Confidentiality

At NHShop , the privacy of your personal data is a priority. This policy aims to provide you with full transparency on how we collect, use and protect your data, in accordance with the General Data Protection Regulation (GDPR) .

Personal data collected

As part of the use of our site, we may collect the following data:

Identity information : first name, last name
Contact details : email address, postal address, telephone number
Order-related data : products purchased, purchase history
Payment data : processed via secure external providers (e.g. Stripe, PayPal)
Technical data : IP address, terminal type, browser
Browsing data : via cookies

Purposes of processing

This data is collected for the following reasons:

Processing and delivery of your orders
Managing your customer account
Communication with customer service
Sending transactional emails (order confirmation, tracking, etc.)
Improving the user experience on the site
Traffic and performance analysis (statistics)
Site security and fraud prevention

Cookies

We use cookies to:

Remember your preferences
Analyze site traffic
Improve performance and safety
Ensure the proper functioning of the shopping cart and ordering process

📌 The shelf life of cookies is limited to a maximum of 13 months .
You can change your preferences at any time in your browser settings.

Legal basis for processing

The treatments carried out are based on:

Execution of the contract (order, delivery)
Your consent (newsletter subscription, cookies)
Compliance with legal obligations (invoicing, guarantee)
Our legitimate interest (security, fraud prevention, site improvement)

Data retention

Your personal data is stored:

Throughout the duration of the commercial relationship
Up to 3 years after last interaction for marketing data
10 years for billing data (accounting obligation)

They are then either deleted or anonymized for statistical purposes .

Data security

We implement technical and organizational measures to ensure the security of your data:

Secure connection (HTTPS)
Payments processed by certified providers
Limited access to personal data
Regular backups

In the event of a security breach, you will be informed as soon as possible.

Your rights

In accordance with the GDPR, you have the following rights:

Access to your data
Rectification or deletion
Limitation or opposition to processing
Portability of your data
Withdraw your consent at any time

Transfer of data outside the EU

Some data may be transferred outside the European Union, in particular via our service provider Shopify (store hosting).
These transfers are governed by appropriate safeguards, such as the European Commission's standard contractual clauses .