### 1. Scope and contact
Nuvaret (“Nuvaret,” “we,” “us,” or “our”) operates Nuvaret.com. This policy explains how we handle personal information when you visit our website, contact us, create an account, or place an order. For privacy requests, email support@nuvaret.com with the subject line “Privacy Request.”
### 2. Information we collect
We may collect contact and order information (name, email, telephone number, billing/delivery address, order details, and support messages); payment and fraud-prevention information processed by our payment provider; transaction, fulfilment, tracking, refund/replacement, and support records; and device/website information such as IP address, browser/device details, pages accessed, dates/times, and essential cookie data.
Nuvaret does not store full payment-card numbers.
### 3. Purposes
We use information to operate the store; accept, fulfil, deliver, support, and account for orders; prevent fraud, abuse, and chargebacks; comply with law; protect our rights; and improve store performance. We send marketing communications only where permitted and with any required consent. Marketing consent is not required to make a purchase.
### 4. Disclosure and international processing
We disclose information only as reasonably necessary to providers that operate our ecommerce, payment, hosting, email, security/fraud, print/fulfilment, carrier, professional-advisory, and legal-compliance functions. Providers may process data in Canada, the United States, Mexico, or other locations. We do not sell personal information for money or permit third parties to use it for unrelated marketing.
### 5. Cookies
We use essential cookies and similar technologies for site operation, security, preferences, cart/checkout, and fraud prevention. If we add non-essential analytics or advertising technologies, we will update this policy and provide required notice, consent, or choice before use.
### 6. Retention and security
We retain personal information only as reasonably necessary for stated purposes, including order support, fraud prevention, disputes, tax/accounting, and legal compliance. We may retain it longer where law permits or requires, including for claims and security. We use reasonable administrative, technical, and organizational safeguards, but no internet transmission or system is completely secure.
### 7. Requests and choices
Subject to applicable law and identity verification, you may request access, correction, deletion, or information about our handling of personal information. You may withdraw consent where consent is the legal basis, subject to legal or contractual limits and reasonable notice. We may decline or limit a request where law permits, including where it would affect another person’s rights, enable fraud, or conflict with legal retention duties. Unsubscribe from marketing through the message link or by contacting us.
### 8. Canada and United States; other regions
Canada and the United States are Nuvaret’s intended primary markets. For Canadian commercial activity, Nuvaret follows applicable Canadian privacy obligations, including meaningful consent and reasonable, stated purposes where PIPEDA applies. US residents may have additional rights under applicable federal or state law. Mexico, the EEA/UK, and other markets are not currently active sales markets; if we later offer sales there, we will add any required notices, consent tools, representatives, or processes before doing so. We will respond to verified requests as required by applicable law; a mandatory local law controls over any inconsistent policy language.
### 9. Children and updates
Nuvaret is not directed to children. Do not provide personal information if you are below the age at which you can lawfully consent in your location. We may update this policy for operational, legal, or security reasons. The effective date identifies the current version.