Privacy Policy

At NNOURA, we value your privacy and are committed to protecting your personal information.

This Privacy Policy explains how we collect, use, store and protect your personal data when you visit our website, explore our collections, make a purchase or interact with our services.

We process personal data in accordance with the General Data Protection Regulation (GDPR) and applicable Dutch privacy legislation.

NNOURA is a luxury interior brand specialising in carefully curated, handcrafted interior pieces, including authentic Moroccan rugs and decorative objects.

For the purposes of applicable data protection legislation, the data controller is:

Trading name: NNOURA Registered legal entity: [To be confirmed] Registered address: [To be added] Chamber of Commerce (KvK): [To be added] Privacy contact: [Email address to be added] Website: [Website URL]

Depending on how you interact with our website, we may collect the following categories of personal information:

Personal and contact details

• Full name
• Email address
• Telephone number
• Billing and delivery addresses

Order and transaction information

• Products purchased
• Order history and order references
• Payment status and transaction details
• Shipping and delivery information

Payments may be processed by external payment service providers. NNOURA does not store complete payment card details unless explicitly stated otherwise.

Technical and website information

Depending on the technologies used, we may collect:

• IP address
• Browser type and device information
• Website usage and interaction data
• Cookie preferences
• Technical information necessary for website security and functionality

Communications and preferences

• Customer service enquiries
• Messages submitted through contact forms
• Newsletter preferences and subscriptions
• Information voluntarily provided when contacting NNOURA

We process personal information only when we have a valid legal basis.

Where we rely on legitimate interests, we assess those interests against your rights and freedoms.

We may share personal information with trusted third-party service providers where necessary to operate our business.

These may include:

• Payment service providers
• Shipping and logistics partners
• Website hosting and e-commerce providers
• Email communication and newsletter platforms
• IT support and website security providers
• Analytics and marketing technology providers, where applicable

We only share information that is necessary for the relevant purpose.

Where required, we enter into appropriate data processing agreements with service providers.

We do not sell your personal information.

Some service providers may process personal information outside the European Economic Area (EEA).

Where such transfers occur, we will ensure that appropriate safeguards are in place in accordance with applicable data protection legislation.

These safeguards may include adequacy decisions adopted by the European Commission or approved Standard Contractual Clauses, together with additional measures where necessary.

Our website may use cookies and similar technologies to support essential website functionality, remember preferences and improve the browsing experience.

Where applicable, cookies may include:

• Essential cookies: Necessary for the website to function properly.
• Preference cookies: Used to remember selected settings, such as language preferences.
• Analytics cookies: Used to understand website performance and visitor interactions.
• Marketing cookies: Used to measure advertising effectiveness and support personalised advertising.

Where legally required, we obtain your consent before placing non-essential cookies or using similar tracking technologies.

You can manage or withdraw your cookie consent through the cookie settings provided on our website, where applicable.

Further details about the technologies used, their purposes and retention periods will be provided in our Cookie Policy or cookie settings.

We retain personal information only for as long as necessary for the purposes described in this Privacy Policy or to comply with legal obligations.

Retention periods depend on the type of information and the purpose of processing.

For example:

• Order and financial records: Retained for the applicable statutory retention period, generally seven years for relevant Dutch tax administration records.
• Customer enquiries: Retained only as long as reasonably necessary to handle the enquiry and any related follow-up.
• Newsletter subscriptions: Retained until you unsubscribe or another valid reason for retention no longer applies.
• Technical and analytics information: Retained according to the applicable retention settings and legal requirements.

Once information is no longer required, it will be securely deleted or anonymised, unless further retention is legally required.

Under the GDPR, you may have the following rights:

• The right to access your personal information.
• The right to correct inaccurate or incomplete information.
• The right to request deletion of your information.
• The right to restrict certain processing activities.
• The right to object to processing based on legitimate interests.
• The right to receive your information in a portable format where applicable.
• The right to withdraw consent at any time, without affecting the lawfulness of earlier processing.

These rights are subject to applicable legal conditions and exceptions.

To exercise your rights, please contact us using the details provided in Section 14.

We will respond within the time limits required by applicable data protection legislation, generally within one month.

You also have the right to lodge a complaint with the Dutch Data Protection Authority (Autoriteit Persoonsgegevens) or another competent supervisory authority.

Website: https://autoriteitpersoonsgegevens.nl

We take appropriate technical and organisational measures to protect personal information against unauthorised access, loss, misuse, alteration and disclosure.

These measures may include secure connections, access restrictions, appropriate authentication methods and the use of reputable service providers.

Although we take reasonable precautions to protect personal information, no method of electronic transmission or storage can be guaranteed to be completely secure.

If you subscribe to our newsletter or otherwise lawfully agree to receive marketing communications, we may send you updates about new collections, exclusive releases and other NNOURA news.

You may unsubscribe from marketing emails at any time by using the unsubscribe link included in our messages or by contacting us directly.

Withdrawing marketing consent will not affect communications necessary to fulfil an order or provide requested customer service.

Our website and services are intended for a general audience and are not specifically directed at children.

We do not knowingly collect personal information from children in circumstances where such collection would require parental or guardian consent without obtaining the necessary authorisation.

If we become aware that personal information has been collected unlawfully, we will take appropriate steps to address the situation.

We may update this Privacy Policy from time to time to reflect changes in our services, technologies, business practices or applicable legislation.

The most recent version will be published on our website, together with the date of the latest update.

Where required by law, we will provide additional notice of material changes.

If you have questions about this Privacy Policy, how we process your personal information or wish to exercise your privacy rights, please contact:

NNOURA Email: [Privacy contact email] Registered business name: [To be added] Registered address: [To be added] The Netherlands

We are committed to handling your personal information with care, transparency and respect.