PRIVACY POLICY

We recommend that you read this Privacy Policy before using our online store. By using our online store, you acknowledge that you have read and understood this Privacy Policy and that you understand how we collect, use and process your personal data.

At Nelle d. o. o., we respect your privacy and are committed to protecting your personal data. This Privacy Policy explains what personal data we collect, how we use it, with whom we may share it, and what rights you have in relation to the processing of your personal data.

This Privacy Policy applies to all users of the online store https://nelleapparel.com, as well as to all visitors, customers and other individuals who communicate with us through our website, email or other communication channels.

Our online store is hosted on the Shopify platform, which enables us to operate our online store, process orders and provide related services. In providing these services, Shopify may process certain personal data on our behalf, as described in more detail in this Privacy Policy.

If the provisions of this Privacy Policy conflict with the provisions of our Terms and Conditions, this Privacy Policy shall prevail with respect to the processing of personal data.

PERSONAL DATA CONTROLLER:

Nelle d. o. o.
Pregljeva ulica 3, 1230 Domžale, Slovenia
VAT ID: SI21313687
Registration number: 7494076000
Email: care@nelleapparel.com

The Controller processes personal data in accordance with Regulation (EU) 2016/679 (GDPR), the Slovenian Personal Data Protection Act (ZVOP-2), and other applicable personal data protection legislation.

Personal data means any information that identifies you or that can be directly or indirectly linked to you or another identifiable natural person. Personal data does not include anonymous information or information that has been properly anonymized so that an individual can no longer be identified.

Depending on how you use our online store, we may collect the following personal data:

Contact information, such as your first and last name, shipping address, billing address, telephone number and email address;
Payment and transaction information, such as your selected payment method, transaction details, payment confirmation and other information necessary to process your payment. We do not store payment card details, as these are processed by authorised payment service providers;
Account information, such as your login email address, password, account settings and preferences;
Order and purchase information, such as products you have viewed, products added to your shopping cart or wishlist, purchased products, returns, exchanges, cancelled orders and purchase history;
Communications with us, including the content of emails, messages submitted through contact forms or communications with customer support;
Technical device information, such as information about your device, browser, network connection, IP address and other unique device identifiers;
Information about your use of our online store, such as how and when you use the website, your navigation within the online store, content you view and other information relating to your use of our online store and services.

We may collect personal data from the following sources:

Directly from you, when you create an account, place an order, use our online store, contact us or otherwise provide us with your personal data;
Automatically through your use of our online store, via your device when you visit our website or use our services, and through the use of cookies and similar technologies;
From our service providers, where we engage them to provide certain technologies or where they collect or process your personal data on our behalf;
From our business partners or other third parties.

In addition to the Shopify platform, we also use the services of providers such as Judge.me, Klaviyo, Simple Invoice and My GLS Professional. These providers may process certain personal data on our behalf where necessary to provide their services.

Our online store uses cookies to ensure the proper functioning of the website, improve your user experience, analyse the use of our online store, and for marketing and advertising purposes.

We use the following categories of cookies on our online store:

Strictly Necessary Cookies: These cookies are essential for the proper functioning of our online store, including features such as user account login, shopping cart functionality, order processing, storing cookie preferences and ensuring website security. These cookies cannot be disabled.
Personalisation Cookies: These cookies store information about your preferences and actions on our online store, allowing us to provide a more personalised user experience during future visits.
Marketing Cookies: These cookies are used to optimise marketing communications, display personalised advertisements on our website and other websites, and measure the effectiveness of advertising campaigns. They are used by us and our partners, including Shopify, where you have provided your consent.
Analytics Cookies: These cookies help us understand how visitors use our online store. We use the information collected to improve the performance of our website, its content and the overall user experience.

Except for strictly necessary cookies, we use other cookies only with your prior consent. You may give, change or withdraw your consent at any time through the cookie settings available on our website.

Our online store uses both first-party cookies and third-party cookies that provide specific features or services.

COOKIE TABLE

COOKIE	PROVIDER	CATEGORY	PURPOSE	DURATION
_shopify_essential	Shopify	Strictly necessary	Ensures the proper functioning of the online store, including session management, order processing and security features.	1 year
localization	Shopify	Strictly necessary	Stores the user's language and region preferences to provide a more personalised user experience.	1 year
cart_currency	Shopify	Strictly necessary	Stores the selected currency to ensure that prices are displayed correctly and purchases can be completed.	14 days
_shop_app_essential	Shop.app (Shopify)	Strictly necessary	Ensures the proper functioning of Shop App and Shop Pay when these services are used by the user.	1 year

We process personal data on different legal bases, depending on the purpose of the processing. These include the performance of a contract or the implementation of measures at your request prior to entering into a contract, compliance with legal obligations, our legitimate interests (such as ensuring security, preventing fraud, improving our services and direct marketing where permitted), and your consent where required.

Depending on how you interact with us and the services you use, we may process your personal data for the following purposes:

Providing, personalising and improving our services: We use your personal data to provide our services, including performing the contract concluded with you, processing payments, fulfilling orders, storing your preferences and products you are interested in, sending notifications relating to your user account, processing purchases, returns, exchanges and other transactions, creating, maintaining and managing your user account, arranging delivery, processing returns and exchanges, enabling you to submit reviews, and providing a personalised user experience, for example by recommending products that may be of interest to you based on your previous purchases. We may also use your personal data to improve and personalise our services.
Marketing and advertising: We may use your personal data for marketing and promotional purposes, such as sending marketing, promotional and advertising communications by email, SMS or post, and displaying advertisements for our products or services on our online store or on other websites, including based on your previous purchases, products in your shopping cart or other activities when using our services. We send marketing communications on the basis of your consent or another appropriate legal basis where permitted by applicable law. You may unsubscribe from marketing communications at any time by clicking the unsubscribe link included in each communication.
Security and fraud prevention: We use your personal data to verify your user account, ensure secure payments and shopping, detect, investigate and prevent fraudulent, unlawful, dangerous or malicious activities, protect public safety and ensure the security of our services. If you create a user account, you are responsible for keeping your login credentials secure. We recommend that you do not share your login email address, password or other access credentials with anyone.
Communicating with you: We use your personal data to provide customer support, respond to your enquiries, deliver our services efficiently and maintain our business relationship with you.
Compliance with legal obligations: We use your personal data to comply with obligations imposed by applicable laws and regulations, or to respond to lawful requests from competent authorities, including courts and other public authorities, to participate in judicial or other legal proceedings, and to enforce or investigate potential breaches of our Terms and Conditions or other business rules.

We may disclose your personal data to third parties in certain circumstances in accordance with this Privacy Policy where necessary for legitimate purposes. This may include the following:

Service providers that perform services on our behalf, such as Shopify, Judge.me, Klaviyo, Simple Invoice, My GLS Professional and other providers of IT services, payment processing, analytics, customer support, data hosting, order fulfilment and delivery.
Business and marketing partners for the purpose of carrying out marketing activities and displaying advertisements. These partners process your personal data in accordance with their own privacy policies. Depending on the applicable legislation, you may have the right to object to such processing or request that your data is not used for personalised advertising.
Where you request or authorise the disclosure of your personal data to third parties, for example for the delivery of your order or when using social media login or other integrations.
In the event of the sale of our business, a merger, transfer of business, bankruptcy or another corporate transaction where the disclosure of personal data is necessary to complete such transaction.
Where disclosure is required by law or by a competent public authority, or where it is necessary to comply with legal obligations, protect our rights, establish, exercise or defend legal claims, enforce our Terms and Conditions, or protect the rights, safety or property of our users or other persons.

The Nelle online store is hosted on the Shopify platform. Shopify collects and processes personal data relating to your access to and use of the online store for the purpose of providing and improving its services.

The data you provide through our online store may be shared with Shopify and its service providers, who may be located in countries outside your country of residence where necessary to provide and improve these services.

To improve the performance of our online store and your user experience, we also use certain advanced features of the Shopify platform that involve the use of data collected through your use of our online store, as well as data relating to your interactions with other merchants using the Shopify platform.

To provide these features, Shopify may use personal data collected through your use of our online store, other stores on the Shopify platform and Shopify services. In these cases, Shopify acts as an independent controller of your personal data and is responsible for the processing of such data, including handling requests for the exercise of your data protection rights.

More information about how Shopify processes personal data is available here.

Our online store may contain links to websites or other online platforms operated by third parties.

If you visit such websites, we recommend that you review their privacy policies, security policies and other terms of use. We are not responsible for the content, security, accuracy, completeness or reliability of the information available on those websites.

Information that you submit on publicly accessible or partially public websites, including social media platforms, may be visible to other users of those platforms. The operators of those platforms are responsible for the processing of such data.

The inclusion of links to third-party websites does not imply that we endorse or recommend their content, products, services or operators, unless expressly stated otherwise.

Please note that no security measure can guarantee complete protection, and we cannot guarantee absolute security. Information you send to us over the internet may not be completely secure during transmission. We recommend that you do not use unsecured communication channels to transmit sensitive or confidential information.

The retention period for personal data depends on the purpose for which it was collected and our legal obligations. We retain personal data only for as long as necessary to provide our services, maintain your user account, comply with legal obligations, resolve disputes, establish, exercise or defend legal claims, or for other legitimate purposes. We retain invoices and other accounting records for the periods required under applicable tax and accounting laws. After the applicable retention period expires, we delete or anonymise personal data unless applicable law or another lawful basis requires or permits its continued retention.

CHILDREN'S PERSONAL DATA

Our online store is not intended for children. We do not knowingly collect personal data from children. If you believe that a child has provided us with personal data, please contact us so that we can delete such data where required.

In accordance with applicable legislation, in particular Regulation (EU) 2016/679 (GDPR), you have the following rights regarding the processing of your personal data. The exercise of these rights may be limited in certain cases where provided by law.

Right of access: You have the right to request confirmation as to whether we process your personal data and to obtain access to the personal data we hold about you.
Right to erasure: You have the right to request the deletion of your personal data where the conditions set out under applicable law are met.
Right to rectification: You have the right to request the correction of inaccurate personal data and the completion of incomplete personal data.
Right to data portability: Where provided by law, you may request a copy of your personal data in electronic form or request that it be transferred to another controller.
Right to opt out of marketing communications: If you have given your consent to receive marketing communications, you may withdraw it at any time by clicking the unsubscribe link included in each email or by contacting us. Even after you unsubscribe, we may still send you non-marketing communications, such as messages relating to your orders, user account or other contractual obligations.
Right to object and right to restriction of processing: Where provided by applicable law, you have the right to object to the processing of your personal data or request the restriction of its processing for certain purposes.
Right to withdraw consent: Where we process your personal data based on your consent, you may withdraw your consent at any time. The withdrawal of consent does not affect the lawfulness of processing carried out before the withdrawal.
Right to lodge a complaint with a supervisory authority: If you have a complaint regarding the way we process your personal data, you may contact us. You also have the right to lodge a complaint with the competent data protection supervisory authority.

EXERCISING YOUR RIGHTS

You may exercise your rights by contacting us at care@nelleapparel.com.

When exercising your rights, we may ask you to verify your identity for security purposes and to prevent misuse. If a request is submitted by an authorised representative, we may require appropriate proof of authorisation. We will respond to your requests within the time limits prescribed by applicable law.

Your personal data may be transferred, stored or otherwise processed outside your country of residence where necessary to provide our services.

Where personal data is transferred from the European Economic Area (EEA) to third countries, we ensure that such transfers are carried out in accordance with applicable data protection legislation. We use appropriate safeguards, such as the Standard Contractual Clauses adopted by the European Commission or other legally recognised transfer mechanisms, unless the data is transferred to a country for which the European Commission has adopted an adequacy decision.

We do not carry out automated decision-making or profiling that produces legal effects or similarly significant effects concerning individuals within the meaning of Article 22 of the GDPR.

We may update this Privacy Policy from time to time to reflect changes in our business, changes in applicable legislation or for other operational or regulatory reasons.

The current version of this Privacy Policy is available at https://nelleapparel.com/pages/privacy.

Last updated: 20 September 2026

If you have any questions regarding our Privacy policy, please contact us at care@nelleapparel.com.