GDPR Privacy Policy

Privacy Policy

This policy explains what personal data Nayla Nobility collects, why, who we share it with, how long we keep it and what your rights are. It applies when you visit naylanobility.com, shop with us, sign up to our waitlist or newsletter, or contact us.

Who we are

Nayla Nobility is the data controller for your personal data. That means we decide how and why it's used, and we're responsible for it.

Email: info@naylanobility.com

We're a small business and aren't required to appoint a data protection officer. For any privacy question, email us at the address above.

What we collect

Contact and delivery details: your name, email address, phone number, billing and delivery address, and country.

Order details: what you bought, the price, your order number, and delivery and return status.

Payment details: confirmation that you've paid and how. Your card or bank details are handled by the payment provider. We never see your full card number.

Messages: anything you send us by email, our forms or social media, including photos of an item.

Marketing preferences: whether you've signed up to our waitlist or newsletter, and when.

Technical data: your IP address, browser, device type, the pages you visit and how you got to our site. Some of this is collected through cookies (see Cookies below).

You don't have to give us your details, but we can't take or deliver an order without your name, contact details and delivery address.

How we use it, and on what basis

We only use your data for the purposes below. 

Why we use it

What we use

Legal basis

How long we keep it

Taking, delivering and supporting your order, including returns and refunds

Contact, order and payment details, messages

Contract: we need it to do what you've asked

7 years after the order, for tax records

Answering questions and handling complaints

Contact and order details, messages, photos

Contract, and our legitimate interest in resolving problems and handling legal claims

Until it's resolved, then as long as needed for any related legal claim

Waitlist and newsletter emails

Email, first name, country, marketing preferences

Your consent

Until you unsubscribe. We keep a record of your consent and unsubscribe for as long as we need to show we followed the rules

Keeping the website working and secure, and preventing fraud

Technical data, essential cookies, order details

Our legitimate interest in running a safe, working shop

As long as each cookie lasts. Fraud checks are kept with the order

Understanding how people use our website

Technical data, analytics cookies

Your consent

As long as each cookie lasts, then only in combined statistics

Measuring and showing our ads

Technical data, marketing cookies

Your consent

As long as each cookie lasts. Ad platforms keep data under their own policies

Meeting legal duties, such as tax, accounting and requests from authorities

Order and payment details

Legal obligation

7 years for tax records

Where we rely on consent, you can withdraw it at any time. That doesn't affect anything we did before you withdrew. Where we rely on legitimate interests, we've weighed them against your rights, and you can object (see Your rights).

Who we share it with

We don't sell your personal data. We share it only with the services that help us run the shop, and only what each one needs.

Who

Why

Examples

Online store platform

Hosting our website, checkout, order records and customer accounts

Shopify

Payment providers

Taking payments and refunds, and preventing fraud

Shopify Payments, PayPal, and others

Delivery companies

Getting your order to you and tracking it

Local carrier

Email and newsletter tools

Running our inbox and sending emails you've signed up for

Google Workspace, Shopify Email

Marketplaces and social platforms

Processing orders you place through them, and our shop listings

TikTok Shop, Instagram and Facebook (Meta)

Analytics and advertising partners

Only if you accept these cookies

Meta Pixel, TikTok Pixel, Google Analytics, Pinterest Tag

Professional advisers and authorities

Accounting, tax, legal advice, or where the law requires it

Accountants or advisers we work with, the tax administration

These providers may only use your data to provide their service to us, under a data processing agreement. Marketplaces, social platforms and payment providers may also use some data for their own purposes, under their own privacy policies.

If our business is ever sold or restructured, your data may pass to the new owner, who must keep protecting it in line with this policy.

Cookies

Cookies are small files stored on your device when you visit a website. We use two kinds.

Essential cookies keep the site working: your shopping basket, checkout, security and remembering your cookie choice. They don't need your consent, and the site can't work without them.

Analytics and marketing cookies help us understand how people use the site and measure our ads. We only use these if you accept them in our cookie banner. If you don't, we don't place them.

You can change your choice at any time through the cookie settings link at the bottom of our website. You can also block or delete cookies in your browser, but parts of the site, such as the basket, may then stop working.

Marketing emails

We only send marketing emails, such as waitlist news and our newsletter, if you've signed up for them. We don't send marketing by text message or phone.

Every marketing email has an unsubscribe link. You can also email info@naylanobility.com and we'll take you off the list. Order confirmations and delivery updates aren't marketing, so you'll still receive those.

Your rights

Wherever you live, you can ask us to:

Access your data and get a copy of it

Correct data that's wrong or incomplete

Delete your data, where we no longer need it or have no legal reason to keep it

Restrict how we use your data, for example while we check a correction

Transfer data you gave us to you or another company, in a common digital format

Object to us using your data based on legitimate interests. You can always object to marketing, and we'll stop

Withdraw your consent at any time, where we rely on it

Some rights have limits. For example, we must keep order records for 7 years for tax purposes, even if you ask us to delete them. If that applies, we'll explain why.

How to use your rights

Email info@naylanobility.com with the subject line Privacy request and tell us what you'd like. It's free. We may ask you to confirm your identity first, so we don't give your data to someone else.

We'll reply within one month. If your request is complex, we may need up to two more months, and we'll tell you if so.

Complaints about how we handle your data

If you're unhappy with how we've handled your data, please tell us so we can put it right. Use our contact form https://naylanobility.com/pages/contact or email info@naylanobility.com with the subject line Complaint (privacy). We'll confirm we've received it within 5 working days and handle it under our Complaints Policy.

Automated decisions

We don't make decisions about you based only on automated processing that have legal or similarly significant effects. Our store platform may flag an order as a possible fraud risk, but we review it ourselves before deciding anything.

Children

Our shop isn't aimed at children. We don't knowingly collect personal data from anyone under 16. If you think a child has given us their data, email us and we'll delete it.

Keeping your data safe

Our website uses an encrypted connection, and we use established providers to store and process your data. Only people who need your data to do their job can access it. No system is completely secure, so if a breach ever puts your data at risk, we'll tell you and the relevant authority as the law requires.

Social media

When you follow, message or comment on our accounts on Instagram, TikTok, Facebook, X or Pinterest, that platform also handles your data under its own privacy policy. For the page statistics Meta gives us about our Facebook and Instagram pages, we share responsibility with Meta.

Changes to this policy

We'll update this policy when our practices or the law change. The date at the top shows the latest version. If we make a significant change, we'll tell customers and subscribers by email before it takes effect.

Contact us

For any question about this policy or your data, email info@naylanobility.com.