Privacy policy

Privacy Policy

nestrae.shop

salebuys-store (“we”, “us”, “our”) operates nestrae.shop. This policy explains how we collect, use, and protect your personal data, in accordance with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

Data we collect

  • Contact details: name, email, phone number, billing and shipping address
  • Order details: items purchased, order value, payment confirmation (we do not store full card numbers — this is handled by our payment processor)
  • Technical data: IP address, browser type, device information, cookies
  • Marketing preferences, if you opt in

How we use your data

  • To process and fulfil your orders
  • To communicate with you about your order (confirmations, shipping updates, support)
  • To send marketing emails, only if you've opted in — you can unsubscribe anytime
  • To improve our website and prevent fraud
  • To comply with legal and tax obligations

Legal basis for processing

We process your data under the following bases: performance of a contract (fulfilling your order), consent (marketing communications), and legitimate interests (fraud prevention, site improvement).

Sharing your data

We share data only with third parties who help us run the store, including:

  • Payment processors (e.g. Shopify Payments, PayPal, Stripe)
  • Shipping carriers, to deliver your order
  • Email/marketing platforms, if you've opted in
  • Analytics providers (e.g. Google Analytics)

We do not sell your personal data.

Cookies

We use cookies to keep your cart working, remember preferences, and understand site traffic. You can control cookies through your browser settings. See our [Cookie Policy] for details if you have a separate one.

Data retention

We keep order and customer data for as long as needed to fulfil legal, accounting, and tax requirements (typically 6 years under UK tax law), then delete or anonymise it.

International transfers

If any of our service providers are based outside the UK/EEA, we ensure appropriate safeguards are in place (such as Standard Contractual Clauses).

Your rights

Under UK GDPR, you have the right to:

  • Access the personal data we hold about you
  • Correct inaccurate data
  • Request deletion of your data
  • Object to or restrict processing
  • Data portability
  • Withdraw consent for marketing at any time

To exercise any of these rights, email support@salebuys-store@myshopify.com You also have the right to lodge a complaint with the UK Information Commissioner's Office (ICO) at ico.org.uk.

Contact

Questions about this policy: privacy@nestrae.shop