Privacy policy

Last updated: 18.07.2026

This Privacy Policy explains how NOMIVARA ("NOMIVARA", "we", "our", or "us") collects, uses, stores and shares your personal data when you visit or use our website nomivara.com, place an order, create an account, subscribe to our newsletter, contact us, or otherwise interact with our services.

Our online store is hosted on Shopify, which provides the e-commerce platform that enables us to offer our products and services.

This Privacy Policy explains how we process your personal data in accordance with applicable data protection laws, including the General Data Protection Regulation (GDPR/AVG).

Personal Data We Collect

The personal data we collect depends on how you interact with our website and services. We collect personal data where it is relevant to providing our services, complying with legal obligations, pursuing our legitimate interests, or where you have provided your consent, as described in this Privacy Policy.

How We Use Your Personal Data (Purposes and Legal Bases)

We process your personal data only where there is a valid legal basis to do so under applicable data protection laws, including the General Data Protection Regulation (GDPR/AVG). Depending on how you interact with our website and services, we may process your personal data for the following purposes:

Processing Your Orders

We use your personal data to process and fulfil your orders, confirm your purchases, process payments, arrange shipping, provide invoices, process returns or exchanges, and manage your customer account where applicable.

Legal basis: Performance of a contract (Article 6(1)(b) GDPR).

Customer Service and Order Communications

We use your personal data to communicate with you regarding your orders and to provide customer support. This includes sending order confirmations, payment confirmations, shipping updates, responding to your enquiries, requesting additional information where necessary to fulfil your order, resolving issues relating to your purchase, and providing after-sales support.

These communications are necessary for the performance of our contract with you and are not considered marketing communications.

Legal basis: Performance of a contract (Article 6(1)(b) GDPR).

Shipping and Delivery

We use your personal data to prepare, dispatch and deliver your orders through our shipping partners, provide shipment tracking where available, and manage returns or delivery-related enquiries.

Legal basis: Performance of a contract (Article 6(1)(b) GDPR).

Customer Accounts

If you choose to create a customer account, we use your personal data to maintain your account, authenticate your login, remember your preferences, and provide access to your order history and other account features.

Legal basis: Performance of a contract (Article 6(1)(b) GDPR).

Newsletter and Marketing Communications

If you subscribe to our newsletter, we use your email address to send updates about new collections, product launches, promotions, exclusive offers and other marketing communications.

We use a double opt-in procedure to verify your subscription before sending marketing emails. You may withdraw your consent at any time by clicking the unsubscribe link included in every marketing email. Withdrawing your consent does not affect the lawfulness of processing carried out before your consent was withdrawn.

Legal basis: Consent (Article 6(1)(a) GDPR).

Shopping Cart and Abandoned Checkout Reminders

Where you have consented to receive marketing communications, we may use information about products left in your shopping cart or an incomplete checkout to send reminder emails and help you continue your purchase.

Legal basis: Consent (Article 6(1)(a) GDPR).

Product Reviews

Following a purchase, we may invite you to review the products you have ordered. Review invitation emails are sent using Shopify Email and Shopify Flow. If you choose to submit a review, it is collected, managed and displayed through our review platform.

Reviews help other customers make informed purchasing decisions and help us improve our products and services. You may also choose to upload photographs or other content as part of your review. To help maintain the authenticity of reviews, Reviews may be moderated or verified before publication where appropriate.

Legal basis: Legitimate interest (Article 6(1)(f) GDPR) in obtaining authentic customer feedback, improving our products and services, and providing reliable product reviews for other customers.

Website Analytics and Improvements

Subject to your cookie preferences, we use analytics tools to understand how visitors use our website, measure website performance, identify technical issues, improve navigation, optimise our product offering, and enhance the overall customer experience.

Legal basis: Consent (Article 6(1)(a) GDPR).

Personalised Advertising

Subject to your cookie preferences, we use cookies and similar technologies to measure the effectiveness of our advertising campaigns and to display personalised advertisements on platforms such as Facebook, Instagram, TikTok and Pinterest.

Legal basis: Consent (Article 6(1)(a) GDPR).

Fraud Prevention and Website Security

We process personal data where necessary to detect fraudulent transactions, prevent misuse of our services, protect our website, investigate suspicious activity, and maintain the security of our systems.

Legal basis: Legitimate interest (Article 6(1)(f) GDPR).

Accounting, Tax and Legal Compliance

We process and retain certain personal data to comply with our legal obligations, including accounting, bookkeeping, tax legislation, responding to lawful requests from public authorities, and establishing, exercising or defending legal claims where necessary.

Legal basis: Compliance with a legal obligation (Article 6(1)(c) GDPR).

Improving Our Services

We analyse customer feedback, product reviews, website usage, and customer support enquiries to improve our products, website functionality, customer experience, and the quality of our services.

Where this analysis relies on cookies or similar technologies, we do so only where required by law and subject to your consent.

Legal basis: Legitimate interest (Article 6(1)(f) GDPR) and, where applicable, your consent (Article 6(1)(a) GDPR).

Our Service Providers and Data Sharing

To operate our online store and provide our services, we work with carefully selected third-party service providers. We only share the personal data that is necessary for them to perform services on our behalf, fulfil our contractual obligations, comply with legal requirements, or where otherwise permitted by applicable law.

Where required, we enter into appropriate data processing agreements or rely on other lawful safeguards to protect your personal data.

The following categories of service providers may process personal data on our behalf:

Category	Examples of Providers	Purpose	Personal Data Shared
Store Platform	Shopify	Website hosting, online store functionality, customer accounts, order processing and customer communications	Contact details, account information, order information, technical information
Payment Providers	Shopify Payments, PayPal, Klarna and other payment providers selected by the customer during checkout	Processing payments and preventing payment fraud	Payment information, order information and contact details
Shipping Partners	DHL, PostNL and other shipping providers where applicable	Delivering orders, shipment tracking and returns	Name, delivery address, email address (where required) and order details
Email Communication	Proton Mail	Responding to customer enquiries and providing customer support	Name, email address, message content and related correspondence
Email Marketing & Automation	Shopify Email and Shopify Flow	Sending newsletters, marketing emails, transactional communications and automating customer workflows	Email address, subscription status, marketing preferences and campaign interactions
Customer Support	Shopify Inbox	Providing customer support through live chat	Name, email address, chat messages and customer support history
Product Reviews	Judge.me	Collecting, managing and displaying customer reviews	Name (or display name), email address, review content, ratings and any images voluntarily submitted
Back-in-Stock Notifications & Pre-orders	Amp: Back in Stock & PreOrder+	Sending requested back-in-stock notifications and managing pre-orders	Email address, selected products, pre-order information and related notification preferences
Bookkeeping & Accounting	e-Boekhouden.nl and professional advisors where required	Accounting, bookkeeping, tax compliance and financial reporting	Invoice information, transaction details and customer information required for legal and accounting purposes
Website Analytics	Google Analytics	Understanding website usage and improving our website and services	Technical information, website usage data and cookie identifiers (subject to your consent)
Advertising Partners	Meta, TikTok and Pinterest	Measuring advertising performance and displaying personalised advertisements	Cookie identifiers, technical information and website interactions (subject to your consent)

We may also disclose personal data:

where required by law or by a competent public authority;
to establish, exercise or defend legal claims;
to prevent fraud or protect the security of our website, customers or business; or
in connection with a merger, acquisition, restructuring or sale of all or part of our business, where permitted by applicable law.

Cookies and Tracking Technologies

Our website uses cookies and similar technologies, including pixels, tags, local storage and other tracking technologies, to provide essential website functionality, improve your shopping experience, analyse website traffic and, where required by applicable law and subject to your consent, personalise advertising and measure the effectiveness of our marketing activities.

A cookie is a small text file that is stored on your device when you visit our website. Some cookies are essential for the operation of our website, while others help us understand how our website is used, remember your preferences, or enable us to provide more relevant advertising.

Strictly Necessary Cookies

These cookies are required for the operation, security and core functionality of our website. They cannot be disabled through our cookie consent banner because they are necessary for providing the services you request.

These cookies are used to:

maintain your shopping cart and customer session;
remember your login where applicable;
securely process purchases;
provide essential website functionality;
protect against fraud, abuse and security threats; and
remember your privacy preferences.

Legal basis: Performance of a contract (Article 6(1)(b) GDPR), where applicable, and our legitimate interest (Article 6(1)(f) GDPR) in operating a secure, reliable and functional website.

Analytics Cookies

Where required by applicable law and subject to your consent, we use analytics technologies to understand how visitors interact with our website. This helps us measure website performance, identify technical issues, improve navigation, optimise our product offering and enhance the overall customer experience.

We currently use Google Analytics together with analytics technologies provided through Shopify to better understand how our website is used.

Legal basis: Consent (Article 6(1)(a) GDPR).

Marketing and Advertising Technologies

Where required by applicable law and subject to your consent, we use marketing technologies provided by advertising partners such as Meta, TikTok and Pinterest.

These technologies help us to:

measure the effectiveness of our advertising campaigns;
understand how visitors interact with our website after viewing advertisements;
display more relevant advertisements across websites and social media platforms;
reduce repetitive advertisements; and
improve our marketing activities.

Legal basis: Consent (Article 6(1)(a) GDPR).

Shopify Technologies

Our online store is hosted by Shopify. Shopify uses certain cookies and similar technologies that are necessary to operate our website, maintain customer sessions, process purchases, remember shopping cart contents, support customer accounts and provide security features.

Depending on the Shopify features we use and, where required by applicable law, your cookie preferences, Shopify may also provide technologies that support analytics, customer communications, marketing features and other functionality that helps us operate and improve our online store.

Managing Your Cookie Preferences

When you first visit our website, you will be asked to set your cookie preferences through Shopify's consent management platform.

Where required by applicable law, non-essential cookies and similar technologies will only be activated after you have provided your consent.

You may accept, reject or customise your cookie preferences at any time through our cookie banner, where available. You may also manage or delete cookies through your browser settings independently of your choices made through our cookie banner. Please note that disabling certain cookies may affect the functionality of our website, including shopping cart features, customer accounts and other services.

International Data Transfers

Some of the service providers we use may process or store personal data outside the European Economic Area (EEA).

Where personal data is transferred outside the EEA, we ensure that an appropriate level of protection is provided in accordance with applicable data protection laws. Depending on the recipient and the country involved, this may include:

an adequacy decision issued by the European Commission;
the European Commission's Standard Contractual Clauses (SCCs);
participation in an approved international data transfer framework; or
another lawful transfer mechanism recognised under applicable data protection law.

We carefully select our service providers and take reasonable steps to ensure that they process personal data securely and in accordance with applicable privacy laws.

You may request further information about the safeguards we rely on for international data transfers by contacting us using the details provided in this Privacy Policy.

Data Retention

We retain personal data only for as long as necessary to fulfil the purposes described in this Privacy Policy, comply with our legal obligations, resolve disputes, enforce our agreements, establish, exercise or defend legal claims, or where otherwise permitted or required by applicable law.

The retention period depends on the type of personal data, the purpose for which it was collected, and the legal or regulatory obligations that apply.

In general:

Order and transaction information is retained for as long as necessary to fulfil our contractual obligations and comply with applicable accounting, bookkeeping and tax laws.
Customer account information is retained for as long as your customer account remains active. If you request deletion of your account, we will delete or anonymise your personal data unless we are required or permitted to retain certain information.
Newsletter subscription information is retained until you withdraw your consent or unsubscribe from our marketing communications.
Customer support enquiries, live chat conversations and email correspondence are retained for as long as reasonably necessary to provide support, maintain business records, resolve disputes, prevent fraud, establish, exercise or defend legal claims, or comply with legal obligations.
Product reviews may remain published until you request their removal, where applicable, or until they are removed in accordance with our review procedures.
Analytics and marketing information is retained in accordance with your cookie preferences and the retention settings of the relevant service providers.

Where retention periods are prescribed by law, we will retain the relevant personal data for the legally required period.

When personal data is no longer required, we will securely delete, anonymise or otherwise dispose of it, unless we are legally required or permitted to retain it.

Security

We implement appropriate technical and organisational measures designed to protect your personal data against accidental or unlawful destruction, loss, alteration, unauthorised disclosure or access.

While we take reasonable steps to safeguard your personal data, no method of transmitting information over the internet or storing electronic data can be guaranteed to be completely secure.

If we become aware of a personal data breach that is likely to result in a risk to your rights and freedoms, we will respond in accordance with applicable data protection laws.

Children's Privacy

Our website and products are intended for adults and are not directed at children.

We do not knowingly collect personal data from children. If you believe that a child has provided us with personal data, please contact us so that we can investigate and, where appropriate, delete the information in accordance with applicable law.

If we become aware that we have collected personal data from a child without an appropriate legal basis or any required parental consent, we will take appropriate steps to delete that information.

Your Privacy Rights

Subject to applicable data protection laws, including the GDPR/AVG, you may have the right to:

request access to the personal data we hold about you;
request correction of inaccurate or incomplete personal data;
request deletion of your personal data where applicable;
request restriction of the processing of your personal data;
object to the processing of your personal data where we rely on legitimate interests;
request a copy of your personal data in a structured, commonly used and machine-readable format where applicable;
withdraw your consent at any time where processing is based on your consent. This will not affect the lawfulness of processing carried out before your consent was withdrawn; and
lodge a complaint with your local data protection authority. If you are located in the Netherlands, you may lodge a complaint with the Dutch Data Protection Authority (Autoriteit Persoonsgegevens).

If you wish to exercise any of these rights, please contact us using the contact details provided below. We may request additional information to verify your identity before processing your request.

Changes to this Privacy Policy

We may update this Privacy Policy from time to time to reflect changes to our business, services, legal obligations or regulatory requirements.

When we make material changes, we will update the "Last Updated" date at the top of this Privacy Policy. Where required by applicable law, we will provide additional notice of significant changes.

We encourage you to review this Privacy Policy periodically to stay informed about how we collect, use and protect your personal data.