Privacy Policy

Last updated: September 13, 2026

SHOP NIBBI operates this store and website, including all related information, content, features, tools, products and services, in order to provide you with a curated shopping experience (the “Services”).

SHOP NIBBI is powered by Shopify, which enables us to provide the Services to you.

This Privacy Policy explains how we collect, use, store and disclose your personal information when you visit or use our website, make a purchase, create an account, contact us or otherwise interact with our Services.

If there is a conflict between our Terms of Service and this Privacy Policy in relation to the collection, use or disclosure of personal information, this Privacy Policy will apply.

Please read this Privacy Policy carefully.

Personal Information We Collect

When we use the term “personal information”, we mean information that identifies you or can reasonably be linked to you.

Depending on how you interact with SHOP NIBBI, we may collect or process the following information:

• Contact information, including your name, email address, telephone number, billing address and delivery address.
• Payment and financial information, including payment method, payment confirmation and transaction information. Payment information may be processed directly by Shopify and our payment providers.
• Account information, including your username, password, preferences and account settings.
• Order and transaction information, including products you view, purchase, add to your basket or wishlist, return, exchange or cancel.
• Customer service communications, including information you provide when contacting us about an order, return, complaint or other enquiry.
• Device and technical information, including your IP address, browser, device type, operating system and network information.
• Website usage information, including how you browse and interact with our website and Services.
• Marketing preferences, including whether you have chosen to receive promotional communications from us.

These categories are consistent with the information listed in your current Shopify-generated policy.

How We Collect Personal Information

We may collect information:

• Directly from you, including when you place an order, create an account, subscribe to marketing, contact us or otherwise provide information to us.
• Automatically, including through cookies and similar technologies when you visit and use our website.
• From Shopify and our service providers, where they provide technology, payment, fulfilment, analytics, customer-support or other services on our behalf.
• From business partners and other third parties, where permitted by applicable law.

 

How We Use Your Personal Information

We may use your information to:

Provide and Fulfil Our Services

This includes:

• Processing and fulfilling your orders
• Processing payments
• Arranging delivery
• Processing returns, refunds and exchanges
• Maintaining your customer account
• Remembering your preferences
• Providing product recommendations
• Providing customer support
• Sending information relating to your order or account

Improve SHOP NIBBI

We may use information about how customers interact with our store to improve our website, products, customer experience and Services.

Marketing and Advertising

Where permitted, we may use personal information to:

• Send promotional emails or other marketing communications
• Inform you about new products, offers and promotions
• Personalise product recommendations
• Provide or support personalised advertising

You can unsubscribe from promotional emails at any time using the unsubscribe link included in our marketing emails.

Security and Fraud Prevention

We may process information to:

• Protect customer accounts
• Secure payments and transactions
• Detect and prevent fraud
• Investigate suspicious or unlawful activity
• Protect SHOP NIBBI, our customers and our Services

Communicating With You

We use your information to respond to enquiries, provide customer service and communicate with you about orders, returns, refunds and other matters.

Legal and Regulatory Requirements

We may process personal information where necessary to:

• Comply with applicable laws
• Maintain legally required records
• Respond to lawful requests from regulators, courts or law-enforcement authorities
• Establish, exercise or defend legal claims
• Enforce our policies and Terms of Service

These purposes reflect those already set out in your existing policy.

Our Lawful Bases for Processing

Where UK data-protection law applies, we process personal information only where we have a lawful basis.

Depending on the circumstances, these may include:

Contract: where processing is necessary to enter into or perform a contract with you, such as processing an order, taking payment, delivering goods or handling a return.

Legitimate interests: where processing is necessary for our legitimate business interests and those interests are not overridden by your rights, such as improving our Services, protecting our business, preventing fraud and providing relevant product recommendations.

Consent: where you have given us permission to process your information for a particular purpose, such as certain forms of direct marketing or non-essential cookies.

Legal obligation: where we need to process information to comply with a legal or regulatory requirement.

Where we rely on consent, you can withdraw your consent at any time.

The ICO states that UK privacy information should identify the purposes and lawful bases for processing.

Cookies and Similar Technologies

SHOP NIBBI and Shopify may use cookies and similar technologies when you visit our website.

Cookies may be used to:

• Operate essential website and checkout functions
• Remember products in your basket
• Remember your preferences
• Maintain website security
• Understand how customers use our website
• Improve website performance
• Support analytics
• Support marketing and personalised advertising where applicable

Some cookies are strictly necessary for our website to function and may not require consent.

Where required by law, we will ask for your consent before placing non-essential cookies or similar technologies on your device.

You should be able to manage your cookie preferences through the cookie-consent controls provided on our website.

The ICO states that users should be told about cookies and their purposes and that non-essential cookies generally require valid consent.

How We Share Personal Information

We may disclose personal information where necessary to operate our business and provide our Services.

Recipients may include:

• Shopify
• Payment processors
• Delivery and fulfilment providers
• IT and hosting providers
• Customer-support providers
• Analytics providers
• Marketing and advertising partners
• Professional advisers
• Government authorities or regulators where legally required

We may also disclose information:

• Where you specifically request or consent to the disclosure
• In connection with a business sale, restructuring, merger or similar transaction
• To comply with legal obligations
• To protect our legal rights or the rights and safety of others

Your existing policy already identifies Shopify, payment, analytics, fulfilment, shipping and marketing partners as potential recipients.

Our Relationship With Shopify

Our store is hosted and powered by Shopify.

Shopify processes personal information relating to your access to and use of our store in order to provide its platform and related services.

Information you provide through our store may therefore be transmitted to and processed by Shopify and other service providers, including providers located outside the country in which you live.

Shopify may also process information obtained from interactions with our store and other Shopify merchants in connection with certain enhanced Shopify features.

Where Shopify independently determines how it processes personal information for its own purposes, Shopify may act as a separate controller of that information.

You can learn more by reviewing the Shopify Consumer Privacy Policy and Shopify's Privacy Portal.

 

Third-Party Websites

Our website may contain links to websites, social-media platforms or services operated by third parties.

We are not responsible for the privacy, security, accuracy or content of third-party websites.

If you leave our website through a third-party link, we recommend reviewing that organisation's privacy policy before providing personal information.

 

Children's Privacy

Our Services are not intended specifically for children, and we do not knowingly collect personal information from children who are below the applicable age of majority without appropriate authorisation.

If you are a parent or guardian and believe that a child has provided personal information to us, please contact us so that we can review and, where appropriate, delete that information.

 

Security

We take reasonable organisational and technical measures designed to protect personal information.

However, no method of transmission over the internet or electronic-storage system can be guaranteed to be completely secure.

You should avoid sending sensitive or confidential information through insecure communication channels.

 

How Long We Keep Your Information

We retain personal information only for as long as reasonably necessary for the purposes for which it was collected.

The length of time may depend on factors including:

• How long your customer account remains active
• Whether the information is required to fulfil an order
• Our legal and accounting obligations
• Fraud-prevention requirements
• The need to resolve disputes
• The need to enforce our agreements and policies

 

Your Privacy Rights

Depending on where you live and applicable law, you may have rights including:

Right of Access

You may request access to personal information we hold about you.

Right to Correction

You may ask us to correct personal information that is inaccurate or incomplete.

Right to Deletion

You may ask us to delete certain personal information, subject to legal exceptions.

Right to Restrict Processing

In certain circumstances, you may ask us to restrict how we process your information.

Right to Object

You may object to certain types of processing, including certain processing based on legitimate interests and direct marketing.

Right to Data Portability

In certain circumstances, you may request a copy of information you provided to us in a portable format or ask us to transfer it to another organisation.

Right to Withdraw Consent

Where processing is based on your consent, you can withdraw that consent at any time.

Withdrawal does not affect the lawfulness of processing carried out before consent was withdrawn.

Marketing Preferences

You can unsubscribe from promotional emails at any time by using the unsubscribe link contained in those communications.

You may still receive non-marketing communications relating to orders, payments, security or your account.

Your existing policy already describes access, deletion, correction, portability, objection, restriction and consent-withdrawal rights for UK and EEA customers.

Exercising Your Rights

To exercise any applicable privacy right, please contact:

shopnibbi@gmail.com

We may need to verify your identity before completing your request.

We will respond within the timeframe required by applicable law.

You will not be discriminated against for exercising your privacy rights.

International Transfers

We, Shopify and our service providers may transfer, store or process personal information outside the country where you live.

Where personal information is transferred outside the United Kingdom or European Economic Area and applicable law requires safeguards, appropriate transfer mechanisms may be used, including approved standard contractual clauses or transfers to countries recognised as providing an adequate level of protection.

 

Complaints

If you have concerns about how SHOP NIBBI handles your personal information, please contact us first at:

shopnibbi@gmail.com

We will try to investigate and resolve your concern.

If you are located in the United Kingdom and remain dissatisfied, you have the right to make a complaint to the Information Commissioner's Office (ICO).

Information Commissioner's Office
Wycliffe House
Water Lane
Wilmslow
Cheshire
SK9 5AF
United Kingdom

Telephone: 0303 123 1113

The ICO specifically recommends that UK organisations inform individuals of their right to complain to the ICO and provide its contact details.

Customers located in the European Economic Area may also have the right to complain to the relevant supervisory authority in their country.

Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes to:

• Our business
• Our Services
• Shopify functionality
• Our privacy practices
• Legal or regulatory requirements

When we make changes, we will update the Last updated date at the beginning of this policy and provide any additional notice required by law.

 

Contact Us

If you have questions about this Privacy Policy, our privacy practices or your personal information, please contact:

SHOP NIBBI

Email: shopnibbi@gmail.com

Address:
53 Saddlecote Close
Manchester
M8 5QE
United Kingdom

For the purposes of applicable data-protection law, SHOP NIBBI is the data controller of personal information processed through our store except where another organisation, such as Shopify, acts as an independent controller for particular processing activities.