Privacy Policy

This Privacy Policy explains how we collect, use, store, and protect your personal information when you shop at our online store. We follow all applicable privacy laws in the European Union, including the General Data Protection Regulation (GDPR).

By using our website and placing an order, you agree to the terms described below.

1. Data Controller

The data controller responsible for your personal information is:

nufaar
nufaar OÜ
Company registration number: 17269522
Registered address: Ruunaoja Street 3, Tallinn, Estonia
Email: info@nufaar.com

2. Information We Collect

2.1 Information You Provide

We collect personal data that you give us when:

• Placing an order
• Creating an account
• Subscribing to newsletters
• Contacting customer support

This may include:

• Name and surname
• Shipping and billing address
• Phone number
• Email address
• Order details
• Payment information (processed securely by payment providers)

2.2 Information Collected Automatically

When you browse our website, we may collect:

• IP address
• Device and browser type
• Pages visited and actions on the site
• Cookies and tracking data (see Section 8)

2.3 Payment Data

We do not store full credit card or bank information. Payments are processed securely by trusted third-party payment providers who comply with PCI-DSS standards.

3. How We Use Your Personal Data

We use your data for the following purposes:

• Order processing: to prepare, ship, and deliver your purchase
• Customer support: to answer questions and provide assistance
• Account management: to maintain your profile and order history
• Marketing (only with your consent): newsletters, promotions, and product updates
• Fraud prevention & security: to protect customers and our store
• Legal compliance: for accounting and regulatory obligations

We only process personal data when we have a valid legal basis under GDPR, including contract fulfillment, consent, legal obligations, and legitimate interest.

4. Sharing Your Data

We may share information with trusted third parties when necessary:

• Delivery companies (to ship your order)
• Payment service providers
• IT and hosting providers
• Marketing platforms (only with your consent)
• Legal authorities (when required by law)

We never sell or rent your personal information.

5. Data Retention

We keep your personal data only for as long as needed:

• Order and payment information: up to 7–10 years (legal requirement)
• Customer accounts: until you request deletion
• Marketing data: until you unsubscribe
• Cookies: according to our cookie policy

After retention periods, we securely delete or anonymize your information.

6. Your Rights Under GDPR

You have the following rights:

• Right to access – request a copy of your personal data
• Right to rectification – update incorrect information
• Right to erasure – request deletion (“right to be forgotten”)
• Right to restriction of processing
• Right to data portability
• Right to object to processing
• Right to withdraw consent at any time
• Right to lodge a complaint with your local Data Protection Authority

To exercise any rights, email us at: info@nufaar.com

7. Data Security

We take appropriate technical and organizational measures to protect your data, including:

• Encrypted connections (HTTPS)
• Secure servers and firewalls
• Limited access to personal data
• Regular security monitoring

While no system is ever completely risk-free, we continuously work to safeguard your information.

8. Cookies and Tracking

We use cookies to:

• Remember your cart and preferences
• Improve website performance
• Analyze visitor behavior
• Personalize content and offers

You can manage or disable cookies in your browser settings. Some features may not function properly without them.

9. International Data Transfers

If your data is transferred outside the European Economic Area (EEA), we ensure appropriate safeguards—such as Standard Contractual Clauses—are in place to protect your privacy.

10. Updates to This Policy

We may update this Privacy Policy when necessary. Any changes will be posted on this page with a new “Last updated” date. Continued use of our website means acceptance of the updated terms.

11. Contact Us

If you have any questions regarding this Privacy Policy or how your data is handled, you can contact us at:

nufaar
Email: info@nufaar.com
Address: Ruunaoja Street 3, Tallinn, Estonia