Privacy policy

Last updated: October 15, 2026

This Privacy Policy explains how ("Nestria", "we", "us") collects, uses and shares your personal information when you visit or make a purchase from nestria.com (the "Site").

Information we collect

Information you give us. When you place an order we collect your name, billing address, shipping address, email address, phone number (if provided) and order details. When you contact us or submit a review we collect your name, email address and whatever you write to us.

Payment information. We do not see, collect or store your full card number. Payments are processed by Shopify Payments and, where you choose them, PayPal, Apple Pay, Google Pay or Shop Pay. Those providers handle your card details directly under their own privacy policies. We receive only a confirmation of payment and the last four digits of the card.

Information collected automatically. When you browse the Site we collect your IP address, browser and device type, operating system, referring site, pages viewed, and time spent. This is collected through cookies, log files and similar technologies.

Marketing information. If you subscribe to emails, we collect your email address and your engagement with those emails (opens, clicks).

How we use your information

  • To process and fulfil your order, including payment, shipping and order confirmations
  • To communicate with you about your order, respond to enquiries and provide support
  • To screen orders for fraud or risk
  • To send marketing emails, where you have consented or where permitted by law
  • To improve the Site and understand how customers use it
  • To comply with our legal obligations, including tax and accounting records

Our legal bases (for UK/EU visitors): performance of a contract (processing your order), legitimate interests (fraud prevention, improving our service), consent (marketing emails, non-essential cookies), and legal obligation (tax records).

Who we share it with

We share personal information only with service providers who need it to run the business:

  • Shopify Inc. — our ecommerce platform, which hosts the Site and processes orders. Shopify's privacy policy
  • Payment processors — Shopify Payments, PayPal, and the wallet providers listed above
  • Shipping carriers — to deliver your order and provide tracking
  • Email and analytics providers — to send order and marketing emails and understand Site traffic
  • Advertising platforms — including Meta (Facebook and Instagram), where you have consented to advertising cookies

We may also disclose information to comply with applicable law, a lawful request, subpoena or warrant, or to protect our rights.

We do not sell your personal information for money. Some sharing with advertising platforms may count as a "sale" or "sharing" under the California Consumer Privacy Act. You can opt out — see your rights below.

Advertising and tracking

We use the Meta Pixel and similar tools to measure the performance of our advertising and to show ads to people who have visited the Site. You can opt out of interest-based advertising through the Digital Advertising Alliance, the Network Advertising Initiative or your device settings.

Most browsers let you refuse or delete cookies. Essential cookies (cart, checkout, security) cannot be disabled without breaking the Site.

We do not currently respond to Do Not Track signals. We do honour the Global Privacy Control signal where required by law.

International transfers

We are based in the United States. If you are in the UK, EU or elsewhere outside the US, your personal information will be transferred to and processed in the United States and other countries. Where required, these transfers rely on the European Commission's Standard Contractual Clauses or an equivalent safeguard.

How long we keep it

Order records are kept for seven years to meet tax and accounting obligations. Marketing contacts are kept until you unsubscribe. Support emails are kept for two years. Analytics data is kept in aggregated form.

Your rights

Depending on where you live, you may have the right to:

  • Access the personal information we hold about you
  • Correct information that is inaccurate
  • Delete your personal information
  • Port your data to another service
  • Object to or restrict how we process your information
  • Withdraw consent at any time, including unsubscribing from marketing
  • Opt out of the sale or sharing of personal information, and of targeted advertising
  • Not be discriminated against for exercising any of these rights

To exercise any of these, email nestria.info.store@gmail.com. We will respond within 30 days, or sooner where the law requires it. We may ask you to verify your identity first.

UK and EU visitors also have the right to complain to your local supervisory authority. In the UK this is the Information Commissioner's Office (ico.org.uk).

Children

The Site is not intended for anyone under 16, and we do not knowingly collect personal information from children. If you believe a child has provided us with personal information, email us and we will delete it.

Changes

We may update this policy to reflect changes to our practices or for legal reasons. The "last updated" date at the top will change when we do.