Privacy Policy

NN Bodies (“we”, “our”, “us”) is committed to protecting and respecting your privacy in accordance with the General Data Protection Regulation (GDPR) and other applicable EU data protection laws.

This Privacy Policy explains how we collect, use, disclose, and safeguard your personal data when you visit or make a purchase from our website.

1. Personal Data We Collect

We may collect and process the following categories of personal data:

Information You Provide to Us

Full name
Billing and shipping address
Email address
Phone number
Payment details (processed securely via third-party providers)

Automatically Collected Data

IP address
Browser type and version
Device information
Pages visited and browsing behavior
Cookies and tracking technologies

Order Information

Purchase history
Transaction details
Customer service interactions

2. How We Use Your Data

We process your personal data for the following purposes:

To process and fulfill your orders
To manage payments and prevent fraud
To communicate with you regarding your order or inquiries
To improve our website, products, and user experience
To send marketing communications (only with your consent)
To comply with legal obligations

3. Legal Bases for Processing

Under GDPR, we rely on the following legal bases:

Contractual necessity: To fulfill orders and provide services
Legal obligation: To comply with applicable laws and regulations
Legitimate interests: To improve our services and prevent fraud
Consent: For marketing communications and non-essential cookies

4. Sharing Your Data

We only share your data when necessary, including with:

Payment processors
Shipping and logistics providers
IT and website service providers
Legal or regulatory authorities when required

All third parties are required to handle your data securely and in compliance with GDPR.

5. International Data Transfers

If your data is transferred outside the European Economic Area (EEA), we ensure appropriate safeguards are in place, such as:

Standard Contractual Clauses (SCCs) approved by the European Commission
Transfers to countries with an adequate level of data protection

6. Data Retention

We retain your personal data only for as long as necessary:

To fulfill the purposes outlined in this policy
To comply with legal, accounting, or reporting requirements

When data is no longer needed, it is securely deleted or anonymized.

7. Your Rights Under GDPR

You have the following rights regarding your personal data:

Right of access – Request a copy of your data
Right to rectification – Correct inaccurate or incomplete data
Right to erasure (“right to be forgotten”)
Right to restrict processing
Right to data portability
Right to object to processing
Right to withdraw consent at any time

To exercise your rights, please contact us. You also have the right to lodge a complaint with your local data protection authority.

8. Cookies & Tracking Technologies

We use cookies and similar technologies to:

Enable website functionality
Analyze website performance
Personalize your experience
Provide marketing (with consent)

You can manage or withdraw your cookie consent at any time through your browser settings or our cookie banner.

9. Data Security

We implement appropriate technical and organizational measures to protect your personal data, including:

Secure servers and encryption (SSL)
Restricted access to personal data
Regular security monitoring

However, no method of transmission over the internet is 100% secure.

10. Third-Party Links

Our website may contain links to third-party websites. We are not responsible for their privacy practices, and we encourage you to review their policies.

11. Changes to This Policy

We may update this Privacy Policy from time to time. Any changes will be posted on this page with an updated effective date.

12. Contact Us

If you have any questions about this Privacy Policy or how your data is handled, please contact us.

By using our website, you acknowledge that you have read and understood this Privacy Policy.