Privacy policy

1. Who We Are

Nest & Best LTD ("Nest & Best", "we", "us" or "our") operates the Nest & Best online store and related services. Our website is powered by Shopify.

For the purposes of applicable UK data protection law, Nest & Best LTD is the data controller of the personal information described in this Privacy Policy, except where another organisation acts as an independent controller for its own processing.

Company number: 16272499

Registered office: 102 Bradford Road, Dewsbury, England, WF13 2EW

Website: https://nestandbest.co.uk/

Email: info@nestandbest.co.uk

Telephone: +44 7554 557643

2. Personal Information We Collect

Depending on how you interact with us, we may collect or process the following categories of personal information:

·         Contact information, including your name, email address, telephone number, billing address and delivery address.

·         Account information, including account login details, preferences and settings where an account is created.

·         Order and transaction information, including products viewed or purchased, cart activity, order history, returns, exchanges, cancellations, payment status and delivery information.

·         Payment-related information, such as payment method, transaction reference and payment confirmation. Full payment card details are normally handled by our payment providers rather than stored by Nest & Best.

·         Customer service and communication information, including information you provide when you contact us, submit a form, make an enquiry, request support, or make a complaint.

·         Technical and device information, including IP address, browser type, device type, operating system, network information and similar identifiers.

·         Usage information, including pages viewed, products viewed, clicks, browsing activity, session information and how you interact with our website.

·         Marketing and preference information, including your marketing choices, cookie preferences and engagement with promotional communications.

3. How We Collect Personal Information

We may collect personal information:

·         Directly from you, for example when you place an order, create an account, sign up for updates, complete a form, contact us or request customer support.

·         Automatically when you use our website, including through cookies and similar storage or access technologies.

·         From Shopify and other service providers that help us operate our store, process payments, fulfil orders, prevent fraud, provide analytics, communicate with customers or deliver marketing.

·         From delivery partners, payment providers, marketing partners and other third parties where permitted by law.

4. How We Use Personal Information

We may use personal information to:

·         Process payments, accept and fulfil orders, arrange delivery, manage returns, refunds and exchanges, and provide order-related communications.

·         Create and manage customer accounts and remember relevant preferences.

·         Respond to enquiries, provide customer support and maintain our relationship with you.

·         Operate, maintain, personalise and improve our website, products and services.

·         Protect customers and our business, including detecting and preventing fraud, misuse, security incidents and other unlawful activity.

·         Send marketing or promotional communications where permitted by law and in accordance with your preferences.

·         Measure the performance of our website and marketing, where the relevant cookies or technologies are permitted.

·         Comply with legal, tax, accounting, regulatory and law-enforcement obligations and establish, exercise or defend legal claims.

5. Lawful Bases for Processing

Under UK data protection law, we must have a lawful basis for using personal information. Depending on the purpose, we may rely on:

·         Contract – where processing is necessary to enter into or perform a contract with you, such as processing and delivering your order.

·         Legal obligation – where we need to process information to comply with applicable legal, tax, accounting or regulatory requirements.

·         Legitimate interests – where processing is necessary for our legitimate business interests or those of a third party, and those interests are not overridden by your rights and freedoms. This may include improving our services, customer support, fraud prevention, website security and appropriate business administration.

·         Consent – where you have given consent, for example for certain direct marketing or non-essential cookies and similar technologies where consent is required.

Where we rely on consent, you may withdraw that consent at any time. Withdrawal does not affect the lawfulness of processing carried out before consent was withdrawn.

6. Payment Information

Payments are processed through Shopify and/or third-party payment providers made available through our store. We do not intentionally store full payment card numbers or card security codes on our own servers. Payment providers process payment information in accordance with their own privacy and security terms.

7. Sharing Personal Information

We may share personal information only where reasonably necessary for the purposes described in this Privacy Policy, including with:

·         Shopify and ecommerce platform providers.

·         Payment processors and payment service providers.

·         Delivery companies, couriers, fulfilment partners and assembly or service partners where relevant to your order.

·         Website hosting, IT, security, cloud storage, customer support and communication providers.

·         Analytics, advertising and marketing providers where permitted by law and subject to your cookie or marketing choices where applicable.

·         Professional advisers, such as accountants, insurers, legal advisers and auditors where necessary.

·         Government bodies, regulators, courts, law-enforcement authorities or other parties where disclosure is required or permitted by law.

·         A buyer, investor or successor in connection with a business sale, restructuring, merger or similar corporate transaction, subject to appropriate safeguards.

We do not sell personal information in the ordinary meaning of selling customer data for money.

8. Shopify and Other Service Providers

Our store is powered by Shopify. Shopify processes personal information about access to and use of our store in order to provide and improve the ecommerce services used by Nest & Best. Information submitted through our store may therefore be processed by Shopify and by service providers that support Shopify's platform.

For some Shopify features, Shopify may act as an independent controller for its own processing. You can learn more in Shopify's Consumer Privacy Policy and privacy controls at:

·         https://www.shopify.com/legal/privacy/consumers

·         https://privacy.shopify.com/en

9. Cookies and Similar Technologies

Our website uses cookies and similar technologies to operate the store, remember preferences, protect the website, understand how visitors use the site and, where permitted, support analytics and advertising.

Depending on the tools enabled on our store and your choices, these technologies may include:

·         Strictly necessary technologies required for core website, checkout, account, security and shopping-cart functions.

·         Preference technologies that remember settings and improve functionality.

·         Analytics technologies that help us understand website traffic and performance.

·         Advertising or marketing technologies that help measure campaigns or personalise advertising, where permitted.

Where consent is required, non-essential cookies or similar technologies will not be used until you have made the relevant choice. You can manage available cookie choices through the cookie banner or privacy settings on our website. You may also manage cookies through your browser, although blocking strictly necessary technologies may affect website functionality.

10. Marketing Communications

We may send you marketing communications about products, offers, news or updates where you have consented or where otherwise permitted by applicable law. You can opt out at any time by using the unsubscribe link in a marketing email or by contacting us.

Even if you opt out of marketing, we may still send service messages that are necessary for your orders, account, delivery, returns, security or customer support.

11. Data Retention

We keep personal information only for as long as reasonably necessary for the purpose for which it was collected, including to provide our products and services, maintain appropriate business and transaction records, comply with legal, tax and accounting requirements, resolve disputes, prevent fraud and enforce our agreements.

Retention periods vary according to the type of information, the nature of our relationship with you, applicable legal requirements and whether the information is needed to establish, exercise or defend legal claims. When personal information is no longer required, we will delete it, anonymise it, or otherwise dispose of it securely where reasonably practicable.

12. Data Security

We use reasonable technical and organisational measures designed to protect personal information against unauthorised access, loss, misuse, alteration or disclosure. However, no method of transmission over the internet or electronic storage is completely secure, and we cannot guarantee absolute security.

You are responsible for keeping any account credentials confidential and should not share passwords or other access details with other people.

13. International Transfers

Some of our service providers, including ecommerce, cloud, analytics, payment or marketing providers, may process personal information outside the United Kingdom.

Where a restricted international transfer is made, we use an appropriate transfer mechanism where required by UK law. This may include UK adequacy regulations, the UK International Data Transfer Agreement (IDTA), the UK Addendum to the EU Standard Contractual Clauses, or another legally recognised safeguard.

14. Your Data Protection Rights

Subject to applicable law and relevant exemptions, you may have the right to:

·         Request access to personal information we hold about you.

·         Request correction of inaccurate or incomplete personal information.

·         Request deletion of your personal information in certain circumstances.

·         Request restriction of processing in certain circumstances.

·         Object to certain processing, including certain processing based on legitimate interests and direct marketing.

·         Request data portability in certain circumstances.

·         Withdraw consent at any time where processing is based on consent.

·         Make a complaint about how we use your personal information.

To exercise a data protection right, contact us using the details in Section 19. We may need to verify your identity before completing a request. We will respond within the timescales required by applicable law.

15. Your Rights

Under applicable UK data protection law, you may have the right to:

·         Access your personal data

·         Request correction of inaccurate data

·         Request deletion of your data in certain circumstances

·         Object to or restrict certain processing activities

·         Request transfer of your data in certain circumstances

·         Withdraw consent at any time where processing is based on consent

You also have the right to lodge a complaint with the Information Commissioner's Office (ICO).

16. Children's Information

Our website and products are intended for adults purchasing household products and are not directed at children. We do not knowingly collect personal information from children where this would be unlawful. If you believe a child has provided personal information to us inappropriately, please contact us so that we can review and, where appropriate, delete the information.

17. Third-Party Websites

Our website may contain links to websites, applications or services operated by third parties. We are not responsible for the privacy practices, security or content of third-party services. You should review the privacy information provided by those third parties before providing personal information to them.

18. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes to our services, technologies, business practices or legal requirements. When we update the policy, we will publish the revised version on our website and update the 'Last updated' date.

19. Contact Us

If you have questions about this Privacy Policy, want to exercise a data protection right, or wish to make a data protection complaint, contact:

Data controller	Nest & Best LTD
Company number	16272499
Registered office	102 Bradford Road, Dewsbury, England, WF13 2EW
Email	info@nestandbest.co.uk
Telephone	+44 7554 557643

Website: https://nestandbest.co.uk/