Privacy Policy

This policy explains what personal data NOKOÏ SKIN collects through this website, why it is collected, who processes it on our behalf, and the rights you have over it.

It applies to this website only. It does not cover third-party platforms where NOKOÏ has a presence, which are governed by their own policies.

We collect only what a specific function requires:

• Email address — when you join the newsletter or the launch list. Nothing else is required to subscribe.
• Name, email address and message — when you use the contact form, so that we can reply.
• Order and delivery details — when you place an order. These are collected and processed by Shopify during checkout, not by this website.
• Aggregate usage data — page views and performance measurements, used to understand which pages work and how fast the site is.

Card details are never entered on, transmitted through or stored by this website. Checkout is hosted by Shopify, which acts as the payment processor and handles the associated compliance. We receive the order and the information needed to fulfil it — never the card.

Under the GDPR, each purpose has a legal basis:

• Marketing email — your consent, given when you subscribe and withdrawable from any message.
• Answering a contact request — our legitimate interest in responding to you.
• Processing an order — performance of the sales contract, and our legal obligations to retain transaction records.
• Non-essential analytics — your consent, requested through the cookie banner and refusable without losing access to the site.

We use a small number of established providers, each for a single defined purpose:

• Shopify — commerce, checkout and payment processing.
• Klaviyo — email list management and sending.
• Vercel — hosting, content delivery and privacy-friendly analytics.

Some of these providers operate infrastructure outside the European Economic Area. Where data leaves the EEA, transfers rely on the European Commission’s Standard Contractual Clauses or an equivalent recognised mechanism, as set out in each provider’s data processing agreement.

Newsletter subscriptions are kept until you unsubscribe. Contact messages are kept for as long as needed to resolve the matter and a reasonable period afterwards. Order records are kept for the period required by accounting and tax law in the country of establishment.

You have the right to access your data, correct it, have it deleted, restrict or object to its processing, receive it in a portable format, and withdraw consent at any time. To exercise any of these, write to the customer care address on the Contact page — we will not ask you to justify the request.

You may also lodge a complaint with your national data protection authority.

This site is not directed at children and we do not knowingly collect data from anyone under 16.