GDPR Privacy Policy
Privacy Policy
This policy explains what personal data Nayla Nobility collects, why, who we share it with, how long we keep it and what your rights are. It applies when you visit naylanobility.com, shop with us, sign up to our waitlist or newsletter, or contact us.
Who we are
Nayla Nobility is the data controller for your personal data. That means we decide how and why it's used, and we're responsible for it.
Email: info@naylanobility.com
We're a small business and aren't required to appoint a data protection officer. For any privacy question, email us at the address above.
What we collect
Contact and delivery details: your name, email address, phone number, billing and delivery address, and country.
Order details: what you bought, the price, your order number, and delivery and return status.
Payment details: confirmation that you've paid and how. Your card or bank details are handled by the payment provider. We never see your full card number.
Messages: anything you send us by email, our forms or social media, including photos of an item.
Marketing preferences: whether you've signed up to our waitlist or newsletter, and when.
Technical data: your IP address, browser, device type, the pages you visit and how you got to our site. Some of this is collected through cookies (see Cookies below).
You don't have to give us your details, but we can't take or deliver an order without your name, contact details and delivery address.
How we use it, and on what basis
We only use your data for the purposes below.
|
Why we use it |
What we use |
Legal basis |
How long we keep it |
|---|---|---|---|
|
Taking, delivering and supporting your order, including returns and refunds |
Contact, order and payment details, messages |
Contract: we need it to do what you've asked |
7 years after the order, for tax records |
|
Answering questions and handling complaints |
Contact and order details, messages, photos |
Contract, and our legitimate interest in resolving problems and handling legal claims |
Until it's resolved, then as long as needed for any related legal claim |
|
Waitlist and newsletter emails |
Email, first name, country, marketing preferences |
Your consent |
Until you unsubscribe. We keep a record of your consent and unsubscribe for as long as we need to show we followed the rules |
|
Keeping the website working and secure, and preventing fraud |
Technical data, essential cookies, order details |
Our legitimate interest in running a safe, working shop |
As long as each cookie lasts. Fraud checks are kept with the order |
|
Understanding how people use our website |
Technical data, analytics cookies |
Your consent |
As long as each cookie lasts, then only in combined statistics |
|
Measuring and showing our ads |
Technical data, marketing cookies |
Your consent |
As long as each cookie lasts. Ad platforms keep data under their own policies |
|
Meeting legal duties, such as tax, accounting and requests from authorities |
Order and payment details |
Legal obligation |
7 years for tax records |
Where we rely on consent, you can withdraw it at any time. That doesn't affect anything we did before you withdrew. Where we rely on legitimate interests, we've weighed them against your rights, and you can object (see Your rights).
Who we share it with
We don't sell your personal data. We share it only with the services that help us run the shop, and only what each one needs.
|
Who |
Why |
Examples |
|---|---|---|
|
Online store platform |
Hosting our website, checkout, order records and customer accounts |
Shopify |
|
Payment providers |
Taking payments and refunds, and preventing fraud |
Shopify Payments, PayPal, and others |
|
Delivery companies |
Getting your order to you and tracking it |
Local carrier |
|
Email and newsletter tools |
Running our inbox and sending emails you've signed up for |
Google Workspace, Shopify Email |
|
Marketplaces and social platforms |
Processing orders you place through them, and our shop listings |
TikTok Shop, Instagram and Facebook (Meta) |
|
Analytics and advertising partners |
Only if you accept these cookies |
Meta Pixel, TikTok Pixel, Google Analytics, Pinterest Tag |
|
Professional advisers and authorities |
Accounting, tax, legal advice, or where the law requires it |
Accountants or advisers we work with, the tax administration |
These providers may only use your data to provide their service to us, under a data processing agreement. Marketplaces, social platforms and payment providers may also use some data for their own purposes, under their own privacy policies.
If our business is ever sold or restructured, your data may pass to the new owner, who must keep protecting it in line with this policy.
Cookies
Cookies are small files stored on your device when you visit a website. We use two kinds.
Essential cookies keep the site working: your shopping basket, checkout, security and remembering your cookie choice. They don't need your consent, and the site can't work without them.
Analytics and marketing cookies help us understand how people use the site and measure our ads. We only use these if you accept them in our cookie banner. If you don't, we don't place them.
You can change your choice at any time through the cookie settings link at the bottom of our website. You can also block or delete cookies in your browser, but parts of the site, such as the basket, may then stop working.
Marketing emails
We only send marketing emails, such as waitlist news and our newsletter, if you've signed up for them. We don't send marketing by text message or phone.
Every marketing email has an unsubscribe link. You can also email info@naylanobility.com and we'll take you off the list. Order confirmations and delivery updates aren't marketing, so you'll still receive those.
Your rights
Wherever you live, you can ask us to:
Access your data and get a copy of it
Correct data that's wrong or incomplete
Delete your data, where we no longer need it or have no legal reason to keep it
Restrict how we use your data, for example while we check a correction
Transfer data you gave us to you or another company, in a common digital format
Object to us using your data based on legitimate interests. You can always object to marketing, and we'll stop
Withdraw your consent at any time, where we rely on it
Some rights have limits. For example, we must keep order records for 7 years for tax purposes, even if you ask us to delete them. If that applies, we'll explain why.
How to use your rights
Email info@naylanobility.com with the subject line Privacy request and tell us what you'd like. It's free. We may ask you to confirm your identity first, so we don't give your data to someone else.
We'll reply within one month. If your request is complex, we may need up to two more months, and we'll tell you if so.
Complaints about how we handle your data
If you're unhappy with how we've handled your data, please tell us so we can put it right. Use our contact form https://naylanobility.com/pages/contact or email info@naylanobility.com with the subject line Complaint (privacy). We'll confirm we've received it within 5 working days and handle it under our Complaints Policy.
Automated decisions
We don't make decisions about you based only on automated processing that have legal or similarly significant effects. Our store platform may flag an order as a possible fraud risk, but we review it ourselves before deciding anything.
Children
Our shop isn't aimed at children. We don't knowingly collect personal data from anyone under 16. If you think a child has given us their data, email us and we'll delete it.
Keeping your data safe
Our website uses an encrypted connection, and we use established providers to store and process your data. Only people who need your data to do their job can access it. No system is completely secure, so if a breach ever puts your data at risk, we'll tell you and the relevant authority as the law requires.
Social media
When you follow, message or comment on our accounts on Instagram, TikTok, Facebook, X or Pinterest, that platform also handles your data under its own privacy policy. For the page statistics Meta gives us about our Facebook and Instagram pages, we share responsibility with Meta.
Changes to this policy
We'll update this policy when our practices or the law change. The date at the top shows the latest version. If we make a significant change, we'll tell customers and subscribers by email before it takes effect.
Contact us
For any question about this policy or your data, email info@naylanobility.com.