Privacy Policy

This Privacy Policy explains how nopdodf.shop collects, uses, stores and shares personal information when customers visit https://nopdodf.shop, create an account, place an order, contact us or otherwise interact with our services.

For the purposes of applicable UK data protection law, nopdodf.shop is the controller of the personal information described in this policy unless another organisation is expressly identified as an independent controller.

Store: nopdodf.shop
Website: https://nopdodf.shop
Privacy email: KalscheuerMajcher@gmail.com
Address: 94 Albert Square, London, E15 1HH, United Kingdom

We process personal information in accordance with applicable UK data protection law, including the UK General Data Protection Regulation and the Data Protection Act 2018.

1. Personal Information We Collect

Depending on how you use our website, we may collect the following categories of personal information.

Identity and contact information

• Full name

• Billing address

• Delivery address

• Email address

• Telephone number

• Customer account details

Order and transaction information

• Products ordered

• Order number

• Purchase value

• Currency

• Payment status

• Delivery method

• Tracking information

• Returns and refunds

• Customer service communications

• Payment disputes

Payment information

Payments may be processed by independent payment service providers.

We may receive limited payment information such as payment status, selected payment method, card type and the final digits of a payment card.

We do not normally receive or store complete payment card numbers.

Device and technical information

• IP address

• Browser type

• Device type

• Operating system

• Time zone

• Language settings

• Cookie identifiers

• Website activity

• Referring pages

• Security and diagnostic information

Marketing and preference information

• Marketing choices

• Cookie preferences

• Product interests

• Communication history

• Responses to promotions or surveys

Information provided by customers

We may collect information contained in emails, contact forms, product reviews, return requests, privacy requests, complaints and other communications.

Customers should not send sensitive personal information unless it is reasonably necessary for us to handle a specific request.

2. How We Collect Information

We may collect personal information:

• Directly from customers

• Automatically through our website and permitted technologies

• From Shopify and services used to operate the store

• From payment processors

• From delivery and fulfilment providers

• From fraud-prevention and security providers

• From analytics and marketing providers where permitted

• From publicly available sources where lawful and necessary

3. How We Use Personal Information

We may use personal information to:

• Create and manage customer accounts

• Process and confirm orders

• Take and verify payments

• Arrange fulfilment and delivery

• Provide tracking information

• Process cancellations, returns and refunds

• Respond to enquiries and complaints

• Prevent fraud and unauthorised transactions

• Maintain website and account security

• Keep accounting, tax and transaction records

• Improve website performance and customer experience

• Analyse store activity where permitted

• Send marketing communications where legally permitted

• Establish, exercise or defend legal claims

• Comply with legal and regulatory obligations

4. Lawful Bases

Depending on the activity, we rely on one or more of the following lawful bases.

Contract

Processing may be necessary to take steps at a customer’s request before entering into a contract or to perform our contract with the customer.

This includes processing orders, payments, deliveries, cancellations, returns and refunds.

Legal obligation

Processing may be necessary to comply with accounting, tax, consumer protection, fraud prevention, product safety and regulatory requirements.

Legitimate interests

Processing may be necessary for legitimate business interests, including securing the website, preventing fraud, improving services, maintaining business records and responding to enquiries.

We rely on legitimate interests only where those interests are not overridden by the individual’s rights and freedoms.

Consent

We may rely on consent for non-essential cookies, certain analytics technologies and electronic marketing.

Consent may be withdrawn at any time. Withdrawal does not affect processing that was lawful before consent was withdrawn.

5. Shopify

Our online store is hosted using Shopify.

Shopify may process personal information to provide store hosting, checkout, payment, security, analytics and other e-commerce functions.

Shopify may act as a processor on behalf of nopdodf.shop or as an independent controller for certain processing activities.

Shopify’s handling of personal information is also governed by its applicable privacy documentation.

6. Sharing Personal Information

We may share personal information with service providers where necessary, including:

• Shopify and e-commerce technology providers

• Payment processors and banks

• Suppliers, warehouses and fulfilment centres

• Postal operators and delivery companies

• Website hosting and IT providers

• Security and fraud-prevention providers

• Customer support providers

• Analytics and marketing providers where permitted

• Professional advisers, auditors and insurers

• Government bodies, regulators, courts and law enforcement where legally required

Service providers may use personal information only for authorised purposes and must protect it appropriately.

Information may also be disclosed in connection with a legitimate merger, acquisition, restructuring, financing or sale of business assets, subject to appropriate safeguards.

nopdodf.shop does not sell personal information in the ordinary meaning of selling customer data for money.

7. International Transfers

Some service providers may process personal information outside the United Kingdom.

Where UK personal information is transferred internationally, an appropriate transfer mechanism will be used where required.

This may include:

• UK adequacy regulations

• The UK International Data Transfer Agreement

• The UK Addendum to approved contractual clauses

• Another transfer mechanism permitted under UK law

8. Data Retention

We retain personal information only for as long as reasonably necessary for the purpose for which it was collected.

Retention periods may depend on:

• The duration of the customer relationship

• Contractual requirements

• Accounting and tax obligations

• Fraud-prevention requirements

• Product safety or recall requirements

• Applicable limitation periods

• Actual or potential disputes

• Legal or regulatory instructions

When information is no longer required, it will be deleted, anonymised or securely restricted unless continued retention is legally required.

9. Cookies and Similar Technologies

Our website may use cookies and similar technologies for:

• Essential store and checkout functions

• Shopping basket functions

• Account authentication

• Website security

• Fraud prevention

• Remembering customer preferences

• Website measurement and analytics

• Advertising and marketing where permitted

Strictly necessary cookies may operate without consent where legally permitted.

Non-essential analytics, advertising and marketing technologies should not be activated until the user has made an appropriate choice through the website’s cookie consent controls.

Customers may change their choices through the available cookie settings or browser controls.

Disabling essential cookies may prevent parts of the website from operating correctly.

10. Marketing Communications

We may send electronic marketing where:

• The customer has given valid consent

• An applicable marketing exception permits the communication

• Another lawful basis is available under applicable law

Customers may unsubscribe at any time by using the unsubscribe link in a marketing message or by emailing KalscheuerMajcher@gmail.com.

Order confirmations, payment notices, delivery updates, return messages, refund confirmations and security communications are service messages rather than marketing messages.

11. Data Protection Rights

Subject to applicable conditions and exemptions, individuals may have the right to:

• Request access to personal information

• Request correction of inaccurate information

• Request completion of incomplete information

• Request deletion of personal information

• Request restriction of processing

• Object to processing based on legitimate interests

• Object to direct marketing

• Request data portability

• Withdraw consent

• Request information about international transfer safeguards

• Challenge certain decisions based solely on automated processing

To exercise a right, email:

KalscheuerMajcher@gmail.com

We may request information reasonably necessary to verify the identity of the requester.

We will respond within the period required by applicable law. This period may be lawfully extended where a request is complex or numerous.

Customers will not normally be charged for exercising a data protection right. A reasonable fee may be charged, or a request may be refused, where permitted by law because the request is manifestly unfounded or excessive.

12. Automated Fraud Prevention

We and our service providers may use automated systems to identify transactions presenting potential fraud, payment or security risks.

Where a decision produces legal or similarly significant effects and is based solely on automated processing, the affected person may have additional rights, including the right to request human review where applicable.

13. Information Security

We use reasonable administrative, technical and organisational measures intended to protect personal information from unauthorised access, alteration, disclosure, loss or misuse.

No online system can guarantee absolute security.

Customers are responsible for protecting their account passwords and should contact us promptly if they believe an account or payment method has been compromised.

14. Children’s Information

Our services are not directed at children who are unable to enter into a legally binding purchase contract.

We do not knowingly collect personal information from children contrary to applicable law.

If you believe a child has improperly provided personal information, contact KalscheuerMajcher@gmail.com.

15. Third-Party Websites

Our website may contain links to websites or services operated by other organisations.

Those organisations are responsible for their own privacy and security practices. Customers should review the relevant privacy information before providing personal information.

16. Privacy Complaints

Questions or complaints about the handling of personal information should be sent to:

Email: KalscheuerMajcher@gmail.com
Address: 94 Albert Square, London, E15 1HH, United Kingdom

Individuals also have the right to complain to the UK Information Commissioner’s Office.

Information about submitting a complaint is available at:

https://ico.org.uk/make-a-complaint/

We would appreciate the opportunity to address a concern first, but individuals are not required to contact us before contacting the Information Commissioner’s Office.

17. Changes to This Policy

We may update this Privacy Policy to reflect changes in our services, technology, business practices or legal obligations.

The latest version will be published on https://nopdodf.shop with an updated revision date.

Material changes will be communicated where required by law.

Last updated: 6 October 2026