Privacy policy

Last updated: August 31, 2026

This Privacy Policy details how Nalalo ('we', 'us', or 'our') collects, utilizes, and safeguards your personal details when you browse our website, make a purchase, or communicate with our customer support. We process all personal information in full compliance with the UK General Data Protection Regulation (UK GDPR), the Data Protection Act 2018, and the Data (Use and Access) Act 2025.

1. Information We Collect

We collect personal information through three main channels:

  • Information Provided directly by You: Full name, contact email address, telephone number, billing and shipping addresses, order transaction receipts, and customer service correspondence.
  • Automatically Collected Data: Technical site usage data, including IP addresses, device identifiers, web browser specifications, cookie data, and browsing behavior on our store.
  • Data from Third-Party Partners: Information received from e-commerce platforms (Shopify), merchant payment gateways, and delivery logistics carriers required to complete your transactions.

2. Lawful Basis for Processing Data

Under UK data protection legislation, we rely on the following lawful grounds to handle your personal information:

  • Contractual Necessity: Required to process transactions, manage payments, and handle order fulfillment and shipping.
  • Legitimate Interests: Necessary to improve our store features, protect our platform against fraudulent activity, and maintain site security.
  • Legal Compliance: Required to satisfy statutory UK tax, accounting, audit, and consumer law requirements.
  • Consent: Applied for promotional marketing communications, which you can opt out of at any point using the unsubscribe link in our emails.

3. Cookie Policy

Nalalo utilizes cookies and similar tracking technologies to enhance your browsing experience, store cart preferences, and evaluate website performance. In accordance with ICO guidelines, our cookie banner allows you to manage non-essential analytical or marketing cookies. Please note that disabling essential cookies may impact certain functionality across our store.

4. Sharing Personal Information

Nalalo does not sell, rent, or trade your personal details to third parties. We share data strictly with essential service providers necessary to operate our shop:

  • E-Commerce & Payment Partners: Platform hosts (Shopify) and encrypted payment gateways (such as PayPal).
  • Fulfillment Services: Order management systems and domestic UK logistics couriers (e.g., Royal Mail, Evri, DHL).
  • Legal & Regulatory Obligations: Statutory bodies or law enforcement entities when mandated by legal processes.

5. International Data Transfers

Nalalo primarily stores and processes user data within the United Kingdom. When information is transferred outside the UK—such as processing through Shopify servers located in the EU or USA—we ensure appropriate safeguards are implemented, including the UK International Data Transfer Agreement (IDTA) and standard contractual clauses (SCCs).

6. Data Retention & Security Measures

We enforce SSL (Secure Sockets Layer) encryption and maintain PCI-DSS compliant checkout systems to protect your sensitive financial details. We retain personal data only for as long as required to process orders and meet regulatory obligations (such as HMRC financial recordkeeping standards, which typically mandate storing transaction records for 6 years).

7. Your Statutory Rights (UK GDPR)

As a UK resident, you hold the following rights regarding your personal information:

  • Right of Access: Request copies of the personal details we hold about you.
  • Right to Rectification: Request correction of incomplete or inaccurate data.
  • Right to Erasure: Request the deletion of your personal records, subject to legal retention obligations.
  • Right to Restrict or Object: Limit or object to specific data processing operations.
  • Right to Data Portability: Request a structured, machine-readable copy of your data.

To exercise any of these rights, please contact our support team at info@nalalo.com.

8. Complaints & Regulatory Contact

If you have concerns about how Nalalo manages your personal information, please reach out to us first at info@nalalo.com so we can resolve the issue. You also retain the right to lodge a formal complaint with the Information Commissioner's Office (ICO) via their official portal at www.ico.org.uk.

Contact information

Any questions or just like to talk to us? Please don't hesitate to contact us via:

Store name: Nalalo
Address: 148 Old Oak Road, London W3 7HE, United Kingdom
Email: info@nalalo.com
Phone number: +447380465838

Customer Service (Opening Hours):

Monday - Friday: 09:00 - 18:00 (GMT)
Saturday and Sunday: 10:00 – 16:00 (GMT)