Effective Date: 16. August 2026

 

At Nicturnal, I value your privacy and am committed to protecting your personal data. This Privacy Policy explains how I collect, use, store and protect your information when you visit or purchase from my website, www.nicturnal.co.uk.

 

Nicturnal currently ships orders within the United Kingdom only.

 

⸻

 

1. Information I Collect

 

I may collect and process the following types of personal data:

 

Personal Information – Name, email address, billing and shipping address, phone number (if provided).

 

Payment Details – Payments are securely processed by third-party payment providers. I do not store your full credit or debit card details.

 

Order Information – Purchase history, order details, transaction records and information necessary to process and fulfil your order.

 

Communication Data – Information you provide when you contact me by email, through contact forms, social media or other communication channels.

 

Website Usage Data – Technical information about visits to and use of my website, which may include IP address, browser and device information, pages visited and similar technical information.

 

⸻

 

2. How I Use Your Information

 

I use your personal data to:

 

• Process, fulfil and deliver orders.

• Provide customer support and respond to enquiries.

• Process payments and prevent or investigate fraudulent transactions.

• Operate, maintain and secure my website and online shop.

• Improve my website, products and customer experience.

• Maintain appropriate business and transaction records.

• Comply with legal and regulatory obligations, including tax and accounting requirements.

 

Where required, I will only use non-essential cookies and similar tracking technologies with your consent.

 

Lawful Bases for Processing

 

Depending on the circumstances, I process your personal data under the following lawful bases provided by UK data protection law:

 

Contract – Where processing is necessary to fulfil an order or take steps at your request before entering into a contract, such as processing your order, arranging delivery and providing customer support relating to your purchase.

 

Legal Obligation – Where processing is necessary for me to comply with legal obligations, such as tax, accounting, financial and other legal record-keeping requirements.

 

Legitimate Interests – Where processing is necessary for my legitimate business interests, such as maintaining website security, preventing fraud, protecting my business and customers, responding to general business enquiries and improving my website and services, provided that these interests do not override your rights and interests.

 

Consent – Where consent is required, such as for certain non-essential cookies and similar tracking technologies. You can withdraw consent at any time.

 

⸻

 

3. Website Builder & Hosting

 

My website, www.nicturnal.co.uk, is built and operated using Wix. Wix provides the website platform, hosting and services required to operate my website and online shop. Wix may process personal data on my behalf, including information required to operate, maintain and secure the website and online shop.

 

My domain name and business email are provided by separate third-party service providers. These providers may process personal data as necessary to provide and maintain their services.

 

⸻

 

4. Dropshipping & Third-Party Fulfilment (Prodigi)

 

For my astrophotography prints, I use Prodigi as a third-party printing and fulfilment service.

 

When you place an order for a print, necessary personal details, such as your name, shipping address and relevant order information, are securely shared with Prodigi so that your order can be printed, packaged and delivered directly to you.

 

Prodigi acts as a third-party service provider for fulfilment and is required to process personal data in accordance with applicable data-protection requirements.

 

For more information, you can review Prodigi’s Privacy & Cookie Policy.

 

⸻

 

5. International Data Transfers

 

Although Nicturnal currently ships orders within the United Kingdom only, some of the service providers I use may process personal data outside the UK.

 

For example, Wix and Prodigi may use international infrastructure, service providers or fulfilment partners in connection with their services.

 

Where personal data is transferred outside the UK, I use service providers that are required to comply with applicable data-protection requirements and take reasonable and proportionate steps to ensure that appropriate safeguards or other lawful transfer mechanisms are in place where required.

 

⸻

 

6. Sharing Your Information

 

I do not sell or rent your personal data.

 

I may share necessary personal data with trusted third-party service providers where this is required to operate my business, provide services to you or comply with legal obligations. These may include:

 

Website & Hosting Providers – Wix and relevant technical service providers supporting my website and online shop.

 

Payment Providers – Third-party payment processors used to securely process payments.

 

Fulfilment & Shipping Providers – Prodigi and relevant delivery or postal services required to fulfil and deliver orders.

 

Domain & Email Providers – Providers used to operate my domain and business email services.

 

Legal or Regulatory Authorities – Where disclosure is required by law or is necessary to comply with legal obligations, prevent fraud or protect legal rights.

 

I only share information that is reasonably necessary for the relevant purpose.

 

⸻

 

7. Cookies & Tracking Technologies

 

My website uses cookies and similar technologies to ensure the website functions properly, maintain security, remember preferences and support website functionality.

 

Essential cookies and similar technologies are necessary for the website to function and cannot be disabled through the cookie consent banner.

 

Where applicable, non-essential cookies and similar technologies are only used with your consent.

 

You can manage your cookie preferences through the cookie consent banner. After making your initial choice, you can access and change your preferences again through the cookie settings available on this website using the blue fingerprint icon.

 

You can withdraw or change your consent at any time.

 

The cookie settings provide further information about the cookies and similar technologies used on the website, including their purposes and, where applicable, the third parties involved.

 

You can also manage or delete cookies through your web browser settings. However, disabling certain cookies through your browser may affect website functionality.

 

⸻

 

8. Your Rights

 

Under applicable UK data-protection law, you may have the right to:

 

• Access – Request a copy of the personal data I hold about you.

• Correction – Ask me to correct inaccurate or incomplete personal data.

• Deletion – Request deletion of your personal data where there is no legal or legitimate reason for me to continue processing it.

• Restriction – Ask me to restrict the processing of your personal data in certain circumstances.

• Objection – Object to certain types of processing, including processing based on legitimate interests in applicable circumstances.

• Data Portability – Request certain personal data in a structured, commonly used and machine-readable format where this right applies.

• Withdraw Consent – Where processing is based on consent, you may withdraw your consent at any time. Withdrawal of consent does not affect the lawfulness of processing carried out before consent was withdrawn.

 

Some of these rights are subject to legal conditions and exemptions. For example, I may need to retain certain information where I have a legal obligation to do so.

 

To exercise your rights or ask any questions about how your personal data is handled, please contact me at:

 

contact@nicturnal.co.uk

 

You also have the right to make a complaint to the Information Commissioner’s Office (ICO) if you believe that your personal data has not been handled in accordance with applicable data-protection law.

 

⸻

 

9. Data Security & Retention

 

I take reasonable measures to protect your personal data against unauthorised access, loss, misuse or disclosure.

 

I use appropriate security measures, including secure website connections, access controls and trusted payment and service providers.

 

I retain personal data only for as long as necessary for the purposes for which it was collected, including fulfilling orders, providing customer support, maintaining business records and meeting tax and legal obligations.

 

Records relating to purchases and other business transactions are generally retained for at least the period required by HMRC for self-employed business records.

 

Personal data that is no longer required for these purposes is securely deleted or anonymised where appropriate.

 

Consent records relating to cookies and similar technologies are retained in accordance with the retention periods and requirements of the relevant consent-management service.

 

⸻

 

10. Third-Party Links

 

My website may contain links to external websites or services, such as social media platforms, payment providers or other third-party websites.

 

I am not responsible for the privacy practices, security or content of external websites. I recommend reviewing the privacy policies of any third-party websites you visit.

 

⸻

 

11. Updates to This Policy

 

I may update this Privacy Policy from time to time to reflect changes to my business, website, services or applicable legal requirements.

 

Any changes will be posted on this page with an updated effective date.

 

⸻

 

12. Contact

 

If you have any questions about this Privacy Policy, how your personal data is handled, or wish to exercise any of your data-protection rights, please contact:

 

Nicturnal

Email: contact@nicturnal.co.uk