Privacy policy

PRIVACY POLICY

Last updated: 28 July 2026

Nook & Co. operates this store and website, including all related information, content, features, tools, products and services, in order to provide you, the customer, with a curated shopping experience (the "Services"). Nook & Co. is powered by Shopify, which enables us to provide the Services to you. This Privacy Policy describes how we collect, use, and disclose your personal information when you visit, use, or make a purchase or other transaction using the Services or otherwise communicate with us. If there is a conflict between our Terms of Service and this Privacy Policy, this Privacy Policy controls with respect to the collection, processing, and disclosure of your personal information.

Please read this Privacy Policy carefully. By using and accessing any of the Services, you acknowledge that you have read this Privacy Policy and understand the collection, use, and disclosure of your information as described here.

PERSONAL INFORMATION WE COLLECT OR PROCESS

We may collect or process the following categories of personal information, depending on how you interact with the Services, where you live, and as permitted or required by applicable law:

- Contact details including your name, billing address, shipping address, phone number, and email address.
- Financial information including payment card information, transaction details, and payment confirmation.
- Account information including your username, password, security questions, preferences and settings.
- Transaction information including items you view, add to cart, purchase, return, or cancel and your past transactions.
- Communications with us including the information you include in messages to us.
- Device information including information about your device, browser, network connection, IP address, and other unique identifiers.
- Usage information including how and when you interact with or navigate the Services.

PERSONAL INFORMATION SOURCES

We collect personal information from the following sources:
- Directly from you when you create an account, use the Services, communicate with us, or otherwise provide us your information.
- Automatically through the Services from your device, and through the use of cookies and similar technologies.
- From our service providers when they process your personal information on our behalf.
- From our partners or other third parties.

HOW WE USE YOUR PERSONAL INFORMATION

- Provide and improve the Services. To process payments, fulfil orders, manage your account, arrange shipping, handle returns and exchanges, and personalise your shopping experience.
- Marketing. To send you promotional emails and show you online advertisements for products or services based on your interests, where you've opted in or where permitted by law.
- Security and fraud prevention. To authenticate your account, secure our services, and detect or prevent fraud.
- Communicating with you. To provide customer support and respond to your enquiries.
- Legal reasons. To comply with applicable law, respond to legal process, and enforce our policies.

HOW WE DISCLOSE PERSONAL INFORMATION

- With Shopify, vendors and other service providers who perform services on our behalf (payment processing, data analytics, customer support, cloud storage, fulfilment, shipping).
- With business and marketing partners to advertise to you. You may have the right to opt out of targeted advertising depending on where you live.
- When you direct or consent to disclosure, such as to ship you products or via social media integrations.
- In connection with a business transaction such as a merger, or to comply with legal obligations, or to protect our rights and the rights of others.

RELATIONSHIP WITH SHOPIFY

The Services are hosted by Shopify, which collects and processes personal information about your access to and use of the Services in order to provide and improve them. Information you submit will be transmitted to and shared with Shopify and its third-party service providers, which may be located outside the country where you reside. To learn more about how Shopify uses your personal information and any rights you may have, visit the Shopify Consumer Privacy Policy at https://www.shopify.com/legal/privacy/app-users.

THIRD PARTY WEBSITES AND LINKS

The Services may link to websites operated by third parties. We are not responsible for the privacy or security of such sites. Please review their policies before providing any personal information.

CHILDREN'S DATA

The Services are not intended for children, and we do not knowingly collect personal information about children under 18. If you are a parent or guardian of a child who has provided us with personal information, please contact us to request deletion.

SECURITY AND RETENTION

No security measures are perfect. We recommend you do not use unsecured channels to send us sensitive information. We retain personal information for as long as needed to provide the Services, maintain your account, comply with legal obligations, or resolve disputes.

YOUR RIGHTS AND CHOICES

Depending on where you live, you may have the following rights:
- Right to access personal information we hold about you.
- Right to request deletion of personal information.
- Right to correct inaccurate personal information.
- Right to receive a copy of your personal information (portability).
- Right to opt out of targeted advertising or the sale of personal information.
- Right to manage marketing communication preferences via the unsubscribe link in our emails.

If you reside in the UK or European Economic Area, you additionally have:
- Right to object to or restrict processing of your personal information.
- Right to withdraw consent where we rely on it for processing.

To exercise any of these rights, contact us at hello@nookandco.co.uk. We may need to verify your identity before processing your request. We will not discriminate against you for exercising these rights.

COMPLAINTS

If you have complaints about how we process your personal information, please contact us at hello@nookandco.co.uk. You may also lodge a complaint with your local data protection authority. In the UK, this is the Information Commissioner's Office (ICO) at https://ico.org.uk. For the EEA, a list of authorities is available at https://edpb.europa.eu/about-edpb/about-edpb/members.

INTERNATIONAL TRANSFERS

We may transfer, store, and process your personal information outside the country you live in. If we transfer your personal information out of the UK or EEA, we rely on recognised transfer mechanisms such as the UK International Data Transfer Agreement or the European Commission's Standard Contractual Clauses.

CHANGES TO THIS PRIVACY POLICY

We may update this Privacy Policy from time to time to reflect changes to our practices or for other operational, legal, or regulatory reasons. We will post the revised Privacy Policy here, update the "Last updated" date, and provide notice as required by law.

CONTACT

For any questions about our privacy practices or this Privacy Policy, or to exercise any of your rights, email us at hello@nookandco.co.uk. For the purpose of applicable data protection laws, Nook & Co. is the data controller of your personal information.