

The whole site, including checkout, is served over HTTPS. Passwords are stored hashed, never in plain text. Administrative access is limited to the people who need it. We never store full card numbers, card expiry dates or security codes anywhere on this site — see Payment and security.

Children

This site is not aimed at children and we do not knowingly collect data from anyone under 18. If you believe we hold data about a child, write to support@neurovai.shop and we will delete it.

Cookies

Cookies and similar technologies are covered in our Cookie policy.

Changes

If we change this policy we will publish the new version here and update the date shown in the margin.