Privacy policy
What we collect when you visit or order, why, and what you can ask us to do with it. Last updated 29 September 2026.
Who is responsible
The data controller is:
[name: to fill]
[address: to fill]
VAT number: [vat: to fill]
Email: nookncoshop@gmail.com
What we collect and why
| Data | Why | Legal basis (GDPR) |
|---|---|---|
| Name, delivery address, email, phone number (if given), what you ordered | To deliver your order, send tracking and handle returns | Contract, art. 6(1)(b) |
| Order and invoice records | Accounting and tax obligations | Legal obligation, art. 6(1)(c) |
| Messages you send us | To answer you | Contract or legitimate interest, art. 6(1)(b)/(f) |
| Web server logs (IP address, browser, pages requested) | Security and fixing errors | Legitimate interest, art. 6(1)(f) |
| Page views and clicks, counted without cookies and without storing your IP address | To see which products people look at and improve the shop | Legitimate interest, art. 6(1)(f) |
Card details are entered on Stripe's payment page and go directly to Stripe. We never receive them.
Who we share it with
- Stripe (payments), under its own privacy policy as a data controller for payment data.
- Our fulfilment partner, AliExpress (Alibaba Group), and the carriers they use. They receive your name, delivery address and phone number so they can pack and deliver your order. Some of them are outside the EU, including in China. This transfer is necessary to carry out the contract you asked for (GDPR art. 49(1)(b)).
- Our email provider, to send order confirmations and tracking emails.
- Tax authorities and our accountant, when the law requires it.
We don't sell your data and we don't share it with advertisers.
Cookies
This site doesn't use advertising or tracking cookies. If we ever add some, we'll ask for your consent first.
How long we keep it
- Order and invoice records: 10 years, as Italian law requires (art. 2220 of the Civil Code).
- Messages about an order: up to 2 years after the order, unless there's an open issue.
- Web server logs: 14 days.
Your rights
You can ask us for a copy of your data, to correct it, to delete it (where we don't have to keep it by law), to restrict or object to how we use it, and to receive it in a portable format. Write to nookncoshop@gmail.com. We answer within one month. You can also complain to a data protection authority. In Italy that is the Garante per la protezione dei dati personali (garanteprivacy.it).