Last updated: February 2026
nuvō8 is committed to protecting and respecting your privacy in accordance with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.
This Privacy Policy explains how we collect, use, store and protect your personal data when you visit our website, book services, or engage with nuvō8.
1. Who We Are
nuvō8
Website: www.nuvo8.com
Email: care@nuvo8.com
Data Controller:
nuvō8 is the data controller responsible for your personal data.
2. Personal Data We Collect
We may collect and process the following categories of personal data:
Identity & Contact Data
-
Name
-
Date of birth
-
Email address
-
Telephone number
-
Postal address
Health & Wellbeing Data (Special Category Data)
-
Health information you provide through intake forms, consultations, or correspondence
-
Lifestyle, nutrition, movement, and wellbeing information
-
Functional or laboratory test results (where applicable)
This information is classed as special category data under UK GDPR and is processed with your explicit consent.
Technical & Usage Data
-
IP address
-
Browser type and version
-
Device information
-
Pages visited and site usage data (via cookies and analytics)
3. How We Collect Your Data
We collect personal data when you:
-
Complete forms on our website
-
Book services or make enquiries
-
Engage in consultations or programmes
-
Communicate with us via email or other digital channels
-
Use our website (via cookies and analytics tools)
4. How We Use Your Data
We use your personal data only where permitted by law, including to:
-
Deliver and manage nuvō8 services
-
Communicate with you about appointments, services, or care
-
Coordinate care within the nuvō8 team
-
Arrange or interpret functional testing where applicable
-
Comply with legal, regulatory, or professional obligations
-
Improve our services and website functionality
Health data is only processed where necessary and with your explicit consent.
5. Payments
Payments made through the nuvō8 website are processed securely via Shopify Payments or other authorised payment providers.
We collect limited payment-related information such as:
-
Name
-
Billing address
-
Transaction details
nuvō8 does not store full payment card details. Payment data is handled securely by our payment processors in accordance with PCI-DSS standards.
The lawful basis for processing payment data is performance of a contract.
6. Lawful Bases for Processing
We process personal data under the following lawful bases:
-
Consent – for health data and certain communications
-
Contract – where processing is necessary to provide services
-
Legal obligation – to comply with applicable laws
-
Legitimate interests – for limited administrative and operational purposes, where your rights do not override those interests
7. Sharing Your Data
We do not sell your personal data.
We may share your data with:
-
nuvō8 practitioners involved in your care (on a need-to-know basis)
-
Third-party service providers (e.g. secure email, booking systems)
-
Accredited laboratory partners for functional testing analysis
-
Professional advisers (legal, accounting) where required
-
Regulators or authorities where legally required
All third parties are required to handle your data securely and in accordance with UK GDPR.
8. Data Storage & Security
We store personal data securely using appropriate technical and organisational safeguards.
Data is retained only for as long as necessary to:
-
Deliver services
-
Meet professional, legal, or regulatory requirements
When data is no longer required, it is securely deleted or anonymised.
9. Cookies
Our website uses cookies and similar technologies to ensure it functions properly and to understand how visitors use our site.
Types of cookies we use
-
Essential cookies – required for website functionality
-
Analytics cookies – help us understand site usage and improve performance
When you visit our website, you will be asked to manage your cookie preferences. You may also control cookies through your browser settings.
For more information about cookies, visit www.allaboutcookies.org.
10. Your Data Protection Rights
Under UK GDPR, you have the right to:
-
Access your personal data
-
Request correction of inaccurate or incomplete data
-
Request erasure of your data
-
Restrict processing
-
Request data portability
-
Object to processing
-
Withdraw consent at any time (where consent is the lawful basis)
To exercise these rights, please contact care@nuvo8.com.
11. Changes to This Policy
We may update this Privacy Policy from time to time.
The most current version will always be available on our website.
12. Contact Us
If you have any questions about this Privacy Policy or how your data is handled, please contact:
Email: care@nuvo8.com