Privacy policy
2. Privacy Policy
This Privacy Policy explains how Namelia processes personal data when you visit our online store, place an order, contact customer service, grant marketing consent or otherwise interact with us.
2.1 Data Controller
The person responsible for data processing is:
ARAUJO DIGITAL BUSINESS LLC
9380 SW 72nd St, Suite B 214, Miami, FL 33173, United States
Email: support@thenamelia.com
Telephone: +1 407 986 3418
Website: https://shopnamelia.com
2.2 What data we process
master and contact details, such as name, billing and delivery address, e-mail address and telephone number;
Order and contract data, such as products, variants, sizes, colours, personalisation details, order number, payments, refunds and communication;
personalization data, in particular the name provided by the customer, which is to be affixed to a product;
payment and transaction data, with complete payment instrument data generally processed by the respective payment service providers;
device, browser, protocol and usage data, such as IP address, device identifier, accessed pages, time stamps, clicks and interactions;
cookie and consent data;
Customer service and complaint data, including voluntarily submitted photos.
2.3 Purposes and Legal Basis
We process personal data in particular for the following purposes:
Contract initiation, order processing, personalisation, payment, shipping, return and customer service – for the fulfilment of a contract or pre-contractual measures;
fulfilment of legal obligations, in particular commercial, tax, consumer protection and product safety obligations;
Fraud prevention, IT security, error analysis, enforcement and defense of legal claims and improvement of our processes – based on legitimate interests, as far as your interests do not outweigh your interests;
Newsletter, personalized advertising, reach measurement and unnecessary cookies – based on your consent, if consent is required.
2.4 Personalization information and data of children
Our shop is aimed at adult buyers and not children. The name of a child entered for a personalized product is used exclusively to establish the desired personalization, to check, execute the order and, if necessary, to process complaints. Please do not submit any further data about the child that is not necessary for personalization.
2.5 Shopify
Our online shop is provided via Shopify. Shopify processes technical shop, customer, order and usage data to the extent necessary for the operation of the shop, security, payment processing and provision of the Shopify services. Depending on the function, Shopify may act as a processor or as an independent controller. Data may be processed within and outside the European Economic Area. According to Shopify, suitable data protection mechanisms are used for international transfers.
2.6 Payment service providers
Upon payment, the data required for the respective payment method are transmitted to the payment service provider selected in the checkout. Which payment methods are available depends, among other things, on the country, the device and the payment authorization. The respective payment service provider processes payment data according to its own data protection information and legal obligations.
2.7 Manufacturers, personalization and fulfillment partners
For production, personalization, quality inspection, packaging and shipping, we can transmit order and personalization data to commissioned manufacturers and fulfillment partners. These may be located outside the European Economic Area, in particular in China or other shipping countries. Only the data necessary for the execution of the order are transmitted, for example product, variant, personalization name and delivery data.
2.8 Shipping service providers
For delivery, we transmit the necessary recipient data to the respective shipping or logistics service provider used. Depending on the destination country and shipping route, different companies can be used.
2.9 Meta, Google and Microsoft Clarity
If you have consented, Meta, Google and Microsoft Clarity technologies can be used on our website. These services may process device, browser, usage, event and interaction data to measure advertising campaigns, form audiences, display ads, analyze errors and usage patterns and improve the website.
Unnecessary analytics and marketing technologies are activated for users in regions requiring consent only after your consent. You can change or revoke your selection at any time via the cookie settings.
Microsoft Clarity can capture interactions such as clicks, scroll movements, and page presentation. Forms and sensitive inputs must be technically configured so that content is not recorded inadmissibly.
2.10 Apps for personalization, upselling and other shop functions
We may use Shopify apps for product personalization, upselling, reviews, email communication, fraud prevention, customer service or other shop functions. These providers only receive the data necessary for their respective function. The specific list of currently used, cookie-relevant services is displayed in the cookie settings and must be updated when the app inventory changes.
2.11 Cookies and similar technologies
Technically necessary cookies and storage accesses are used to provide the shop, the shopping cart, the registration, security and functions expressly desired by you. For non-necessary cookies, analysis, marketing and comparable technologies, we obtain your prior consent to the extent required by law.
You can reject non-essential categories, revoke an already granted consent and change your selection via the cookie settings. The rejection of unnecessary technologies must not prevent the basic use of the shop.
2.12 Recipients and international data transfers
Recipients can in particular be Shopify, payment service providers, manufacturers, fulfillment partners, shipping companies, hosting and IT service providers, analytics and advertising providers, customer service and app providers as well as authorities or consultants, as far as this is necessary or required by law.
For transfers to countries without an adequacy decision, we use appropriate guarantees such as standard contractual clauses or other transfer mechanisms provided for by law. In certain cases, a transfer may be necessary to fulfill your contract, such as the production and delivery of a personalized order.
2.13 Storage time
We only store personal data for as long as this is necessary for the respective purposes. Order, contract, payment and invoice data can be stored for longer corresponding to applicable commercial, tax and proof obligations. We store complaint and communication data as long as this is necessary to process, provide proof or defend legal claims. Consent data is stored in order to be able to prove the granted or revoked consent.
2.14 Your rights
Insofar as the legal requirements are met, you have in particular the right to access, rectification, deletion, restriction of processing, data portability and objection to processing on the basis of legitimate interests. You can revoke a consent at any time with effect for the future.
To exercise your rights, contact us at support@thenamelia.com. To avoid unauthorized disclosure, we may request adequate proof of identity.
You also have the right to complain to a competent data protection supervisory authority, in particular in the Member State of your habitual residence, workplace or place of alleged infringement.
2.15 Automated tests
Payment and fraud prevention providers can automatically check transactions for risks. Namelia does not make an exclusively automated decision with legal or similar significant effect, unless you are expressly informed about it elsewhere.
2.16 Data security
We use appropriate technical and organisational measures to protect personal data from loss, misuse, unauthorised access, alteration and disclosure. However, absolutely secure data transmission or storage cannot be guaranteed.
2.17 Changes to this Privacy Policy
We may adjust this privacy policy if our services, apps, processing or legal requirements change. Relevant is the version published on the website.