Effective Date: 01 January 2026
Last Updated: 15 August 2026

Nutech Store (“Nutech Store,” “we,” “us,” or “our”) respects your privacy and is committed to protecting your personal data.
This Privacy Policy explains how we collect, use, store, disclose, and protect your personal data when you visit our website, create an account, place an order, contact us, subscribe to marketing communications, or otherwise use our website and services (collectively, the “Site” and “Services”).
As a business operating within the European Union, we process personal data in accordance with applicable European data protection and privacy legislation, including the General Data Protection Regulation (EU) 2016/679 (“GDPR”) and applicable national data protection and electronic communications laws.

DATA CONTROLLER
For the purposes of the GDPR, the data controller responsible for the processing of personal data through this Site is:
Nutech Store
Email: info@nutechstore.com

The data controller determines the purposes and means by which your personal data is processed.

 

Personal Data We Collect
The personal data we collect depends on how you interact with our Site and Services.
Information You Provide to Us
When you place an order, create an account, contact us, request support, subscribe to marketing communications, or otherwise interact with us, we may collect:
Full name
Billing address
Shipping address
Email address
Telephone number
Account username and login information
Order and transaction information
Products purchased or returned
Customer service enquiries and correspondence
Refund and returns information
Marketing and communication preferences
Information you voluntarily provide when contacting us
Payment Information

Payments are processed through secure third-party payment service providers.
Depending on the payment method selected, the payment provider may collect information including payment card details, billing information, bank information, or digital-wallet information.
Nutech Store does not ordinarily receive or store complete credit or debit card details.

Information Collected Automatically
When you access or use our Site, we may automatically collect certain technical and usage information, including:
IP address
Browser type and version
Device type
Operating system
Device identifiers
Approximate location derived from your IP address
Pages and products viewed
Referring and exit pages
Date and time of visits
Website interaction information
Shopping cart activity
Cookie identifiers
Analytics information

This information may be collected through cookies, server logs, pixels, analytics tools, and similar technologies.

Purposes & Legal Bases For Processing
Under the GDPR, we must have a lawful basis for processing your personal data.
Depending on the circumstances, we process your personal data on one or more of the following legal bases:
Performance of a Contract – Article 6(1)(b) GDPR
We process personal data where necessary to enter into or perform a contract with you. This includes:
Processing your order
Processing payments
Arranging shipping and delivery
Providing order confirmations and updates
Managing your customer account
Processing returns and refunds
Providing customer support relating to your purchase
Compliance with a Legal Obligation – Article 6(1)(c) GDPR

We may process or retain personal data where necessary to comply with legal obligations, including:
Tax requirements
Accounting requirements
Consumer protection obligations
Regulatory requirements
Responding to lawful requests from public authorities
Legitimate Interests – Article 6(1)(f) GDPR

We may process personal data where necessary for our legitimate business interests, provided those interests are not overridden by your rights and freedoms.
These interests may include:
Preventing fraud and unauthorized transactions
Maintaining website and network security
Improving our products and Services
Providing effective customer support
Protecting our legal rights
Managing and improving our business operations
Understanding how customers use our Site

Where we rely on legitimate interests, we consider and balance our interests against your privacy rights.
Consent – Article 6(1)(a) GDPR

Where required, we process personal data based on your freely given consent.
This may include:
Email marketing
Promotional communications
Non-essential analytics cookies
Advertising and targeting cookies
Certain personalization technologies

You may withdraw your consent at any time. Withdrawal of consent does not affect the lawfulness of processing carried out before consent was withdrawn.

How we Use Your Personal Data
We may use personal data to:
Process and fulfil orders
Process payments and refunds
Arrange shipping and delivery
Create and administer customer accounts
Provide customer service
Respond to enquiries
Send order confirmations and invoices
Send shipping and delivery notifications
Process returns, refunds, and warranty claims
Maintain transaction and accounting records
Prevent and detect fraud
Protect the security of our Site
Improve our website, products, and Services
Analyze website performance and usage
Send marketing communications where permitted
Personalize content where consent or another appropriate legal basis exists
Comply with legal and regulatory obligations
Establish, exercise, or defend legal claims

We will not use your personal data for a materially different purpose unless we have an appropriate lawful basis to do so.

Payment Processing
We may offer payment services provided by third parties, including:
Stripe
PayPal
Google Pay
Other payment providers displayed at checkout

Payment providers process personal and financial information in accordance with their respective privacy policies and legal obligations.
In some circumstances, payment providers may act as independent data controllers for the information they process.
Nutech Store does not ordinarily store complete credit or debit card numbers on its own servers.

WooCommerce & Website Hosting
Our online store uses WooCommerce to provide ecommerce functionality.
Personal data relating to customer accounts, orders, shipping, and ecommerce activities may therefore be processed through WooCommerce and associated website infrastructure.
Our hosting, security, backup, and technology service providers may also process personal data on our behalf where necessary to operate and secure our Site.
Where a third party processes personal data on our behalf as a processor, we require appropriate contractual and data protection safeguards in accordance with Article 28 of the GDPR, where applicable.

Shipping & Order Fulfilment
To fulfil your order, we may provide necessary personal data to third parties involved in delivering your purchase.
This may include:
Couriers
Postal services
Warehouses
Logistics companies
Fulfilment partners
Product suppliers where necessary for direct fulfilment

The information provided will normally be limited to what is reasonably necessary to fulfil and deliver your order, such as your name, delivery address, telephone number, email address, and relevant order information.

Email Marketing
Where you have provided consent, or where another lawful basis for electronic marketing is available under applicable law, we may send you promotional communications concerning products, special offers, discounts, promotions, product launches, and company news.
Where consent is required, marketing consent will be requested separately and will not be a condition of purchasing products from us.
You may withdraw your consent or unsubscribe from marketing communications at any time by clicking the “unsubscribe” link included in our marketing emails or by contacting us.
Withdrawing from marketing communications does not prevent us from sending necessary transactional communications relating to your orders, payments, account, returns, or customer service enquiries.

Cookies & Similar Technologies
Our Site uses cookies and similar technologies.
Cookies may be used to:
Operate essential website functionality
Maintain shopping carts
Keep users securely logged in
Remember preferences
Prevent fraud
Improve website security
Measure website performance
Analyze website traffic
Understand how visitors interact with our Site
Measure advertising effectiveness
Personalize advertising where permitted
Essential Cookies

Cookies that are strictly necessary for the operation of the Site may be used without consent where permitted by applicable law.

Analytics, Advertising and Other Non-Essential Cookies
Where required by EU law, non-essential cookies and similar tracking technologies will not be activated until you have provided your consent.
You will be given an opportunity to accept, reject, or manage non-essential cookies through our cookie consent mechanism.
You may withdraw or modify your cookie consent at any time.
Rejecting non-essential cookies should not prevent you from accessing the essential functions of our Site.
Further information about the cookies used on our Site may be provided in our separate Cookie Policy.

Sharing Personal Data
We do not sell your personal data.
We may disclose personal data where necessary to payment processors, banks and financial service providers, shipping and courier companies, warehouses and fulfilment providers, product suppliers, hosting providers, IT and cybersecurity providers, email and communications providers, analytics providers, advertising providers, fraud prevention providers, accountants, auditors, lawyers, insurers, government authorities, courts, regulators, and law enforcement authorities.
Where third parties act as processors on our behalf, we take appropriate steps to ensure they process personal data only in accordance with our instructions and applicable data protection law.
Some third parties, such as payment providers, banks, and delivery companies, may process certain information as independent data controllers.

International Transfers Of Personal Data
Some of our service providers may process personal data outside the European Economic Area (“EEA”).
Where personal data is transferred from the EEA to a country that has not been recognized by the European Commission as providing an adequate level of data protection, we will implement appropriate safeguards where required by law.
These safeguards may include:
European Commission adequacy decisions
European Commission Standard Contractual Clauses (“SCCs”)
Binding Corporate Rules where applicable
Other legally recognized transfer mechanisms

Where appropriate, additional technical, contractual, or organizational safeguards may also be implemented.

Data Retention
We retain personal data only for as long as necessary for the purposes for which it was collected and to satisfy applicable legal, accounting, tax, regulatory, and reporting requirements.
The appropriate retention period depends on factors including the type and amount of personal data, the purpose for which it was collected, applicable statutory retention periods, potential legal claims, fraud prevention requirements, and our legal and contractual obligations.
Order, invoice, payment, and transaction records may need to be retained for longer periods where required by applicable tax, accounting, or commercial laws.
Once personal data is no longer required, we will delete, anonymize, or securely dispose of it where appropriate.

Your Rights Under GDPR
Subject to applicable conditions and exceptions, individuals protected by the GDPR may have the following rights:
Right of Access
You may request confirmation as to whether we process your personal data and request a copy of that data.
Right to Rectification
You may request that inaccurate personal data be corrected and incomplete data completed.
Right to Erasure
In certain circumstances, you may request deletion of your personal data. This is commonly known as the “right to be forgotten.”
The right to erasure is not absolute. We may be required to retain certain information to comply with legal obligations or establish, exercise, or defend legal claims.
Right to Restriction of Processing
In certain circumstances, you may request that we restrict the way we process your personal data.
Right to Data Portability
Where applicable, you may request certain personal data in a structured, commonly used, and machine-readable format and may have the right to transmit that data to another controller.
Right to Object
You may object to processing based on our legitimate interests in certain circumstances.
You have the right to object at any time to the processing of your personal data for direct marketing purposes.
Right to Withdraw Consent
Where processing is based on consent, you may withdraw that consent at any time.
Withdrawal does not affect processing that lawfully occurred before the consent was withdrawn.
Rights Relating to Automated Decision-Making
Where applicable, you have rights relating to decisions based solely on automated processing, including profiling, where those decisions produce legal effects or similarly significantly affect you.

How To Exercise Your Rights
You may exercise your applicable data protection rights by contacting us using the details provided at the end of this Privacy Policy.
We may need to request additional information to confirm your identity before fulfilling a request.
We will respond to valid requests within the timeframe required by the GDPR, normally within one month of receiving the request.
In certain circumstances, this period may be extended where permitted by law. If an extension is necessary, we will inform you in accordance with applicable legal requirements.
There is normally no fee for exercising your GDPR rights. However, where permitted by law, we may charge a reasonable fee or refuse to act on requests that are manifestly unfounded or excessive.

Right To Lodge A Complaint
If you believe that your personal data has been processed in violation of applicable data protection law, you have the right to lodge a complaint with the competent data protection supervisory authority.
You may generally contact the supervisory authority in the EU Member State of your habitual residence, place of work, or place of the alleged infringement.
We encourage you to contact us first so that we have an opportunity to address your concerns directly, although you are not required to do so before contacting a supervisory authority.

Automated Fraud Prevention
We and our payment or fraud-prevention providers may use automated systems to identify potentially fraudulent, suspicious, or unauthorized transactions.
Such systems may consider information including transaction information, IP addresses, device information, account activity, payment information, order history, and transaction patterns.
Where automated decision-making falls within Article 22 of the GDPR, we will provide applicable protections and rights as required by law.

Data Security
We implement appropriate technical and organizational measures designed to protect personal data against unauthorized access, accidental loss, destruction, alteration, unauthorized disclosure, and unlawful processing.
Depending on the circumstances, measures may include access controls, secure hosting, encryption, security monitoring, software updates, backups, and restrictions on access to personal information.
Only persons who have a legitimate business need to access personal data should be permitted to do so.
While we take reasonable measures to protect personal data, no internet transmission or electronic storage system can be guaranteed to be completely secure.

Personal Data Breaches
If we become aware of a personal data breach, we will investigate the incident and take appropriate measures to limit its impact.
Where required under the GDPR, we will notify the competent supervisory authority without undue delay and, where feasible, within 72 hours after becoming aware of a qualifying personal data breach.
Where a breach is likely to result in a high risk to the rights and freedoms of affected individuals, we will also communicate the breach to those individuals where required by law.

Children’s Privacy
Our Site is intended for adult customers and is not directed at children.
We do not knowingly collect personal data directly from children in circumstances where parental or guardian consent would be required under applicable law.
If you believe that a child has provided personal data to us without the appropriate authorization, please contact us so that we can investigate and take appropriate action.

Third-Party Websites
Our Site may contain links to third-party websites, payment services, social media platforms, or other external services.
We do not control these third parties and are not responsible for their privacy practices.
When you leave our Site or use a third-party service, your personal data may be processed according to that third party’s own privacy policy.
We encourage you to review the privacy information provided by any third-party service you use.

Changes To This Privacy Policy
We may update this Privacy Policy from time to time to reflect changes in our business operations, website or Services, technology, service providers, legal or regulatory requirements, or data processing practices.
Any updated version will be published on this page and the “Last Updated” date will be revised accordingly.
Where changes materially affect the way we process personal data, we will provide additional notice or obtain consent where required by law.

 

Contact Us
If you have questions about this Privacy Policy, wish to exercise your data protection rights, or have concerns regarding how we process your personal data, please contact:
Nutech Store
Email: privacy@nutechstore.com

If you are not satisfied with our response, you have the right to lodge a complaint.