Privacy policy

This policy explains what personal data NinaLoop3D collects when you shop with us, why, and who it's shared with.

Data controller

NinaLoop3D is a minor-run business. A parent/guardian acts as the data controller and holds the Stripe account and all legal agreements on the business's behalf.

What we collect

When you place an order, Stripe collects your name, email address, billing and shipping address, and payment details on our behalf during checkout. If you use the contact form, we collect your name, email address, and message.

Who we share it with

We use the following processors, each bound by a data processing agreement: Stripe (payments, order and address data), Postmark (transactional email, US-hosted, EU Standard Contractual Clauses in place), and Vercel (website hosting). None of these processors are used for marketing without your separate consent.

How long we keep it

Order and payment records are kept for as long as required by Irish tax and accounting law. Contact form messages are kept only as long as needed to answer your query.

Your rights

You can ask to see, correct, or delete the personal data we hold about you. To do this, use the contact form — requests are handled by the data controller (a parent/guardian), not by Nina directly.

Cookies

The shopping cart is stored in your browser's local storage, which is required for the site to work and doesn't need consent. We use Vercel Analytics, which is cookieless. Stripe Checkout sets its own cookies on Stripe's domain when you check out.