Privacybeleid

Last Updated: February 18, 2025

This Privacy Policy describes how Nuraya (“Site,” “we,” “us,” or “our”) collects, uses, and discloses your personal information when you visit, use our services, or make a purchase from www.nur-aya.nl (the “Site”) or otherwise communicate with us regarding the Site (collectively, the “Services”). For purposes of this Privacy Policy, “you” and “your” means the user of the Services, whether you are a customer, website visitor, or another individual whose information we collect under this Privacy Policy.

Please read this Privacy Policy carefully.

1. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices or for other operational, legal, or regulatory reasons. When we update the policy, we will:

  • Post the revised version on this page;
  • Update the “Last Updated” date at the top;
  • Take any other steps required by applicable law.

2. Information We Collect

We collect various types of personal information about you from different sources. The specific information we collect and how we use it may depend on your interactions with us and our Services.

2.1 Information We Collect Directly from You

  • Contact Details: Name, address, email, phone number.
  • Order Information: Billing/shipping address, payment confirmation, order details, and contact information.
  • Account Information: Username, password, security questions, and other data used for account security.
  • Customer Support Information: Any details you share when contacting us (e.g., through messages or forms).

Note: Certain features of the Services may require you to provide information about yourself. If you choose not to provide this information, you may be unable to use or access certain features.

2.2 Information We Collect About Your Usage

We may automatically gather information about how you use and interact with the Services (“Usage Data”). This can include:

  • IP address, browser type, and operating system;
  • Device information and network connection details;
  • Pages viewed, links clicked, and other usage details.

To collect this data, we use cookies, pixels, and similar technologies (“Cookies”). For more details, see the Cookies section below.

2.3 Information We Obtain from Third Parties

We may receive information about you from:

  • Vendors/Service Providers: For tasks such as payment processing, IT support, data analytics, and shipping.
  • Shopify: Since our store is hosted on Shopify, we may receive data necessary to complete transactions and facilitate account management.
  • Advertising & Analytics Partners: When you interact with our Site, emails, or advertisements, our partners may collect information using cookies, web beacons, and similar tracking methods.

We treat any information obtained from third parties in line with this Privacy Policy.

3. How We Use Your Personal Information

In addition to the specific uses below, we may also use your information to communicate with you, improve or enhance the Services, comply with legal obligations, enforce any applicable terms of service, and protect our rights and the rights of our users and others.

3.1 Providing Products and Services

We process your personal information to:

  • Fulfill orders, handle returns and exchanges, and manage payments.
  • Send notifications related to your purchases, account, or other transactions.
  • Create, maintain, and manage your user account.
  • Arrange shipping, process refunds, and provide related functionalities.

This use is necessary for performing a contract with you or for taking steps you request prior to entering into a contract (GDPR Art. 6(1)(b)).

3.2 Marketing and Advertising

Where permitted by applicable law and with your consent (if required), we may:

  • Send promotional emails, text messages, or postal mail about our products, offers, and updates.
  • Personalize the Services and ads on our Site and third-party sites.

For EEA residents, the legal basis for such processing is our legitimate interest in offering and promoting our products (GDPR Art. 6(1)(f)) or your consent (GDPR Art. 6(1)(a)), depending on the type of marketing activity.

3.3 Security and Fraud Prevention

We use your data to detect, investigate, or take action against possible fraudulent or illegal activities. If you have an account, please keep your login credentials secure. If you suspect unauthorized use of your account, contact us immediately.

For EEA residents, our legitimate interest (GDPR Art. 6(1)(f)) is in keeping our Services safe and secure for all users.

3.4 Communicating with You & Service Improvement

We use your information to respond to inquiries and enhance our Services. This is in our legitimate interest (GDPR Art. 6(1)(f)) to provide effective customer service and maintain a strong business relationship with you.

4. Cookies

Like many websites, we use cookies and similar technologies to:

  • Remember your actions and preferences (e.g., language, cart items).
  • Analyze site traffic and user interactions (e.g., via Google Analytics or Shopify’s analytics tools).
  • Provide and improve our Services.

You can usually adjust your browser settings to block or remove cookies, but doing so may affect some functionalities of our Site. For more information about cookies on Shopify-powered sites, see Shopify’s Cookie Policy.

5. How We Disclose Personal Information

We may share your personal information under the following circumstances:

  • Service Providers: Payment processors, shipping partners, IT support, data analytics providers, and other vendors performing services on our behalf.
  • Business & Marketing Partners: To offer you co-branded services, targeted ads, or promotions.
  • With Your Consent: For instance, when you authorize us to share information with a third party or social media platform.
  • Corporate Group: Within our affiliates and subsidiaries, for internal administrative purposes.
  • Business Transactions: In connection with a merger, acquisition, bankruptcy, or other reorganization.
  • Legal Compliance & Protection: To comply with legal obligations, enforce our terms, or protect our rights and safety and that of users or others.

We do not use or disclose your sensitive personal information (e.g., race, religion, health data) without your explicit consent or for the purpose of inferring characteristics about you.

6. Children’s Data

Our Services are not intended for individuals under the age of 16, and we do not knowingly collect personal information from them. If you believe a child has provided us with personal information, please contact us, and we will take steps to delete such information.

7. Security and Retention of Your Information

We implement reasonable measures (such as encryption and secure servers) to help safeguard your personal data. However, no security system is foolproof, and we cannot guarantee absolute security.

We retain personal information only as long as necessary for the purposes outlined in this Privacy Policy or as required by law. Factors that may affect retention periods include our need to:

  • Maintain your account.
  • Fulfill contractual obligations (e.g., product warranties).
  • Comply with legal obligations (e.g., tax, accounting, and regulatory requirements).
  • Resolve disputes or enforce other applicable agreements.

8. Your Rights

Depending on where you live, you may have some or all of the following rights regarding your personal information:

  • Right to Access / Know: Request details about the information we hold and how it’s used or disclosed.
  • Right to Delete: Ask us to delete your personal information.
  • Right to Correct: Request that we correct inaccurate personal information about you.
  • Right of Portability: Request a copy of your personal data in a structured format and, where technically feasible, have it transferred to a third party.
  • Right to Restrict Processing: Ask us to limit how we use your data.
  • Right to Object / Withdraw Consent: Object to specific processing activities, or withdraw consent where processing is based on consent.
  • Right to Opt Out (Sale/Sharing/Targeted Ads): Direct us not to “sell” or “share” your data, or to stop processing your data for targeted advertising (as defined by applicable law).

To exercise any of these rights (where applicable), please contact us using the details provided in the Contact section below. We may request additional information to verify your identity before processing your request. We will respond within the timeframe required by law.

You will not be discriminated against for exercising these rights. If you are unsatisfied with how we handle your request, you may have the right to appeal our decision or lodge a complaint with your local data protection authority.

9. International Users

We may transfer, store, and process your personal data in countries other than your own. If you reside in the EEA or the UK, we will ensure adequate safeguards for transferring your data outside these regions (e.g., via Standard Contractual Clauses).

10. Third-Party Websites and Links

Our Site may contain links to third-party sites. We are not responsible for the privacy practices of such sites. When you leave our Site, we encourage you to read the privacy policies of every website that collects personal information.

11. Complaints

If you have complaints about our processing of your personal data, please contact us first using the details below. We will do our best to address your concerns. If you are not satisfied with our response, you may have the right to file a complaint with your local data protection authority.

12. Contact

Should you have any questions about this Privacy Policy, or if you would like to exercise any of your privacy rights, please contact us:

  • Email: info@nur-aya.nl

For purposes of applicable data protection laws, Nuraya is the data controller of your personal information unless otherwise indicated.