Privacy policy
Nopli SAS
The purpose of this privacy policy
The purpose of this privacy policy is to inform users of our site about the personal data we will collect and the following information, if applicable:
The personal data we will collect
How we use the data we collect
Who has access to the data collected
The rights of users of the site
The site's cookie policy
This privacy policy operates in conjunction with our site's terms and conditions of use.
Data Controller and Roles
For the purposes of the General Data Protection Regulation (GDPR):
Nopli SAS acts as the publisher and operator of the Site and as the primary data controller for the processing of personal data carried out in connection with the operation of the platform.
MUD Jeans International B.V. acts as a brand partner with a limited role and may act as an independent data controller for specific processing activities related to Gift Cards and its own commercial operations.
Each party processes personal data independently for its own purposes, except where otherwise specified.
Applicable laws
In accordance with the General Data Protection Regulation (GDPR), this privacy policy complies with the following regulations.
Personal data must be:
- processed lawfully, fairly and transparently with regard to the data subject (lawfulness, fairness, transparency);
- collected for specified, explicit and legitimate purposes and not further processed in a way incompatible with those purposes;
- adequate, relevant and limited to what is necessary for the purposes for which they are processed (data minimisation);
- accurate and, where necessary, kept up to date;
- kept in a form which permits identification of data subjects for no longer than is necessary for the purposes for which they are processed (limitation of storage);
- processed in such a way as to ensure appropriate security of personal data (integrity and confidentiality).
Processing shall be lawful only if and insofar as at least one of the following conditions is met:
- the data subject has consented to the processing of his or her personal data for one or more specific purposes;
- the processing is necessary for the performance of a contract;
- processing is necessary for compliance with a legal obligation;
- processing is necessary to protect vital interests;
- processing is necessary for the purposes of the legitimate interests pursued by the controller.
Consent
Users agree that by using our site, they consent to: the terms and conditions set out in this privacy policy; and the collection, use and retention of the data listed in this policy.
Where required by applicable law, specific, informed, and freely given consent will be requested, in particular in relation to cookies, analytics technologies, and marketing communications.
Personal data we collect
Data collected automatically
When you visit and use our site, we may automatically collect and store the following information:
IP address
Links a user clicks while using the site
Content that the user views on your site
Data collected non-automatically
We may also collect the following data when you perform certain functions on our site:
- Name
- First name
- Phone
- Postal address
This data may be collected through account registration.
We may also collect transaction-related data necessary for the processing of orders and payments. Payment data is processed securely by our payment service provider Stripe.
Please note that we only collect data that helps us achieve the purpose stated in this privacy policy. We will not collect any additional data without informing you first.
How we use personal data
Personal data collected on our site will only be used for the purposes specified in this policy or as indicated on the relevant pages of our site.
The data we collect automatically is used for the following purposes:
statistics
site performance improvement
Data we collect when the user performs certain functions may be used for the following purposes:
- account management
- order processing
- communication with users
- customer support
Legal basis for processing
Personal data is processed on the following legal bases:
- performance of a contract (account creation, orders, transactions)
- legitimate interest (site improvement, fraud prevention)
- legal obligation (accounting, compliance)
- consent where required (cookies, marketing)
With whom we share personal data
International Data Transfers
Certain service providers or partners used by Nopli may process personal data outside the European Economic Area (“EEA”).
Where personal data is transferred outside the EEA, appropriate safeguards are implemented in accordance with applicable data protection laws, including, where applicable, the European Commission’s Standard Contractual Clauses or any equivalent lawful transfer mechanism.
Employees
We may disclose to any member of our organisation such user data as they reasonably require to fulfil the purposes set out in this policy.
Third Parties
We may share User Data with the following third parties:
MUD Jeans International B.V. (for Gift Card management and related operations)
Stripe (payment processing)
Boxtal (shipping services)
Third parties will not be able to access user data beyond what is reasonably necessary to achieve the given purpose.
Other Disclosures
We will not sell or share your data with third parties, except in the following cases:
- if required by law
- if it is required for any legal proceedings
- to prove or protect our legal rights
- to purchasers or potential purchasers of this company
If you follow hyperlinks from our site to another site, please note that we are not responsible for their privacy policies.
How we protect your personal data
Stored in a secure database, to which only authorized personnel have access.
We implement appropriate technical and organisational measures to protect personal data.
However, although we implement appropriate security measures, no method of transmission over the Internet or method of electronic storage is completely secure, and we cannot guarantee absolute security.
Data retention
Personal data is retained only for as long as necessary for the purposes for which it was collected, including:
- account data: duration of the account + 3 years
- transaction data: up to 10 years (legal obligation)
- support requests: up to 3 years
Minors
Persons under the age required by applicable national law (generally between 13 and 16 years old, and 16 years old in certain jurisdictions) are considered minors.
Where required by applicable law, personal data relating to minors may only be collected and processed with the consent of a parent or legal representative.
Your rights as a user
Under the GDPR, users have the following rights:
- right of access
- right of rectification
- right to erasure
- right to restrict processing
- right to data portability
- right of objection
Users also have the right to lodge a complaint with a supervisory authority.
How to amend, delete or challenge the data collected
If you would like your information deleted or amended in any way, please contact:
Nopli will respond within the timeframes required by applicable law.
Cookie Policy
Where required by applicable law, cookies other than those strictly necessary for the operation of the Site are only placed after obtaining the User’s prior consent through a cookie banner or consent management platform.
Users may accept, refuse, or modify their consent preferences at any time.
The Site may use the following categories of cookies:
-
strictly necessary cookies;
-
functional cookies;
-
analytical cookies;
-
targeting or advertising cookies.
Users may also manage cookie preferences through their browser settings.
Refusing certain cookies may affect the proper functioning of some Site features.
Changes
This privacy policy may be amended from time to time.
Users will be informed of significant changes where required.
Contact
If you have any questions, please contact: