Privacy Policy

Effective Date: 14 July 2025

1. Who We Are

NOLATI, LTD, (“we”, “us”, or “our”) is an e-commerce clothing brand based in the United Kingdom. We are committed to protecting your privacy and handling your personal data in accordance with the UK General Data Protection Regulation (UK GDPR), the Data Protection Act 2018, and the Data Use and Access Act 2025 (DUAA).

2. What Personal Data We Collect

We may collect and process the following types of personal data:
- Identity Data: name, username, date of birth
- Contact Data: billing address, delivery address, email, phone number
- Payment Data: card details (processed securely via third-party payment providers)
- Transaction Data: purchase history, order details
- Technical Data: IP address, browser type, device identifiers
- Marketing Preferences: opt-in/opt-out status for emails and SMS

3. How We Use Your Data

We use your data to:
- Process and deliver your orders
- Manage your account
- Communicate with you about your purchases
- Send marketing communications (with your consent)
- Improve our website and services
- Comply with legal obligations

4. Legal Bases for Processing

We rely on the following lawful bases:
- Contractual necessity – to fulfill your orders
- Consent – for marketing communications
- Legitimate interests – to improve our services and prevent fraud
- Legal obligation – to comply with tax and regulatory requirements

5. Children’s Data

We do not knowingly collect data from children under 13. If we learn that we have collected such data, we will delete it promptly.

6. Cookies and Tracking

We use cookies to enhance your browsing experience. Non-essential cookies are only used with your consent. You can manage your cookie preferences at the bottom of this page via ‘Manage Cookies.’

7. Data Sharing

We may share your data with:
- Payment processors (e.g., Stripe, PayPal)
- Delivery partners (e.g., Royal Mail, DPD)
- IT and marketing service providers
- Legal and regulatory authorities when required

We do not sell your personal data.

8. International Transfers

If we transfer your data outside the UK, we ensure appropriate safeguards are in place, such as Standard Contractual Clauses or adequacy decisions.

9. Your Rights

You have the right to:
- Access your data
- Correct inaccurate data
- Request deletion (“right to be forgotten”)
- Object to or restrict processing
- Withdraw consent at any time
- Lodge a complaint with the Information Commissioner’s Office (ICO)

10. Data Retention

We retain your data only as long as necessary for the purposes outlined above, or as required by law.

11. Contact Us

If you have questions or wish to exercise your rights, contact us at:

Email: info@nolati.com