Privacy Policy

This Privacy Policy explains how Novucart ("we", "us", or "our") collects, uses, and protects your personal information when you use our website and services. By placing an order or creating an account, you agree to the practices described here.

1. Information We Collect

We collect the following types of information:

• Account information: name, email address, and password (stored as a secure hash) when you register.
• Order information: delivery address, items purchased, and payment reference numbers.
• Device & usage data: browser type, IP address, pages visited, and referring URLs — collected automatically for security and analytics.
• Cart data: stored locally in your browser (localStorage) and synced to our servers if you are signed in.

2. How We Use Your Information

We use your information solely to:

• Process and fulfil your orders.
• Send order confirmation, shipping, and support emails.
• Maintain account security and prevent fraud.
• Improve our platform and diagnose technical issues (via Sentry).

We do not sell or rent your personal data to any third party for marketing purposes.

3. Payment Processing

Payments are handled by Paystack (for local currency transactions) and Stripe (for international transactions). We never store your full card number or CVV. We only retain the payment reference number returned by the payment provider. Both providers are PCI-DSS compliant and maintain their own privacy policies.

4. Third-Party Services

We use the following third-party services, each with their own data practices:

• Paystack — payment processing for local currency orders.
• Stripe — payment processing for international orders.
• Resend — transactional email delivery (order confirmations, password resets).
• Sentry — error monitoring to help us detect and fix technical issues. Error reports may include anonymised request data.
• Cloudinary — product image hosting.

5. Cookies & Local Storage

We use a secure, HTTP-only session cookie to keep you signed in. Your shopping cart is stored in your browser's localStorage and is not accessible to third parties. We do not use advertising cookies or third-party tracking pixels.

6. Data Retention

We retain your account information and order history for as long as your account is active or as required by applicable law. You may request deletion of your account and associated data at any time by contacting us at hello@novucart.com.

7. Your Rights

You have the right to:

• Access the personal data we hold about you.
• Request correction of inaccurate data.
• Request deletion of your account and personal data.
• Withdraw consent for marketing communications at any time.

To exercise any of these rights, email us at hello@novucart.com.

8. Security

We use industry-standard measures including HTTPS encryption, HTTP-only cookies, CSRF protection, and rate limiting to protect your data. Passwords are hashed using a secure one-way algorithm and are never stored in plain text.

9. Changes to This Policy

We may update this Privacy Policy from time to time. When we do, we will update the "last updated" date at the top of this page. Continued use of our services after changes are posted constitutes acceptance of the updated policy.

10. Contact

If you have any questions about this Privacy Policy, please contact us at hello@novucart.com or visit our Contact page.