Nuvorelia LLC is deeply committed to protecting your privacy and personal data. While Nuvorelia LLC is based in the United States, we adhere to the core principles of the General Data Protection Regulation (GDPR) to ensure a high standard of data protection for all our customers and website visitors. This statement outlines our approach to data privacy, ensuring transparency and respect for your rights.

1. Our Commitment to Data Protection: Nuvorelia LLC is dedicated to handling your personal data lawfully, fairly, and transparently. We process personal data for specific, legitimate purposes and ensure that data collection is minimized to what is necessary. We maintain the accuracy of your data, limit its storage duration, and protect its integrity and confidentiality through robust security measures.

2. What Information We Collect and Why: We collect and process your personal data only when absolutely necessary for specific, transparent purposes:

  • Order Fulfillment: When you make a purchase from Nuvorelia LLC at https://nuvorelia.com/, we collect information such as your name, billing and shipping addresses, email address, phone number, and details of the products you purchase. This data is essential for processing your order, shipping your grand pianos, and managing any returns or customer service inquiries.
  • Payment Processing: To complete your transactions, we utilize secure third-party payment gateways like Afterpay and Klarna. We do not store your full payment card details on our servers; this sensitive information is handled directly by our certified payment partners.
  • Customer Support: If you contact our customer service (Monday-Friday 9AM-5PM EST) via support@nuvorelia.com or +17186845150, we collect information needed to address your inquiries and provide effective assistance.
  • Website Improvement: We may collect non-identifiable data about your browsing behavior (e.g., IP address, browser type, pages visited) through cookies and analytics to improve our website’s functionality, user experience, and overall service.

3. Lawful Basis for Processing Your Data: We process your personal data based on the following legal grounds:

  • Contractual Necessity: Processing is necessary for the performance of a contract with you (e.g., fulfilling your order, providing customer support related to a purchase).
  • Legitimate Interests: We may process data for our legitimate business interests, such as improving our products and services, preventing fraud, and enhancing website security, provided these interests do not override your fundamental rights and freedoms.
  • Consent: For certain activities, such as sending marketing communications, we will obtain your explicit consent. You have the right to withdraw your consent at any time.
  • Legal Obligation: Processing may be necessary to comply with applicable laws and regulations (e.g., tax requirements).

4. Data Retention: We retain your personal data only for as long as necessary to fulfill the purposes for which it was collected, including for the purposes of satisfying any legal, accounting, or reporting requirements. Typically, order information is retained for several years for warranty, customer service, and tax compliance.

5. Data Security: Nuvorelia LLC implements robust technical and organizational measures to protect your personal data from unauthorized access, alteration, disclosure, or destruction. This includes the use of SSL encryption for our website, secure server environments, and strict access controls to personal data for authorized personnel only. Our WooCommerce platform is regularly updated to ensure security.

6. Data Sharing and Disclosure: We do not sell, rent, or trade your personal data to third parties. We may share your data with trusted third-party service providers who assist us in operating our business and serving you, under strict contractual agreements that ensure data protection:

  • Payment Processors: Afterpay, Klarna.
  • Shipping Carriers: To deliver your orders.
  • IT and Website Service Providers: For hosting, security, and analytics.
  • Legal Authorities: When legally required to do so.

7. Your Data Protection Rights (GDPR Principles): Nuvorelia LLC extends the following data protection rights to all our customers, aligning with GDPR principles:

  • Right to Access: You have the right to request a copy of the personal data we hold about you.
  • Right to Rectification: You can request that we correct any inaccurate or incomplete personal data.
  • Right to Erasure (“Right to be Forgotten”): You can request the deletion of your personal data under certain circumstances (e.g., if the data is no longer necessary for the purpose for which it was collected).
  • Right to Restriction of Processing: You can request that we limit the way we use your data.
  • Right to Object: You have the right to object to the processing of your personal data under certain conditions.
  • Right to Data Portability: You can request to receive your personal data in a structured, commonly used, and machine-readable format.
  • Right to Withdraw Consent: Where processing is based on your consent, you have the right to withdraw that consent at any time.

8. How to Exercise Your Rights: To exercise any of these rights or if you have any questions about this GDPR Compliance Statement, please contact us using the details below:

  • Email: support@nuvorelia.com
  • Phone: +17186845150
  • Postal Address: Nuvorelia LLC, 209 W 40th St, , New York, NY 10018, United States We will respond to your request within a reasonable timeframe and in accordance with applicable data protection laws. We may need to verify your identity before fulfilling your request to ensure the security of your data.

9. Changes to This GDPR Compliance Statement: We may update this GDPR Compliance Statement periodically to reflect changes in our data processing practices, legal requirements, or new technologies. We will post any updates on our website, https://nuvorelia.com/, with a revised effective date. We encourage you to review this statement regularly.