Privacy Policy

At Nerelias we take the privacy of our customers seriously. This Privacy Policy explains how we collect, use, store, share and protect personal information when you visit nerelias.com, make a purchase, contact us or use our services.

Read this policy together with our Terms of Service, Shipping Policy and Return & Refund Policy.

1. Data Controller


Controller: Álvaro Carcedo, trading as Nerelias

Address: Calle Baldomero Alonso 14, 33930 Langreo, Asturias, Spain

Privacy contact: help.nerelias@gmail.com

2. Information We Collect and Why


We may collect the following categories of personal information:

Identifiers and contact information: name, email address, postal address, billing address, phone number where necessary and order number. We use this information to process orders, provide support and communicate with you.

Commercial information: products purchased, order history, returns, refunds and customer service incidents. We use this information to manage purchases and after sales support.

Payment and transaction information: payment method, payment status, transaction amount, currency, date and billing information. Payment information is handled through payment service providers as needed to process transactions.

Technical and device information: IP address, browser, device type, operating system, online identifiers and similar technical data. We may use this information for website operation, security, analytics and fraud prevention.

Usage information: pages visited, products viewed, cart activity and interactions with the website. We may use this information to improve the store and measure performance.

Marketing information: communication preferences, subscription status and interactions with marketing campaigns. We use this information for marketing where permitted by law.

Approximate location information: country or region inferred from technical data where needed for shipping, tax, localisation or fraud prevention.

We do not knowingly request sensitive personal information such as health information, religion, political opinions, biometric data, racial or ethnic origin, sexual orientation or precise geolocation for ordinary ecommerce purposes. If you voluntarily include sensitive information in a support message, we use it only as necessary to handle that communication and comply with the law.

3. Where We Get Personal Information


We may receive personal information:


Directly from you when you place an order, complete a form or contact us.


Automatically through cookies, device identifiers and similar technologies when you use the website.


From Shopify and other service providers involved in payments, shipping, customer support, fraud prevention, analytics, email and marketing.


From advertising platforms where permitted by law.

4. How We Use Personal Information


We may use personal information to:


Process and manage orders and payments.


Prepare, ship and deliver orders.


Provide tracking and service communications.


Manage returns, refunds, cancellations and complaints.


Provide customer support.


Detect and prevent fraud, abuse and security incidents.


Improve the website and analyse performance.


Personalise content or advertising where permitted.


Send marketing communications where there is a valid legal basis or consent.


Maintain accounting, tax and business records.


Comply with legal obligations and defend legal claims.

5. Legal Bases Where Applicable


Where data protection law requires a legal basis for processing, we rely on the basis appropriate to the activity, which may include:


Performance of a contract for orders, payments, shipping, returns and customer service.


Compliance with legal obligations for tax, accounting, consumer protection and regulatory records.


Legitimate interests for fraud prevention, security, service improvement and legal defence where those interests are not overridden by your rights.


Consent for activities such as non essential cookies, certain marketing communications or personalised advertising where consent is required.

Where we rely on consent, you may withdraw it at any time without affecting processing that was lawful before withdrawal.

6. Shopify and Other Service Providers


Our store operates on Shopify. Personal information may also be processed by other providers needed to operate the store, including:


Payment processors.


Shipping carriers and logistics providers.


Order management and fulfilment providers.


Fraud prevention and security services.


Customer support tools.


Email and communication providers.


Marketing and advertising platforms.


Analytics and measurement services.


Hosting and technical service providers.


Authorities or courts where disclosure is legally required.

These providers may process information on our instructions or as independent controllers where they determine their own purposes and legal responsibilities.

7. Payments and Transaction Security


Payments on nerelias.com are processed through third party payment services.

We may retain transaction confirmation, status, amount, currency, date, billing information and information needed to prevent fraud or resolve disputes.

We may review, hold, cancel or request additional verification for orders showing material risk indicators, inconsistent information, suspected fraud or previous payment disputes.

8. Marketing and Advertising


We may send commercial communications about products, promotions and store news where there is a valid legal basis or consent.

We may use advertising and analytics platforms to measure campaigns and, where permitted, display personalised advertising.

You can unsubscribe from promotional emails at any time using the unsubscribe option included in the message or by contacting help.nerelias@gmail.com. You may still receive service communications needed for orders, payments, shipping, returns, security or legal notices.

9. Cookies and Similar Technologies


We use cookies, pixels, identifiers and similar technologies as needed to operate the store, maintain the cart and checkout, improve security, remember preferences, analyse usage and measure advertising.

Where applicable law requires consent for non essential cookies or similar technologies, consent and available privacy controls should be presented through the mechanisms implemented on the website.

You may also contact help.nerelias@gmail.com with privacy related questions.

10. Disclosure for Legal Obligations and Protection of Rights


We may disclose personal information where reasonably necessary to comply with law, respond to valid requests from authorities or courts, prevent fraud, protect our rights and security, respond to chargebacks or payment disputes, or establish, exercise or defend legal claims.

11. International Data Transfers


Because we use Shopify and other international service providers, personal information may be processed outside your country of residence.

Where applicable law requires safeguards for international transfers, we rely on an approved or otherwise lawful transfer mechanism used by us or the relevant service provider.

12. Data Retention


We keep personal information only for as long as reasonably necessary for the purposes described in this policy and to comply with legal obligations.

Our general retention approach is:


Order, invoicing and accounting records: up to 6 years, or longer where a mandatory legal period applies.


Customer support correspondence: up to 3 years after the case is closed, unless a longer period is needed for a legal claim or dispute.


Marketing subscription information: until you unsubscribe, plus a minimal suppression record where needed to respect your opt out.


Cookies and analytics information: according to the lifespan of the relevant technology and applicable consent settings, generally no longer than necessary for the stated purpose.


Fraud, chargeback and dispute records: up to 3 years after the case is closed, unless a longer period is reasonably required for legal defence or compliance.

When information is no longer needed, we delete it, anonymise it or restrict access where retention is still legally required.

13. Information Security


We use reasonable technical and organisational measures to protect personal information against loss, misuse, unauthorised access, disclosure, alteration or destruction.

No transmission or storage system can be guaranteed to be completely secure. If you believe your personal information, account or order has been compromised, contact help.nerelias@gmail.com.

Where applicable law requires notification of a personal data breach, we will provide the required notices to affected individuals and authorities.

14. Your Privacy Rights


Depending on where you live and which law applies, you may have rights to:


Access personal information we hold about you.


Correct inaccurate information.


Request deletion of information where the law allows it.


Restrict or object to certain processing where applicable.


Receive a portable copy of certain information where applicable.


Withdraw consent where processing is based on consent.


Opt out of certain marketing, targeted advertising, sale or sharing activities where applicable.


Appeal a privacy decision or complain to a competent authority where applicable.

California residents may have rights under the California Consumer Privacy Act, including rights to know, delete, correct, opt out of sale or sharing where applicable, limit certain uses of sensitive personal information where applicable, and be free from unlawful discrimination for exercising protected rights.

To exercise a privacy right, contact help.nerelias@gmail.com. We may request reasonable information to verify your identity before acting on the request.

Where European data protection rules apply to our activities as a controller established in Spain, we will normally respond within one month, subject to any lawful extension.

Where United States state privacy laws apply, we will respond within the period required by the relevant law and provide any appeal process required by that law.

15. Children and Minors


The website is not intended for children who are not legally able to use ecommerce services without the required parental or guardian involvement.

We do not knowingly collect personal information from children in circumstances prohibited by applicable law.

If you are a parent or guardian and believe a child has provided us with personal information unlawfully, contact help.nerelias@gmail.com.

16. Third Party Links


nerelias.com may contain links to independent websites, applications or services. We do not control their privacy practices. Review their privacy information before providing personal data directly to them.

17. Privacy Complaints


If you have a privacy concern, contact help.nerelias@gmail.com first so we can review it.

You may also have the right to complain to the relevant data protection, privacy or consumer protection authority in your jurisdiction.

18. Changes to This Privacy Policy


We may update this Privacy Policy to reflect legal, technical or operational changes. The updated version will apply from the date it is published and will not retroactively remove rights that already apply.

19. Contact


Álvaro Carcedo

Calle Baldomero Alonso 14 33930 Langreo, Asturias Spain

Website: nerelias.com