Privacy Policy

Last updated: 2024

Introduction

Nomai OÜ ("we", "us", "our", or "Company") respects your privacy and is committed to protecting your personal data. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit our website (nomai.amsterdam) and make purchases.

Please read this Privacy Policy carefully. If you do not agree with our policies and practices, please do not use our website.

2. Information We Collect

2.1 Information You Provide Directly

We collect information you provide to us when you:

Create an account or register on our website
- Place an order for products
- Complete a transaction
- Subscribe to our newsletter or communications
- Contact us with inquiries or feedback
- Fill out surveys or forms

This information may include:

Name, email address, and postal address
- Phone number
- Payment information (processed securely by third-party providers)
- Shipping and billing address
- Order history and preferences
- Communications and customer service interactions

2.2 Information Collected Automatically

When you visit our website, we may automatically collect:

Device information (IP address, browser type, operating system)
- Browsing information (pages visited, time spent, links clicked)
- Cookies and similar tracking technologies
- Analytics data about your interaction with the site

2.3 Information from Third Parties

We may receive information about you from:

Payment processors and fraud detection services
- Shipping and delivery partners
- Analytics and marketing platforms
- Social media platforms (if you connect your account)

3. How We Use Your Information

We use the information we collect for the following purposes:

3.1 Fulfilling Orders

Processing and shipping your orders
- Communicating about your purchase status
- Providing customer service and support
- Managing returns and refunds

3.2 Communication

Sending order confirmation and shipping updates
- Responding to your inquiries and requests
- Sending newsletters and promotional communications (with your consent)
- Notifying you of policy changes or updates

3.3 Business Operations

Improving our website, products, and services
- Analyzing usage patterns and trends
- Preventing fraud and securing our systems
- Conducting market research and surveys

3.4 Marketing

Creating targeted marketing campaigns
- Personalizing your shopping experience
- Conducting analytics on marketing effectiveness

We will only send marketing communications if you have opted in, and you can opt out at any time.

4. Legal Basis for Processing (GDPR Compliance)

For customers in the European Union, we process your personal data based on:

Contractual necessity (to fulfill your order)
- Your explicit consent (for marketing communications)
- Legitimate business interests (improving services, fraud prevention)
- Legal obligations (tax and regulatory compliance)

5. Data Sharing and Disclosure

5.1 We do not sell or rent your personal data to third parties.

5.2 We may share your information with:

Payment processors and financial institutions
- Shipping and logistics partners
- Customer service providers
- Analytics and marketing platforms
- Law enforcement (when required by law)
- Service providers who assist with our business operations

5.3 All third-party service providers are contractually required to maintain confidentiality and use your data only for the purposes we specify.

6. Data Retention

We retain your personal data for as long as necessary to fulfill the purposes outlined in this Privacy Policy, unless a longer retention period is required by law.

Order and transaction data: Retained for 7 years (tax and legal requirements)
- Account information: Retained while your account is active and for 2 years after account closure
- Marketing preferences: Retained until you unsubscribe
- Website usage data: Retained for 12-24 months

7. Your Rights

Under GDPR and applicable privacy laws, you have the following rights:

7.1 Right of Access

You have the right to request and receive a copy of the personal data we hold about you.

7.2 Right to Rectification

You can request that we correct inaccurate or incomplete personal data.

7.3 Right to Erasure

You have the right to request deletion of your personal data, subject to certain exceptions (e.g., when data is needed for legal compliance).

7.4 Right to Restrict Processing

You can request that we limit how we use your personal data.

7.5 Right to Data Portability

You can request your personal data in a structured, commonly used format.

7.6 Right to Object

You can object to the processing of your personal data for marketing or profiling purposes.

7.7 Right to Withdraw Consent

You can withdraw your consent to marketing communications at any time by clicking "unsubscribe" in our emails or contacting us.

8. Cookies and Tracking Technologies

8.1 We use cookies to enhance your browsing experience, remember your preferences, and analyze website usage.

8.2 You can control cookies through your browser settings. Disabling cookies may affect website functionality.

8.3 We use analytics tools (e.g., Google Analytics) to understand user behavior. These services may collect data outside our website.

9. Security

9.1 We implement appropriate technical, administrative, and physical safeguards to protect your personal data against unauthorized access, alteration, disclosure, or destruction.

9.2 While we strive to protect your information, no online transmission is 100% secure. We cannot guarantee absolute security.

9.3 You are responsible for maintaining the confidentiality of your account passwords and login credentials.

10. Children's Privacy

Our website is not intended for children under 13 years of age. We do not knowingly collect personal data from children. If we become aware that we have collected data from a child, we will delete it immediately.

11. Third-Party Links

Our website may contain links to external websites. We are not responsible for the privacy practices of third-party sites. We recommend reviewing their privacy policies before providing personal data.

12. International Data Transfers

Your personal data may be transferred to, stored in, and processed in countries other than your country of residence. These countries may have data protection laws different from your home country. By using our website, you consent to such transfers.

13. Contact Us

If you have questions about this Privacy Policy, wish to exercise your rights, or have privacy concerns, please contact us:

Nomai OÜ

Email: support@nomai.com

Address: Tallinn, Estonia

You also have the right to lodge a complaint with your local data protection authority.

14. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of material changes by posting the updated policy on our website and updating the "Last updated" date. Your continued use of our website constitutes acceptance of the updated Privacy Policy.