Privacy Policy
Last updated: June 15, 2026
1. Who We Are
This Privacy Policy applies to the online store nevorest.com. You can contact us at support@nevorest.com.
We are committed to protecting your personal data and complying with the General Data Protection Regulation (GDPR) and applicable Polish and EU data protection laws.
2. What Data We Collect
When you interact with our store, we may collect the following personal data:
When you place an order:
- Full name
- Email address
- Delivery address
- Phone number (if provided)
- Payment information (processed securely by Stripe — we do not store card details)
- Order history
When you contact us:
- Name and email address
- Content of your message
Automatically when you visit our website:
- IP address
- Browser type and version
- Pages visited and time spent
- Referring website
- Device type
- Cookie data (see Section 7)
3. Why We Collect Your Data (Legal Bases)
We process your personal data for the following purposes and on the following legal bases:
| Purpose | Legal Basis |
|---|---|
| Processing and fulfilling your orders | Performance of a contract (Art. 6(1)(b) GDPR) |
| Sending order confirmations and shipping updates | Performance of a contract (Art. 6(1)(b) GDPR) |
| Handling complaints and returns | Performance of a contract / Legal obligation (Art. 6(1)(b)(c) GDPR) |
| Complying with tax and accounting obligations | Legal obligation (Art. 6(1)(c) GDPR) |
| Improving our website and services | Legitimate interests (Art. 6(1)(f) GDPR) |
| Sending marketing emails (if you opt in) | Consent (Art. 6(1)(a) GDPR) |
4. Who We Share Your Data With
We share your data only where necessary with trusted third parties:
- Stripe — payment processing. Stripe's privacy policy: https://stripe.com/privacy
- Shipping carriers — to deliver your order (name, address, phone number)
- Email service providers — to send order confirmations and customer service emails
- Hosting providers — for website infrastructure
- Fulfillment and logistics partners — your name and delivery address are shared with our fulfillment and logistics partners solely for the purpose of processing and shipping your order. This data is not used by these partners for any other purpose.
We do not sell your personal data to any third party.
If we are required to share data with public authorities (e.g., tax authorities, law enforcement), we will do so only to the extent required by law.
5. International Data Transfers
Your order and delivery details may be processed by our global fulfillment network and logistics partners to ensure successful delivery of your order. We share only the minimum data necessary (name and delivery address) and solely for the purpose of order fulfillment.
6. How Long We Keep Your Data
We retain your personal data only as long as necessary:
| Data Type | Retention Period |
|---|---|
| Order data (name, address, order details) | 5 years (tax/accounting legal requirement) |
| Customer service correspondence | 1 year after resolution |
| Website analytics data | Up to 12 months |
| Marketing email consent | Until you withdraw consent |
After the retention period, your data is securely deleted or anonymized.
7. Cookies
Our website uses cookies — small text files stored on your device. We use the following types:
- Essential cookies — required for the website to function (shopping cart, session management). No consent required.
- Analytics cookies — help us understand how visitors use our site (e.g., Google Analytics). Used only with your consent.
- Marketing cookies — used to show relevant advertising. Used only with your consent.
You can manage your cookie preferences through our cookie banner or your browser settings. Withdrawing consent does not affect the lawfulness of processing before withdrawal.
8. Your Rights Under GDPR
You have the right to access, correct, delete, or restrict the processing of your personal data, as well as the right to data portability and to lodge a complaint with your national data protection authority. To exercise any of these rights, contact us at support@nevorest.com.
9. Data Security
We take appropriate technical and organizational measures to protect your personal data against unauthorized access, loss, or disclosure. These include:
- HTTPS encryption on our website
- Secure payment processing via Stripe (PCI DSS compliant)
- Access controls limiting who can access your data
- Regular security reviews
No method of transmission over the internet is 100% secure. In the event of a data breach that affects your rights and freedoms, we will notify you and the relevant supervisory authority as required by law.
10. Children's Privacy
Our store is not intended for children under the age of 16. We do not knowingly collect personal data from children. If you believe we have inadvertently collected data from a child, please contact us at support@nevorest.com and we will delete it promptly.
11. Changes to This Privacy Policy
We may update this Privacy Policy from time to time. The current version will always be available at nevorest.com/privacy-policy. We will notify you of significant changes via email or a notice on our website.
12. Contact
If you have any questions, requests, or concerns about this Privacy Policy or how we handle your data, please contact us:
Nevorest is operated by Michał Romaniuk
Chmielna 73B lok. 14, 00-801 Warsaw, Poland
Email: support@nevorest.com
We aim to respond to all privacy-related inquiries within 30 days.