Privacy Policy

NINETY operates this storefront and is the controller of personal data processed for accounts, orders, and customer support. For privacy questions or requests, use Support or Contact.

“Personal information” means data that identifies or can reasonably be linked to you. It does not include anonymous or fully de-identified data. Depending on how you use the Service, we may process:

• Contact details — name, email, phone, billing and shipping addresses.
• Account details — username or email login, hashed password, preferences, and settings.
• Authentication data — session tokens / cookies, and, if you sign in with Google, basic profile information Google provides (such as name and email).
• Order & shopping data — cart and wishlist activity, products viewed or purchased, personalization (name/number), order history, returns, and delivery status.
• Payment-related data — payment status and transaction references from our payment partner. We do not store full card numbers on our servers; card and wallet payments are handled by PayPal.
• Communications — messages you send via contact or support forms, including topic and any order number you include.
• Device & usage data — IP address, browser or device type, pages viewed, approximate location from network data, and similar diagnostics used for security and improvement.
• Local device data — wishlist and similar preferences may sit in browser storage and are not synced across devices unless you are signed in for account-backed features.

• Directly from you — account signup, checkout, support messages, and profile updates.
• Automatically — when you browse or use the Service, including cookies and similar technologies.
• Service providers — payment, email, hosting, and logistics partners that process data for us.
• Partners you choose — for example Google if you use Google sign-in.

• Provide and improve the Service — run your account, process payments, fulfill and track orders, remember preferences, and personalize browsing where appropriate.
• Communicate with you — order updates, password resets, security notices, and support replies.
• Marketing — promotional email only where you have opted in or where law allows; you can change preferences in your account or unsubscribe in any marketing message. Transactional messages about orders will still be sent.
• Security & fraud prevention — authenticate access, detect abuse, and protect customers and the platform.
• Legal reasons — comply with law, respond to valid legal process, and enforce our terms.

Where data-protection law requires a legal basis (for example GDPR), we rely on: performance of a contract (orders and account); legitimate interests (security, service improvement, fraud prevention); consent (certain marketing or optional features); and legal obligation (tax, accounting, dispute records).

We use essential cookies and similar storage to keep you signed in, protect sessions, and remember checkout state. These are required for the Service to function. We may also use analytics or performance tools that collect aggregated usage information. You can control cookies in your browser; disabling essential cookies may break login or checkout. We do not respond to every browser “Do Not Track” signal; where a recognized Global Privacy Control signal applies and the law requires it, we treat it as an opt-out for relevant advertising uses on that browser.

We do not sell your personal data. We may disclose information to:

• Payment providers — PayPal, to process payments and manage chargebacks.
• Carriers & logistics partners — to deliver your order and provide tracking.
• Infrastructure & email providers — hosting, databases, and transactional email that process data on our instructions.
• Identity providers — Google, if you choose Google sign-in.
• Professional advisers or authorities — when required by law, to protect our rights, or in connection with a business transfer.

Providers are expected to process personal data only for the purposes we specify and with appropriate safeguards. We may also share information when you ask us to (for example shipping to a recipient you name).

Our Service and providers may process data in countries other than yours. Where we transfer personal information out of the EEA or UK, we use recognized safeguards such as Standard Contractual Clauses (or UK equivalents) unless the destination is covered by an adequacy decision, or another lawful mechanism applies.

How long we keep data depends on the purpose: account data while the account stays active; order, payment, and tax records for fulfillment, accounting, disputes, and legal retention; support messages as needed to resolve your request and improve our service. When data is no longer needed, we delete or anonymize it where practicable. No security measure is perfect; use care when sending sensitive information over unsecured channels.

Depending on where you live, you may have rights to:

• Access / know what personal information we hold about you.
• Correct inaccurate personal information.
• Delete personal information, subject to legal exceptions.
• Portability — receive a copy of certain data or ask us to transfer it where the law allows.
• Object to or restrict certain processing, and withdraw consent where processing is based on consent.
• Opt out of marketing emails at any time (transactional order emails may continue).

To exercise these rights, contact us via Support. We may need to verify your identity. We will not discriminate against you for exercising privacy rights. You may appoint an authorized agent where local law allows; we will require proof of authority.

The Service is directed to adults. We do not knowingly collect personal information from children under 16 (or the higher age required in your jurisdiction). If you believe a child has provided data, contact us and we will take appropriate steps to delete it.

Our site may link to third-party websites or services. Their privacy practices are governed by their own policies. We are not responsible for those sites.

If you have a concern about how we handle personal information, contact us first. Depending on where you live, you may also lodge a complaint with your local data protection authority (for the EEA, a list of authorities is available from the European Data Protection Board).

We may update this Privacy Policy from time to time. The “Last updated” date will change when we do. Material changes may also be highlighted on the site or sent by email. Continued use after changes take effect constitutes acceptance of the updated Policy.

Privacy questions or requests? Reach us through Support or Contact. We aim to respond within two business days.

Related documents: Terms & Conditions, Shipping Policy, and Returns & Refunds.