Privacy policy

Privacy Policy

Last updated: 1 November 2026

At Nanalu we take the privacy of your data seriously. This policy explains what data we collect, what we use it for and what rights you have.

1. Data controller
- Owner: Nanalú
- Email: nuvikomez@outlook.es

2. What data we collect
- Contact details: first name, last name, email, phone number and shipping and billing address.
- Order data: products purchased, amount and date.
- Payment data: handled directly by the payment provider. We never see or store your full card details.
- Browsing data: IP address, device and browser type, and how you use the website, through cookies.
- Any messages you send us, for example by email.

3. What we use your data for
- Managing your order: processing payment, preparing shipment and keeping you updated on its status.
- Customer service: answering your questions, returns and exchanges.
- Meeting our legal obligations, such as tax and accounting requirements.
- Sending you news and offers, only with your consent. You can unsubscribe at any time using the link in every email.
- Improving the website and preventing fraud.

4. Legal basis
- Performance of the sales contract when you place an order.
- Compliance with legal obligations.
- Your consent, for marketing communications and non-essential cookies.
- Our legitimate interest, for website security and fraud prevention.

5. Who we share your data with
Only with the providers needed to deliver your order and run the store:
- Shopify, the platform that hosts the store.
- Payment providers.
- Our supplier and shipping carriers, who need your name, address and phone number to deliver your order.
We never sell your data to third parties.

6. International transfers
Some of these providers may be located outside the European Economic Area. In those cases, transfers are made with the safeguards required by European law, such as the Standard Contractual Clauses approved by the European Commission.

7. How long we keep your data
Order data is kept for as long as needed to manage your order and for the periods required by law, such as tax regulations. Data used for marketing is kept until you unsubscribe.

8. Cookies
We use our own and third-party cookies to make the website work, remember your cart and, if you accept, analyse how the store is used. You can accept, reject or configure them from the cookie banner shown when you enter the website.

9. Your rights
You may at any time exercise your rights of access, rectification, erasure, objection, restriction of processing and portability, and withdraw your consent. Just email us at nuvikomez@outlook.es stating which right you wish to exercise.
If you believe we have not handled your request properly, you can file a complaint with the Spanish Data Protection Agency (www.aepd.es) or the data protection authority in your country.

10. Minors
The store is intended for adults. We do not knowingly collect data from children under 14.

11. Changes to this policy
We may update this policy. Any changes will be published on this page with the date of the update.