Datenschutzerklärung

Privacy Policy

Last updated: September 20, 2026

This Privacy Policy explains how Nimbyo (“Nimbyo,” “we,” “us,” or “our”) collects, uses, discloses, and otherwise processes personal information when you visit, access, use, or make a purchase through our website (the “Site”), or otherwise communicate with us in connection with the Site and our services (collectively, the “Services”).

For purposes of this Privacy Policy, “you” and “your” means any individual who visits or uses the Services, including customers, website visitors, and individuals whose personal information we otherwise process in connection with the Services.

Nimbyo operates from the Netherlands and serves customers in the United States, the European Union, and other international locations.

Please read this Privacy Policy carefully to understand how we handle personal information.

1. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes to our business practices, the Services, applicable laws, or regulatory requirements.

When changes are made, we will update the “Last updated” date at the top of this Privacy Policy and publish the revised version on the Site.

Where required by applicable law, we will provide additional notice or obtain consent for material changes.

2. Personal Information We Collect

The types of personal information we collect depend on how you interact with the Services.

Information You Provide Directly

You may provide personal information when you:

  • Place an order

  • Create or use a customer account

  • Contact customer support

  • Subscribe to marketing communications

  • Submit a form or otherwise communicate with us

  • Participate in promotions, surveys, reviews, or other activities

This information may include:

  • Name

  • Billing address

  • Shipping address

  • Email address

  • Telephone number

  • Account information and login credentials

  • Order and transaction information

  • Customer service communications

  • Information you voluntarily provide to us

You may choose not to provide certain information. However, some information may be necessary to process an order, provide requested services, respond to inquiries, or perform other functions of the Site.

Information Collected Automatically

When you visit or interact with the Site, we may automatically collect certain technical and usage information.

This may include:

  • IP address

  • Browser type and version

  • Device type and identifiers

  • Operating system

  • Time zone

  • Referring URLs

  • Pages viewed

  • Products viewed

  • Shopping activity

  • Interaction and usage information

  • Approximate location information derived from technical data

  • Cookie and similar tracking information

This information may be collected through cookies, pixels, tags, server logs, and similar technologies.

Information We Receive From Third Parties

We may receive personal information from third parties that support our business and Services, including:

  • Shopify and Shopify-related services

  • Payment processors and payment service providers

  • Shipping and logistics providers

  • Analytics providers

  • Advertising and marketing platforms

  • Fraud prevention and security providers

  • Customer support and communication providers

  • Fulfillment and other service providers

Information received from third parties may be combined with information collected directly from you or automatically through the Site.

3. How We Use Personal Information

We may use personal information for purposes including:

  • Processing and fulfilling orders

  • Processing payments

  • Providing customer support

  • Communicating with you about orders, products, and Services

  • Managing customer accounts

  • Shipping and delivering purchases

  • Processing returns, refunds, and payment disputes

  • Preventing fraud, unauthorized transactions, and abuse

  • Maintaining the security of the Site

  • Detecting and investigating suspicious activity

  • Improving and optimizing the Site and Services

  • Understanding how customers interact with our Site

  • Measuring advertising and marketing performance

  • Providing relevant advertising and promotional content

  • Sending marketing communications where permitted by law

  • Complying with legal, tax, accounting, and regulatory obligations

  • Enforcing our Terms of Service and other policies

  • Protecting our rights, property, customers, and business

  • Supporting a merger, acquisition, restructuring, financing, or sale of business assets

4. Legal Bases for Processing

If you are located in the European Economic Area, we process personal information under one or more applicable legal bases under the General Data Protection Regulation (GDPR).

These may include:

Performance of a Contract

We may process information where necessary to process orders, provide products and Services, communicate with you about your purchase, process returns and refunds, and otherwise perform our obligations under a transaction or agreement.

Legal Obligations

We may process information where necessary to comply with applicable legal, tax, accounting, regulatory, or other legal obligations.

Legitimate Interests

We may process information where necessary for our legitimate business interests, including operating and improving the Site, preventing fraud and abuse, maintaining security, protecting our business, handling customer communications, analyzing performance, and conducting direct marketing where permitted by law.

Consent

Where required by law, we rely on your consent for certain activities, including certain non-essential cookies, tracking technologies, and marketing communications.

Where processing is based on consent, you may withdraw that consent at any time, subject to applicable law and any limitations associated with the relevant processing activity.

5. Payment Processing

Payments made through the Site may be processed by Shopify Payments and other payment providers made available through the checkout.

We generally do not have access to or store complete payment card numbers.

Payment providers may independently process certain personal information in connection with payment processing, fraud prevention, security, regulatory compliance, and other legally permitted purposes.

Payment providers may also process information as independent controllers for certain activities. Their respective privacy policies may therefore apply to their processing of your information.

6. Fraud Prevention and Automated Processing

We may use automated tools, fraud prevention services, and risk assessment systems to help detect potentially fraudulent, unauthorized, or abusive activity.

These systems may evaluate information associated with an order or interaction, including transaction information, device or network information, account information, order characteristics, and other relevant signals.

Depending on the circumstances, automated or partially automated assessments may result in additional verification, an order being delayed or declined, or other security measures.

Where required by applicable law, you may have rights relating to automated decision-making, including rights to obtain information about relevant processing, request human intervention, or challenge a decision.

7. How We Share Personal Information

We may disclose personal information to third parties where reasonably necessary for the purposes described in this Privacy Policy.

These parties may include:

  • Shopify and Shopify-related service providers

  • Payment processors and financial service providers

  • Shipping carriers and logistics providers

  • Fulfillment providers and suppliers

  • Website hosting and technology providers

  • Analytics providers

  • Advertising and marketing platforms

  • Customer support providers

  • Fraud prevention and security providers

  • Cloud storage and infrastructure providers

  • Professional advisers and service providers

  • Government authorities, regulators, courts, or law enforcement where legally required

  • Parties involved in a merger, acquisition, restructuring, financing, or sale of business assets

We may also disclose information where reasonably necessary to enforce our Terms of Service, investigate suspected fraud or abuse, protect our rights and property, or protect the safety of our customers and others.

8. Advertising and Analytics

We may use analytics, advertising, and marketing technologies to understand how visitors interact with the Site, measure advertising performance, and provide or improve relevant advertising.

Depending on our current configuration, these technologies may include services provided by companies such as Meta, Google, Shopify, and other advertising, analytics, or marketing providers.

These services may use cookies, pixels, tags, identifiers, or similar technologies to collect information about interactions with the Site.

Where required by applicable law, we obtain consent before using non-essential tracking technologies.

You may also have rights under applicable privacy laws to opt out of certain forms of targeted advertising, sale, or sharing of personal information.

9. U.S. State Privacy Rights

Residents of certain U.S. states may have additional rights under applicable state privacy laws.

Depending on the applicable law and circumstances, these rights may include:

  • The right to know or access personal information

  • The right to correct inaccurate personal information

  • The right to request deletion

  • The right to obtain a copy of personal information

  • The right to opt out of certain targeted advertising or sharing

  • The right to limit certain uses of sensitive personal information where applicable

  • The right to appeal certain privacy request decisions

  • The right to receive non-discriminatory treatment for exercising applicable privacy rights

The availability and scope of these rights vary depending on your state of residence and the applicable law.

To submit a privacy request, contact us at:

support@nimbyo.com

We may need to verify your identity before completing certain requests.

10. Cookies and Tracking Technologies

We use cookies and similar technologies to operate and maintain the Site, support checkout and account functionality, remember preferences, analyze Site usage, improve performance, and support advertising and marketing activities.

Some cookies and similar technologies are necessary for the operation and security of the Site. Other technologies may be used for analytics, personalization, or advertising.

Where required by applicable law, non-essential cookies and tracking technologies will only be used after obtaining the appropriate consent.

You may manage certain cookie preferences through the Site's available privacy controls or your browser settings.

Disabling certain cookies may affect the availability or functionality of some features.

11. Data Retention

We retain personal information for as long as reasonably necessary to fulfill the purposes described in this Privacy Policy, provide the Services, maintain business and transaction records, comply with legal and regulatory obligations, resolve disputes, enforce agreements, prevent fraud, and protect our legitimate interests.

The length of time personal information is retained depends on factors including the type of information, the purpose for which it was collected, applicable legal requirements, and whether the information is needed to resolve a dispute or enforce an agreement.

Certain transactional, financial, and accounting records may be retained for periods required by applicable tax, accounting, or other legal obligations.

When personal information is no longer reasonably required, we may delete, anonymize, or otherwise securely dispose of it, subject to applicable law.

12. International Data Transfers

Because we operate internationally and use service providers located in different countries, personal information may be transferred to, stored in, or processed in countries outside your country of residence, including countries outside the European Economic Area.

Where required by applicable law, we use appropriate safeguards for international transfers, which may include Standard Contractual Clauses approved by the European Commission or other lawful transfer mechanisms.

13. Children's Privacy

The Services are not directed to children under the age required by applicable law.

We do not knowingly collect personal information from children in circumstances where such collection is prohibited by law.

If we become aware that personal information has been collected from a child in circumstances where appropriate consent was required, we will take reasonable steps to delete the information.

14. Data Security

We maintain reasonable technical and organizational measures designed to protect personal information against unauthorized access, loss, misuse, alteration, or disclosure.

However, no method of transmission or storage can guarantee absolute security.

15. Your Privacy Rights

Depending on your location and applicable law, you may have rights relating to your personal information, including rights to:

  • Access or obtain a copy of your personal information

  • Correct inaccurate information

  • Request deletion

  • Restrict certain processing

  • Object to certain processing

  • Request portability of certain information

  • Withdraw consent where processing is based on consent

  • Opt out of certain advertising, sale, or sharing activities

  • Request human review of certain automated decisions where required by law

To exercise applicable rights, contact:

support@nimbyo.com

We may request information reasonably necessary to verify your identity and protect against unauthorized privacy requests.

You may also have the right to lodge a complaint with the applicable data protection authority.

For individuals in the Netherlands, the relevant supervisory authority is the Dutch Data Protection Authority (Autoriteit Persoonsgegevens).

16. Contact

If you have questions about this Privacy Policy or our handling of personal information, or if you wish to exercise an applicable privacy right, contact us at:

Nimbyo
Rentmeesterlaan 253
4336 EL Middelburg
Netherlands

Email: support@nimbyo.com