Privacy policy

Last updated: 20 November 2025

NCLSV Ltd (“NCLSV”, “we”, “us”, or “our”) operates this online store and website, including all related information, content, features, tools, products and services, in order to provide you, the customer, with a curated shopping experience (the “Services”). Our store is currently focused on the sale of digital gift cards, and this Privacy Policy applies to your use of the Services in connection with those products and any future products we may offer.

Our store is hosted by Shopify Inc. (“Shopify”), which enables us to provide the Services to you. This Privacy Policy describes how we collect, use, and disclose your personal information when you visit, use, or make a purchase or other transaction using the Services or otherwise communicate with us.

Where there is any conflict between our Terms of Service and this Privacy Policy in relation to the collection, use or disclosure of your personal information, this Privacy Policy will prevail.

By using or accessing the Services, you acknowledge that you have read and understood this Privacy Policy.

⸻

1. Who we are (Data Controller)


For the purposes of applicable data protection laws, including the UK General Data Protection Regulation (“UK GDPR”) and the Data Protection Act 2018, the data controller of your personal information is:

NCLSV Ltd
Registered in Scotland under company number: SC819677
Registered office: Suite 2/3, 48 West George Street, Glasgow, Scotland, G2 1BP, United Kingdom
Email: hello@nclsv.com

⸻

2. Personal information we collect


When we use the term “personal information”, we mean information that identifies or can reasonably be linked to you. It does not include anonymous data or data that has been irreversibly de-identified.

Depending on how you interact with the Services, where you live, and as permitted or required by law, we may collect and process the following categories of personal information:
  • Contact details
    Name, billing address, shipping address, email address, and telephone number.

  • Account information
    Username, password, account preferences and settings, and any information you choose to store in your account.

  • Transaction and order information
    Details about the products you view, add to cart, purchase, or redeem (including digital gift cards); order history; and related records such as purchase dates, values, and redemption information.

  • Payment and financial information
    Payment card type, partial card details, payment confirmation, billing information, and transaction results. Note: We do not store your full card number. Payments are processed securely by our payment providers (e.g. Shopify Payments or other payment gateways).

  • Communications with us
    The content of emails, messages, support requests or other communications you send to us, including your name and contact details.

  • Device and technical information
    IP address, browser type and version, device identifiers, operating system, time zone setting and location, and other technical information about the device you use to access the Services.

  • Usage and interaction information
    Information about how you interact with the Services, including the pages or products you view, referring/exit pages, time spent on pages, search queries, and clickstream data. This may be collected through cookies and similar technologies.

  • Inferences
    Inferences drawn from the above information (e.g. preferences, interests, or trends), where permitted by law.

⸻

3. How we collect personal information


We collect personal information from a variety of sources:
  1. Directly from you
    • When you browse our site
    • When you create or use an account
    • When you purchase or redeem a digital gift card
    • When you subscribe to communications
    • When you contact us (e.g. by email or contact form)
  2. Automatically through the Services
    • Through cookies, pixels, and similar technologies when you visit or interact with our website or emails
    • Through your device and browser when you access the Services
  3. From our service providers and partners
    • For example, Shopify and payment providers who process transactions and help us operate the website, fulfil orders, and provide analytics and marketing tools.
  4. From other third parties
    • Such as fraud prevention providers or advertising partners, where lawful and appropriate.

⸻

4. How and why we use your personal information (including legal bases)


We use your personal information for the purposes set out below. For users in the UK and EEA, we must have a lawful basis under data protection law for each purpose; these are noted in brackets.

4.1 To provide, operate and improve the Services


We use your information to:
  • Process and fulfil your orders (including digital gift card purchases and redemptions)
  • Take payment and provide payment confirmations
  • Deliver order-related communications (e.g. order confirmation, gift card emails, refunds)
  • Create, maintain and manage your customer account
  • Provide customer support and respond to your enquiries
  • Maintain and improve our website, products and Services

Legal bases:
  • Performance of a contract with you
  • Our legitimate interests in operating and improving our business
  • Compliance with legal obligations (e.g. accounting and tax laws)

4.2 Marketing and advertising


We may use your personal information to:
  • Send you marketing emails about NCLSV products, services, offers and news (for example, new gift card designs or future product launches) where permitted by law and in line with your preferences
  • Show you personalised content or offers on our website or in ads served via third parties
You can opt out of marketing at any time by using the unsubscribe link in our emails or by contacting us.

Legal bases:
  • Your consent (for email and some electronic marketing)
  • Our legitimate interests in promoting and growing our business (where consent is not required by law)

4.3 Security, fraud prevention and misuse


We may use personal information to:
  • Help secure our systems and Services
  • Detect, investigate and prevent fraud, abuse, or other potentially illegal or harmful activity (for example, suspicious gift card activity)
  • Protect the rights, property or safety of NCLSV Ltd, our customers, or others

Legal bases:
  • Our legitimate interests in protecting our business and customers
  • Compliance with legal obligations

4.4 Legal and regulatory compliance


We may process your information to:
  • Comply with applicable laws and regulations
  • Respond to lawful requests by public authorities (including law enforcement)
  • Establish, exercise or defend legal claims

Legal bases:
  • Compliance with legal obligations
  • Our legitimate interests in asserting or defending legal claims

4.5 Other purposes with your consent


Where we rely on your consent, we will clearly ask you for it (for example, certain types of marketing or cookies where required). You can withdraw your consent at any time; this will not affect the lawfulness of processing prior to withdrawal.

⸻

5. Cookies and similar technologies


We and our service providers (including Shopify) use cookies, pixels and similar technologies to:
  • Operate and secure the website
  • Remember your preferences (e.g. currency, language, or items in your cart)
  • Analyse traffic and usage patterns
  • Support marketing and advertising (where permitted)

You can manage your cookie preferences using the cookie banner on our site and through your browser settings. Some cookies are necessary for the site to function properly and cannot be switched off.

For more detail on how Shopify uses cookies, you can visit:
https://www.shopify.com/legal/cookies

⸻

6. How we share your personal information


We may share your personal information with:
  • Shopify
    Our store is hosted on Shopify. Shopify provides us with the online e-commerce platform that allows us to sell our products and services to you and may process your personal information for this purpose.
  • Payment providers and banks
    To process payments, issue refunds, and detect or prevent fraud.
  • Service providers
    Such as email service providers, analytics providers, cloud hosting, and customer support tools, who process data on our behalf under contractual obligations to protect your personal information.
  • Business and marketing partners
    To help us show you relevant advertising and improve our marketing, where permitted by law and in line with your preferences.
  • Our professional advisers
    Such as lawyers, accountants or auditors, where necessary for legitimate business purposes.
  • Other third parties where legally required or in connection with a business transaction
    For example, if we are involved in a merger, restructuring, sale of assets, insolvency event, or to comply with legal obligations, court orders, or to protect our rights.

We do not sell your personal information in the traditional sense. Where laws use “sale” or “sharing” in relation to targeted advertising, we will comply with any applicable opt-out rights and explain them in this policy or our cookie tools.

⸻

7. Relationship with Shopify


Because the Services are hosted by Shopify, Shopify collects and processes certain personal information about your access to and use of the Services in order to provide and improve the platform.

Information you submit via our store may therefore be transmitted to and processed by Shopify, which may use sub-processors and service providers in various countries.

Shopify also offers certain enhanced data tools (for example, for fraud prevention and performance analytics) that may involve using information about your interactions with our store and other merchants.

For more information about how Shopify handles your personal information and your rights in relation to data processed by Shopify, please refer to:
  • Shopify’s Privacy Policy: https://www.shopify.com/legal/privacy
  • Shopify’s Privacy Portal (for rights requests where applicable): https://privacy.shopify.com

⸻

8. International transfers


We are based in the United Kingdom, but some of our service providers (including Shopify) are located or process data outside the UK and the European Economic Area (“EEA”), including in Canada and the United States.

Where your personal information is transferred outside the UK or EEA, we will ensure that appropriate safeguards are in place, such as:
  • An adequacy decision by the UK Government or European Commission; or
  • Standard Contractual Clauses or equivalent legal safeguards approved by competent authorities.

You can contact us for more information about these safeguards.

⸻

9. How long we keep your personal information


We retain personal information only for as long as is reasonably necessary for the purposes described in this Privacy Policy, including:
  • To operate the Services and manage your account
  • To fulfil and support your orders (including digital gift card purchases and redemptions)
  • To comply with legal, tax and accounting obligations (for example, we may retain order records for a minimum period required by law)
  • To resolve disputes and enforce our agreements

When we no longer need your personal information, we will either delete it or anonymise it so that it no longer identifies you.

⸻

10. Your rights and choices


Depending on where you live, and subject to applicable law, you may have some or all of the following rights in relation to your personal information:
  • Right of access / to know
    To request confirmation of whether we process your personal information and to receive a copy.
  • Right to rectification
    To request correction of inaccurate or incomplete personal information.
  • Right to erasure
    To request deletion of your personal information in certain circumstances (e.g. where it is no longer needed for the purposes for which it was collected and we have no overriding legitimate grounds to retain it).
  • Right to restrict processing
    To request that we limit how we process your personal information in certain circumstances.
  • Right to data portability
    To receive personal information you provided to us in a structured, commonly used, machine-readable format and to request that we transfer it to another controller where technically feasible.
  • Right to object
    To object to our processing of your personal information where we rely on legitimate interests as our lawful basis, including profiling related to such interests, and to object at any time to processing for direct marketing.
  • Right to withdraw consent
    Where you have given consent (for example, to marketing), you may withdraw it at any time. This will not affect the lawfulness of processing based on consent before its withdrawal.
  • Marketing preferences
    You can opt out of marketing emails at any time by clicking the “unsubscribe” link in our emails or contacting us at hello@nclsv.com.

To exercise any of the above rights, please contact us at hello@nclsv.com.

We may need to verify your identity before fulfilling your request. We will respond within the timescales required by applicable law.

⸻

11. Additional information for UK and EEA users


If you are located in the United Kingdom or the European Economic Area, you have the rights described above under the UK GDPR or EU GDPR (as applicable).

You also have the right to lodge a complaint with your local data protection authority. In the UK, this is the Information Commissioner’s Office (ICO):
• Website: https://ico.org.uk
• Phone: +44 (0)303 123 1113

We would, however, appreciate the chance to deal with your concerns before you approach a supervisory authority, so please contact us first if possible.

⸻

12. Children’s data


Our Services are not intended for use by children under the age of majority in their jurisdiction, and we do not knowingly collect personal information from children.

If you are a parent or guardian and believe that your child has provided us with personal information, please contact us at hello@nclsv.com and we will take appropriate steps to delete such information where required by law.

⸻

13. Security


We use reasonable technical and organisational measures to protect your personal information and to help keep it secure and confidential.

However, no method of transmission over the internet or method of electronic storage is completely secure, and we cannot guarantee absolute security. You are responsible for keeping your account credentials confidential and for any activity that occurs under your account.

⸻

14. Changes to this Privacy Policy


We may update this Privacy Policy from time to time, for example to reflect changes to our practices, the Services, or legal requirements.

When we make material changes, we will update the “Last updated” date at the top of this page and may provide additional notice as required by law (for example, by email or a notice on our website).

Your continued use of the Services after any changes become effective will signify your acceptance of the updated Privacy Policy.

⸻

15. Contact us


If you have any questions about this Privacy Policy, our privacy practices, or wish to exercise your data protection rights, you can contact us at:

NCLSV Ltd
Email: hello@nclsv.com
Postal address: Suite 2/3, 48 West George Street, Glasgow, Scotland, G2 1BP, United Kingdom

For the purposes of applicable data protection laws, NCLSV Ltd is the data controller of your personal information processed in connection with the Services.