Last updated: 20 October 2026
We respect your privacy and are committed to protecting your personal data. This policy explains what we collect, why, and how we use, share and protect it, and what rights you have under applicable laws, including the EU GDPR, the UK GDPR, US state laws such as the CCPA/CPRA, Canadian privacy laws and others, where they apply to where you live.
1. Who is responsible for your data
WordPress Website (online store modal.nawoos.com), United States of America. For privacy matters, contact: [email protected].
2. Data we collect
- Identity and contact data: name, email address, phone number.
- Order and delivery data: shipping and billing address, items ordered, order number, delivery notes. The carrier or customs may also ask for your phone number or details to clear the shipment.
- Payment data: processed directly by the payment provider. We only receive the transaction status, the last four digits, card type and issuing country; we do not store your full card number or CVV.
- Account data: login details, wishlist, order history.
- Usage and device data: IP address, browser and device type, pages visited and referral source, collected through cookies and similar technologies (see our Cookie Policy).
- Your communications with us: support messages and reviews.
3. How and why we use your data (legal bases)
- Performing a contract: processing orders, payment, shipping, returns and support.
- Legal obligations: accounting, tax, fraud prevention, anti-money-laundering and sanctions compliance.
- Legitimate interests: securing the store, preventing fraud, improving our service and analyzing performance.
- Your consent: marketing messages and non-essential cookies. You can withdraw consent at any time.
4. Who we share your data with
We do not sell your personal data for money. We share it only as needed with:
- Suppliers, fulfillment partners and warehouses: to prepare your order and ship it directly to you. They receive only your name, address and phone number (and sometimes your email). These parties may be located in different countries.
- Carriers, postal services and customs: to deliver, clear and track your order.
- Payment and fraud-prevention providers: to process and verify payments.
- Technical service providers: hosting, email, analytics, advertising and marketing (if enabled), and customer support.
- Authorities: where legally required, to protect our rights, or to prevent fraud.
- Business successors: in a merger or sale of the business, with your data remaining protected.
We require service providers to protect data and to use it only to provide their service.
5. International data transfers
Your data may be processed and stored in the United States and other countries whose data protection laws may differ from those of your country. Where required, we rely on appropriate safeguards such as standard contractual clauses or other recognized mechanisms.
6. Retention
We keep your data for as long as needed to fulfill orders and serve you, to meet legal, tax and accounting obligations (usually up to 7 years for transaction records), and to resolve disputes and enforce agreements. After that we delete it or anonymize it.
7. Your rights
Depending on where you live, you may have the right to access your data and get a copy, correct it, delete it, restrict or object to its processing, port it, withdraw consent, stop marketing messages, and not be discriminated against for exercising your rights. Send your request to [email protected] and we will reply within 30 days at most (45 days in some permitted cases). We may ask you to verify your identity, and you may submit a request through an authorized agent. You also have the right to complain to the data protection authority in your country.
8. California and other US state residents (CCPA/CPRA)
In the last 12 months we have collected these categories: identifiers (name, address, email, phone, IP), commercial information (order history), internet activity (browsing) and approximate location data. We do not sell your personal data for money. Some advertising or analytics cookies may count as “sharing” for cross-context behavioral advertising; you can opt out by contacting us, through the cookie consent tool if present, or in your browser settings (including Global Privacy Control signals). We do not collect sensitive data for purposes beyond fulfilling your order.
9. European Economic Area and United Kingdom
You have the right to object to processing based on legitimate interests. We do not make solely automated decisions that have a legal effect on you, other than fraud checks carried out by payment providers.
10. Data security
We apply reasonable technical and organizational measures, including encrypted connections (HTTPS), restricted access and not storing card data. However, no method of transmission or storage is 100% secure, and we will notify you and the competent authorities of any breach as the law requires.
11. Children
The store is not directed at anyone under 16 and we do not knowingly collect their data. If you learn that a child has given us data, write to us and we will delete it.
12. Marketing messages
We send marketing messages only with your consent or as the law permits, and you can unsubscribe using the link in any message. Order and service messages will continue.
13. External links and changes to this policy
We are not responsible for the privacy practices of external sites. We may update this policy; updates take effect when published, and we will notify you of material changes by an appropriate means.
14. Contact
For any question or request about your data: [email protected] or our contact page.