Privacy policy
Privacy Policy
Last updated: June 28, 2025
Nalhaa operates this store and website, including all information, content, features, tools, products, and services, to provide you with a personalized shopping experience (the “Services”). Nalhaa is a store powered by Shopify, which enables us to provide you with the Services.
This Privacy Policy explains how we collect, use, and disclose your personal data when you access or use the Services, make a purchase, or contact us in any way.
In the event of any conflict between our Terms of Service and this Privacy Policy, this Policy will prevail regarding the collection, processing, and disclosure of your personal data.
Please read this Privacy Policy carefully. By accessing or using our Services, you confirm that you have read and understood it.
Personal Data We Collect or Process
“Personal data” means information that identifies you or can reasonably be linked to you. It does not include anonymized or de-identified data.
Depending on your interaction with the Services and applicable law, we may collect the following categories of personal data:
- Contact Information: name, address, billing and shipping address, phone number, email.
- Financial Data: credit and debit cards, bank accounts, payment confirmations, payment method, transaction details.
- Account Data: username, password, security questions, preferences, settings.
- Transactional Data: products viewed, added to cart or wishlist, purchased, returned, exchanged, or canceled.
- Communications: messages to customer service, inquiries, comments.
- Device Data: IP address, browser type, network, unique identifiers.
- Usage Data: access times and modes, activities performed.
Sources of Personal Data
- Directly from you: when you create an account, place an order, or contact us.
- Automatically via the Services: through your device or cookies.
- Service providers: when processing data on our behalf.
- Business partners or third parties.
How We Use Your Personal Data
- To provide and improve the Services: process orders, payments, returns, send notifications, suggest products.
- Marketing and advertising: send promotional emails, SMS, or personalized ads based on your site activity.
- Security and fraud prevention: protect accounts, detect suspicious activity.
- Direct communication: respond to requests, customer support.
- Legal obligations: respond to legal requests, disputes, investigations, or regulatory duties.
Sharing Your Personal Data
- With Shopify: which manages the technical infrastructure and supports personalized advertising.
- With service providers: for payments, data analysis, shipping, hosting, etc.
- With advertising partners: to show you relevant ads.
- With your request or explicit consent.
- Within our corporate group or in case of mergers/business transfers.
- With competent authorities, as required by law.
Relationship with Shopify
The Services are hosted by Shopify. Some advanced features use data derived from your interaction with our Boutique and other merchants. In such cases, Shopify acts as data controller. Refer to their Consumer Privacy Policy for details. You may exercise your data rights directly via Shopify’s Privacy Portal.
Third-Party Sites and Links
The Services may contain links to third-party sites. We recommend reviewing their privacy and security policies. We are not responsible for the content or data protection on these sites.
Children’s Data
The Services are not intended for minors. We do not knowingly collect data from children. If you are a parent/guardian and believe your child has provided personal data, contact us for removal.
Data Security and Retention
No system is completely secure. Do not transmit sensitive data via unsecured channels. We retain data only as long as necessary to provide Services, meet legal obligations, or resolve disputes.
Your Rights
Depending on your residence, you may have the right to:
- Access your personal data
- Correct inaccurate information
- Request deletion
- Obtain a copy (portability)
- Restrict or object to processing
- Withdraw consent, where applicable
You can exercise these rights via the Services or by writing to: support@nalhaa.com
Shopify manages data rights related to personalized advertising. See https://privacy.shopify.com/fr.
You will not be penalized for exercising your rights. We may need to verify your identity for security reasons.
Complaints
For complaints, you can contact us or reach out to the data protection authority in your country. For the EU, a list of authorities is available here.
International Data Transfers
Your data may be transferred outside your country. If you reside in the EU or UK, we ensure appropriate safeguards (e.g., EU Commission Standard Contractual Clauses).
Changes to This Privacy Policy
We may update this notice at any time for legal, operational, or service reasons. The date of the last update will always be shown at the top.
Contact
For any questions about this Policy or how we use your data, please contact us at:
📩 support@nalhaa.com

