Handmade 🤍 packed & shipped by me

    Privacy Policy

    Last updated: November 24, 2025

    Introduction

    Welcome to Nura Nails. Your privacy is important to us and we comply with the General Data Protection Regulation (GDPR). When you visit our website (nuranails.nl), make a purchase or provide data to us in any other way, we process certain personal data from you.

    In this privacy policy, we explain what data we collect, why we use it and how we protect it. We handle your information carefully and store it securely. Have questions or want to know what information we have about you? Please feel free to contact us.

    We may update this privacy policy from time to time, for example in case of changes to our services or relevant legislation. We recommend that you check this page regularly to stay informed of any changes.

    Company Details

    Nura Nails is the controller for the processing of personal data as described in this privacy policy (the data controller within the meaning of the GDPR). Our company details are as follows:

    • Company name: Nura Nails
    • Chamber of Commerce number: 98943464

    Nura Nails sells luxury press-on nails through a webshop that runs on Shopify. For questions about this privacy policy, please contact us using the contact details at the bottom of this document.

    What data do we collect?

    We collect various types of personal data, depending on how you use our services. This may include:

    Identification and contact details

    Such as your name, address (billing and delivery address), email address and phone number. You provide this information when placing an order or creating an account.

    Account data

    If you create an account on our website, we process login credentials such as username and password (stored encrypted), as well as preferences or settings linked to your account.

    Order data

    Information about the products you order from us, including selected items, size/variants, order number, order and delivery date and any comments you provide with the order.

    Payment data

    To process payments, we process data such as your payment method, transaction reference and payment status. Sensitive payment data is processed directly by our payment providers.

    Communication data

    Content of any communication with you. For example, if you send us an email or fill out the contact form, we may keep that correspondence and contact details.

    Marketing data

    If you sign up for our newsletter or marketing communications, we collect your name and email address. You can always unsubscribe.

    Automatically collected data

    When you visit our website, our systems and cookies automatically collect certain technical data, such as your IP address, browser type and which pages you view.

    We usually obtain the above data directly from you. In some cases we receive data through third parties – for example payment confirmations via our payment provider.

    Why do we collect this data?

    We only process your personal data for clear and legitimate purposes. Below we explain why we use certain data:

    For order and delivery

    We need your name, address and contact details to process your order and deliver the products to you. Without this data we cannot fulfill the purchase agreement.

    For payments and administration

    We use your payment data to securely process the payment and record which orders have been paid. We also keep invoice data for our financial administration.

    For customer service

    If you contact us with questions, comments or complaints, we use the information you provide to help and respond to you.

    For account functionality

    We process your login and profile data so you can easily log in and view your order history.

    For marketing (with consent)

    If you give us permission, we use your email address to send you occasional news, offers or tips. You can always unsubscribe.

    For website improvement and analysis

    Data about how the site is used helps us optimize our services. Where possible, we use anonymized data for this.

    For security and fraud prevention

    We may use personal data to prevent fraud and protect your account.

    We process your data based on the following legal grounds under the GDPR: performance of a contract, consent, legal obligation, and legitimate interest.

    We do not keep your personal data longer than necessary. Some data must be kept for 7 years due to legal obligations for tax administration.

    Sharing data with third parties

    We never sell your personal data to third parties for commercial purposes. However, it may be necessary for our service provision to share data with so-called third parties:

    Website platform – Shopify

    Our webshop runs on the e-commerce platform Shopify. All data you enter on our site is stored on Shopify's servers. Shopify is GDPR-compliant and uses Standard Contractual Clauses for international data transfer.

    Payment processors

    To process payments, we share necessary data with, for example, iDEAL Wero, credit card companies, PayPal or Klarna. These parties are GDPR-compliant.

    Delivery and logistics partners

    To deliver your order to you, we share your name, delivery address and possibly email address/phone number with our shipping partners such as PostNL or DHL.

    Email and communication providers

    We use external services for our email and other communications. Transactional emails are sent via Shopify or a linked email service.

    Newsletter and marketing services

    For sending newsletters, we may use a specialized email marketing service. You will only receive such emails if you have explicitly given permission.

    With all these third parties, we have concluded processor agreements where necessary and made clear agreements about the use and protection of your data.

    Cookies

    Our website uses cookies and similar technologies. A cookie is a small text file that is stored on your device when you visit. Below we explain the types of cookies we use:

    Functional cookies (necessary)

    These are cookies that are essential for the operation of the website. They ensure, for example, that you can save items in your shopping cart and remain logged in. We always place these cookies – no consent is required for this.

    Analytical cookies

    These cookies collect information about how visitors use our website. At this time, no third-party analytical cookies are placed without your consent.

    Marketing cookies (tracking cookies)

    These are cookies used to recognize you and show relevant advertisements. We currently do not place marketing cookies without your consent.

    Current situation: At this time we ONLY use functional cookies and NO analytical or marketing cookies.

    As soon as we want to deploy additional cookies, we will clearly inform you and ask for your consent before these cookies are placed.

    You can always manage and/or delete cookies yourself via your web browser settings.

    Your rights

    Under the GDPR, you have various privacy rights. We believe it's important that you can easily exercise these rights. Below we briefly explain them:

    Right of access

    You have the right to see what personal data we process about you. We will then provide you with an overview of the data we have about you.

    Right to rectification

    If it turns out that we have incorrect or incomplete data about you, you have the right to have it corrected.

    Right to erasure (right to be forgotten)

    In certain cases, you can ask us to delete your personal data. Sometimes we may or must not immediately delete data due to legal obligations.

    Right to restriction of processing

    You have the right in certain situations to indicate that we temporarily restrict the processing of your personal data.

    Right to object

    You may object to certain processing of your personal data. In particular, you have the absolute right to object to direct marketing.

    Right to data portability

    This right means that in certain cases you can receive your personal data from us in a structured format, so you can easily pass that data to another service provider.

    Right to withdraw consent

    In cases where we process your personal data based on your consent, you always have the right to withdraw that consent.

    Right to lodge a complaint

    If you believe that we do not handle your personal data correctly, you can file a complaint with the Dutch Data Protection Authority (autoriteitpersoonsgegevens.nl).

    You can easily exercise these rights by contacting us. In principle, we respond as quickly as possible, at the latest within one month to your request.

    Security

    We take the security of your personal data very seriously. We have taken appropriate technical and organizational measures to protect your data against loss, misuse or unauthorized access.

    Our website uses a secure SSL connection. This means that the data you enter is transmitted encrypted. Personal data is stored in secure databases.

    Within our own organization, we ensure that personal data is only accessible to employees who need it for their work. We keep our software and systems up to date to prevent security vulnerabilities.

    Should a security incident (data breach) occur despite all precautions that has adverse consequences for your privacy, we will report this according to legal requirements to the Dutch Data Protection Authority and – if required – also inform you.

    Contact

    Do you have any questions after reading this privacy policy or do you want to exercise one of your privacy rights? Please feel free to contact us. We are here to help you.

    Contact details for privacy matters:

    Thank you for your trust in Nura Nails. We hope you can shop with peace of mind, knowing that your privacy is in good hands with us!