Privacy & Cookie Policy

Last updated: 18/10/2026

1. Introduction

Ninaveli London Limited ("Ninaveli", "we", "us", or "our") respects your privacy and is committed to protecting personal information that we process in connection with our business activities. This Privacy Policy explains what information we collect when you interact with Ninaveli (including our website, social media profiles, advertisements, or offline, such as communication with our employees), how we use it, who we share it with, and the rights you have. It applies to customers, potential customers, business contacts, website visitors, and individuals who interact with Ninaveli.

2. Who We Are

Ninaveli London Limited is the controller responsible for the personal information described in this Privacy Policy.

Company: Ninaveli London Ltd., registered in England and Wales, company number 14131511
Email: [email protected]
Address: 22-23 Arcadia Avenue, London, N3 2JU, United Kingdom
Website: https://ninaveli.com

We also have an office in South Korea, which helps us answer enquiries and support customers.

3. Information We Collect

We may collect and process different types of information depending on how you interact with Ninaveli. This may include:

First name and last name
Personal and business email addresses
Personal and business telephone and WhatsApp numbers
Social media profile(s) and other contact information
Company name, business address, profession, website, the markets you work in, and other business-related information
Product enquiries, orders, purchase information, and purchase history
Communications relating to products and services (including offline orders or communications)
Reports of side effects or product complaints (adverse event reports), which may include health information about a patient

When you use our website, we and our service providers also receive technical information such as your IP address, browser and device type, and the pages you request. This is used to deliver and protect the website, as described in section 5. We also collect any information that you voluntarily provide when interacting with Ninaveli through online or offline channels.

4. How We Collect Information

We may collect information through: our website forms (such as price list requests, contact messages and distributor applications), social media platforms, direct messages, WhatsApp, email, phone calls, business enquiries, customer interactions, offline meetings and exhibitions, marketing and business development activities, orders and purchases, and publicly available online sources.

5. Cookies and Similar Technologies

Cookies are small files that a website stores in your browser. Our website only uses cookies and similar technologies that are needed for it to work and to keep it secure. We do not use analytics cookies or advertising cookies (such as Google Analytics or the Meta Pixel) on our website. If we decide to use them in the future, we will ask for your consent first and update this policy.

Name	Provider	Purpose	Duration
PHPSESSID	Ninaveli	Set only when you send one of our forms, so that we can show you the confirmation message or any errors.	Until you close your browser
nv_lang	Ninaveli	Remembers the language of the website for you. On your first visit we choose it from your browser's language or the country you are in (we do not store your location); after that, your own choice is kept.	1 year
nv_cookie_consent (stored in your browser's local storage)	Ninaveli	Remembers that you have seen our cookie banner, so we don't ask again on every page.	Until you clear your browser data
__cf_bm and other Cloudflare security cookies	Cloudflare	Our website is delivered and protected by Cloudflare. These cookies may be set to tell people and automated bots apart and to block attacks.	Up to 30 minutes (security cookies can last longer when a security check is shown)

These are strictly necessary, so they do not require consent. You can block or delete cookies in your browser settings, but parts of the website (such as the forms) may then not work.

Spam protection on our forms: our forms use Cloudflare Turnstile to check that they are being sent by a person and not by an automated program. To do this, Cloudflare processes information about your browser, device and IP address.

Instagram feed: our home page shows our latest Instagram posts through a widget provided by Elfsight. When the feed loads, Elfsight and Instagram (Meta) receive your IP address and browser information, and may use their own cookies or similar technologies under their own privacy policies. If you don't want this, you can block third-party cookies in your browser settings or clear our website's data in your browser.

Links to other services: when you click a link to WhatsApp, Instagram, our online shop or other websites, the privacy policy of that service applies.

6. How We Use Information & Legal Bases

We use information to answer your enquiries, send price lists and catalogues, process and deliver orders, provide training and support, manage our business relationships, market our products to professionals and businesses, protect our website, and meet our legal obligations. Under the UK General Data Protection Regulation (UK GDPR), the lawful bases we rely on are:

Consent: When you tick the box on our website forms, we contact you about your request. You can withdraw your consent at any time by emailing [email protected].
Performance of a Contract: To process and manage your orders, transactions, billing, and delivery.
Legitimate Interests: To respond to business enquiries, conduct business-to-business marketing and outreach, identify business opportunities, maintain professional relationships, show our Instagram feed on our website, and keep our website and forms secure.
Legal Obligation: To keep accounting and tax records and to meet product safety and vigilance requirements, including handling adverse event reports and product recalls.

7. Marketing and Communications

We may contact professionals and businesses about our products, services, training, business updates, or relevant opportunities by email, direct message, WhatsApp, telephone, and other communication methods. You can ask us to stop at any time by replying to our message or emailing [email protected].

8. Sharing Information With Third Parties

We do not sell your personal information. We share it only where needed, with:

Website and security providers: Cloudflare (website delivery, security and spam protection) and our website hosting provider.
Email and cloud services: Google (Google Workspace), which we use for email, including the messages sent from our website forms.
Business systems: our internal order, customer and online shop systems, and their hosting providers.
Social media and messaging: Meta (Instagram, Facebook and WhatsApp) when you contact us through these services or view our Instagram feed, and Elfsight, which provides that feed. When you see or interact with our adverts or pages on social media, the platform may share statistics with us under its own privacy policy.
Our offices: our teams in the United Kingdom and South Korea, so that the right person can answer you.
Shipping and logistics providers: delivery details and addresses, where needed to deliver orders.
Regulators, authorities and professional advisers: where required by law, for product safety (vigilance) reporting, or to protect our rights.

9. Storage and Security of Information

We take reasonable measures to protect information from unauthorised access, loss, misuse, or disclosure. However, no method of electronic storage or transmission is completely secure, and we cannot guarantee absolute security.

10. International Processing of Information

Because Ninaveli operates internationally, information may be processed in the United Kingdom, in South Korea (where our office and manufacturing are based), and in other countries where our service providers operate, including the United States and the European Economic Area. The UK recognises South Korea and the European Economic Area as providing adequate data protection. Where information is transferred to other countries, we rely on the safeguards permitted by UK data protection law, such as the UK-US Data Bridge or the UK International Data Transfer Agreement and Addendum used by our service providers.

11. Data Retention

We retain information for as long as reasonably necessary for the purposes described above, including any period required by law (for example, accounting and product safety records). When information is no longer required, we securely delete or anonymise it.

12. Your Rights

Depending on applicable laws, you have rights relating to your personal information, including the right to request access, correction, deletion, or restriction of processing, to object to processing (including direct marketing), to data portability, and to withdraw your consent at any time. Requests can be made by contacting [email protected].

If you are unhappy with how we handle your information, please contact us first. You also have the right to complain to the Information Commissioner's Office (ICO), the UK data protection regulator: ico.org.uk/make-a-complaint.

To manage how Meta uses your information for advertising on its platforms, you can adjust your Meta ad preferences.

13. Business-to-Business and Age Restrictions

Our website, social media channels, and services are intended strictly for businesses and professionals acting in a professional capacity. We do not knowingly collect personal data from individuals under the age of 18.

14. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our business practices, technology, legal requirements, or services. Any updates will be posted on this page with the revised date.

15. Contact Us

If you have questions regarding this Privacy Policy or how Ninaveli processes information, please contact [email protected].

Ninaveli London Limited
22-23 Arcadia Avenue, London, N3 2JU, United Kingdom