Privacy Policy

Last updated: 29 October 2026

Nofara (“we”, “us”, “our”) runs the website nofara.shop (the “Site”). This policy explains what personal data we collect when you visit the Site or buy from us, how we use and share it, and how we protect it. We handle personal data in line with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

Who we are

The data controller for your personal data is:

The personal data we collect

• Order details: your name, delivery and billing addresses, email address, phone number (if you give one) and what you ordered.
• Payment details: card payments are processed securely by Stripe. We never see or store your full card or bank details.
• Messages: what you send us by email, by phone or through our contact form.
• Device and usage data: IP address, browser type, device information and the pages you request, recorded by our web server when you visit the Site. At checkout, Stripe also collects device information to help prevent fraud.

How we use your data, and our legal basis

Purpose	Legal basis
Processing and delivering your order, and handling returns and refunds	Performance of a contract
Answering your questions and giving customer support	Legitimate interests / performance of a contract
Preventing fraud and keeping the Site secure	Legitimate interests / legal obligation
Improving the Site and our products	Legitimate interests
Keeping tax and accounting records	Legal obligation

Who we share your data with

We never sell your personal data. We share it only with trusted service providers that help us run the business:

• Our website platform: the Site runs on WordPress with WooCommerce, at our web hosting provider, which hosts the Site and stores order data.
• Stripe, which processes card payments.
• Delivery carriers, which receive your name, address and contact details to deliver your order.
• Authorities, where the law requires it.

International transfers

Some of our service providers may process data outside the United Kingdom. When that happens, we make sure appropriate safeguards are in place, such as UK adequacy regulations or the UK International Data Transfer Agreement / Addendum.

Cookies

We use only essential cookies, the ones the Site needs to work:

• Cart and checkout: cookies that remember what is in your cart and keep your checkout working.
• Fraud prevention: cookies set by Stripe when you pay, to help detect and prevent fraud.

We don’t use analytics or marketing cookies. You can block or delete cookies in your browser settings, but the cart and checkout may then not work.

How long we keep your data

We keep order and transaction records for up to 6 years to meet UK tax and accounting rules. Other data is kept only for as long as needed for the purposes above, then deleted or anonymised.

Your rights

Under UK data protection law, you have the right to:

• access the personal data we hold about you;
• have inaccurate or incomplete data corrected;
• ask us to delete your data;
• restrict or object to how we use your data;
• receive your data in a portable format;
• withdraw your consent at any time, where we rely on consent.

To use any of these rights, email support@nofara.shop. We will reply within one month.

Complaints

If you’re unhappy with how we handle your data, please contact us first. You also have the right to complain to the UK Information Commissioner’s Office (ICO) at ico.org.uk.

Security

We protect your data with appropriate technical and organisational measures. Every checkout and payment page is encrypted (SSL), and card payments are handled by Stripe.

Children

The Site is not meant for children under 16, and we do not knowingly collect their personal data.

Changes to this policy

We may update this policy from time to time. The current version is always on this page, with its “Last updated” date at the top.

Contact us