Privacy Policy

Last updated: 28 July 2026.

Who Is Responsible

Nooshline is the controller for personal data handled through Nooshline Studio. Privacy and customer-data requests can be sent to the published customer-service email address or through the contact form.

What This Policy Covers

This privacy policy explains how Nooshline collects, uses, stores, and shares personal data when customers browse the website, create an account, place an order, contact customer service, join Nooshline Circle, save products, submit reviews, subscribe to the newsletter, or interact with Nooshline marketing.

Personal Data We Collect

Nooshline may collect customer name, email address, phone number, billing and delivery address, order history, payment status, delivery notes, support messages, return requests, saved products, loyalty activity, coupon activity, reviews, communication preferences, account login details, fraud-prevention signals, device data, cookie data, and basic website analytics.

For newsletter subscriptions, Nooshline stores the email address, optional name, subscription status, consent wording, consent date and the page where the subscription was submitted.

Payment Data

Payment details are handled by WooPayments and its payment partners. Nooshline does not store full card numbers, card security codes, bank-login details, or payment secrets in WooCommerce, order notes, support tickets, documents, or email threads.

How We Use Personal Data

We use personal data to operate the shop, process orders, arrange delivery, manage returns and refunds, provide customer support, maintain accounts, show saved products, operate loyalty rewards, detect fraud or abuse, improve the website, send transactional messages, comply with legal and accounting duties, and send marketing only where permitted.

Legal Bases

Nooshline uses personal data where it is needed to perform or prepare an order contract, meet legal and accounting obligations, protect the shop against fraud or abuse, respond to customer requests, improve the store, or where the customer has given consent for optional marketing such as the newsletter.

Newsletter, Email, And Marketing

Customers can choose to receive studio updates, new-piece notes, care tips or marketing updates by email. Newsletter emails are sent only when the customer has subscribed or where another legal permission applies. Customers can withdraw optional marketing consent at any time. Operational order, payment, delivery, account, support and safety emails may still be required to complete an order or answer a request.

Sharing Personal Data

Personal data may be shared only as needed with WooCommerce, WordPress and Automattic service providers; WooPayments and its payment partners; PostNL or another carrier selected for the order; hosting, security and email providers; Google where consented measurement or Merchant Center services are used; Cloudflare for security and aggregate web analytics; accountants, legal advisers and public authorities where required by law.

On a valid order-confirmation page, the Google Customer Reviews opt-in module may receive the order number, customer email address, delivery country and estimated delivery date so that Google can offer the customer an optional post-delivery survey. The customer chooses whether to opt in.

International Processing

Some service providers may process data outside the Netherlands or European Economic Area. Where this happens, Nooshline relies on an applicable adequacy decision, standard contractual clauses, or another lawful transfer safeguard provided by the service provider.

Retention

Order, invoice, payment-status and other tax-administration records are normally kept for 7 years to meet Dutch tax obligations. Support, delivery, return and complaint records are normally kept for up to 2 years after the matter is resolved, unless a longer period is needed for a legal claim or statutory duty. Account data is kept while the account is active and is deleted or anonymised after a valid deletion request except where retention is legally required. Newsletter data is kept until consent is withdrawn; a minimal suppression or consent record may be retained where needed to honour that withdrawal or demonstrate compliance. Security and fraud-prevention records are kept only as long as reasonably necessary for the relevant risk or investigation.

Security

Nooshline uses WordPress and WooCommerce access controls, secure hosting, SSL, limited admin access, and approved service providers to protect customer data. No online system can be guaranteed completely secure, so customers should use strong passwords and contact Nooshline if they suspect account misuse.

Customer Rights

Customers may request access, correction, deletion, restriction, objection, portability, withdrawal of optional marketing consent, or information about how their data is used, subject to applicable law and records Nooshline must keep. Customers can also complain to the Dutch Data Protection Authority (Autoriteit Persoonsgegevens).

Cookies And Analytics

The website uses Cloudflare Web Analytics for cookie-free aggregate traffic statistics. Google Analytics and advertising storage are denied by default and are enabled only when the visitor makes the relevant consent choice. Essential cookies and similar storage are used for the cart, checkout, account login, security, performance and fraud prevention. Disabling essential storage may prevent parts of the shop from working.

Contact

Privacy and customer-data requests can be submitted through the published email address or contact form. Nooshline may need to verify identity before acting on sensitive account or order requests.