Privacy policy

Last updated: February 10, 2026

Overview

I operate NL Arts and this store and website, including all related information, content, features, tools, products, and services (the “Services”), in order to provide you with a curated shopping experience. My store is powered by Shopify, which enables me to provide the Services to you.

This Privacy Policy describes how I collect, use, and disclose your personal information when you visit, use, or make a purchase or other transaction using the Services, or otherwise communicate with me. If there is a conflict between my Terms of Service and this Privacy Policy, this Privacy Policy will apply with respect to the collection, processing, and disclosure of your personal information.

Please read this Privacy Policy carefully. By accessing or using any of the Services, you acknowledge that you have read and understood this Privacy Policy and how your information is collected, used, and disclosed.

Personal Information I Collect or Process

When I use the term “personal information,” I am referring to information that identifies or can reasonably be linked to you or another person. Personal information does not include information that is collected anonymously or de-identified.

Depending on how you interact with the Services, where you live, and as permitted or required by law, I may collect or process the following categories of personal information:

Contact details, including your name, billing and shipping address, phone number, and email address.
Financial information, including payment card details, transaction details, payment confirmations, and other payment information (processed securely by payment providers).
Account information, such as usernames, passwords, preferences, and settings.
Transaction information, including items viewed, added to cart or wishlist, purchased, returned, exchanged, or cancelled.
Communications, including information you provide when contacting me for customer support.
Device information, such as browser type, IP address, and unique device identifiers.
Usage information, including how you interact with or navigate the Services.

Sources of Personal Information

I may collect personal information from the following sources:

Directly from you, when you create an account, place an order, contact me, or otherwise provide your information.
Automatically, through cookies and similar technologies when you use or visit the Services.
From service providers, who process personal information on my behalf.
From partners or third parties, where permitted by law.

How I Use Your Personal Information

I may use your personal information for the following purposes:

Providing and Improving the Services

To process payments, fulfil orders, manage accounts, arrange shipping, handle returns or exchanges, send order notifications, enable reviews, remember preferences, and improve or personalise the shopping experience.

Marketing and Advertising

To send promotional communications by email, text, or post, and to display relevant advertising on this store or other websites, based on your activity and preferences. You may opt out of marketing communications at any time.

Security and Fraud Prevention

To authenticate accounts, secure transactions, detect and prevent fraud or malicious activity, and protect the integrity of the Services.

Communicating with You

To respond to enquiries, provide customer support, and maintain our business relationship.

Legal Compliance

To comply with applicable laws, respond to lawful requests, enforce policies, or protect my rights and the rights of others.

How I Disclose Personal Information

I may disclose personal information in the following circumstances:

With Shopify, service providers, and vendors who support payment processing, fulfilment, shipping, analytics, customer support, and IT services.
With marketing and advertising partners, in accordance with their privacy policies.
When you direct or consent to the sharing of your information (e.g. shipping providers or social integrations).
In connection with legal obligations, business transactions, or to protect the Services and users.

Relationship with Shopify

The Services are hosted by Shopify. Shopify collects and processes personal information about your access to and use of the Services in order to provide and improve them. Information submitted through the Services may be shared with Shopify and third parties located outside your country.

Shopify may process personal information collected from interactions with my store and other merchants to provide enhanced features. In these cases, Shopify acts as the data controller for that processing.

To learn more about Shopify’s privacy practices or to exercise rights related to data processed by Shopify, please visit:
https://privacy.shopify.com/en

Third-Party Websites and Links

The Services may include links to third-party websites or platforms. I am not responsible for the privacy practices or content of those sites. Please review their policies before providing any personal information.

Children’s Data

The Services are not intended for use by children, and I do not knowingly collect personal information from individuals under the age of majority. If you believe a child has provided personal information, please contact me so it can be deleted.

Security and Retention

No security measures are completely secure, and I cannot guarantee absolute security. How long personal information is retained depends on legal, contractual, and operational requirements.

Your Rights and Choices

Depending on your location, you may have rights to access, correct, delete, or receive a copy of your personal information, or to object to or restrict certain processing.

If you are located in the UK or EEA, you may also have the right to withdraw consent or object to processing in certain circumstances.

You may exercise your rights by contacting me using the details below. I may need to verify your identity before processing your request.

Complaints

If you have concerns about how your personal information is handled, please contact me. You may also have the right to lodge a complaint with your local data protection authority.

International Transfers

Your personal information may be transferred, stored, or processed outside your country. Where required, appropriate safeguards such as Standard Contractual Clauses will be used.