Privacy Policy

Last updated: March 2026

Nomad the Label Limited Company (“we”, “us” or “our”) is committed to protecting your personal data and respecting your privacy. This Privacy Policy explains how we collect, use, store, and protect your personal information when you visit or make a purchase from nomadthelabel.co.uk (our “UK Store”).

This policy complies with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018. We are the data controller for personal data collected through this website.

Please read this policy carefully. By using our UK Store, you acknowledge that you have read and understood this Privacy Policy.

Section 1 – What information do we collect?

Information you provide to us

When you purchase from our store, register an account, or contact us, we collect personal information, including:

  • Your name and contact details (email address, postal address, telephone number)

  • Payment and billing information

  • Order history and transaction details

  • Communications you send to us

  • Any information you provide when subscribing to our email marketing

Information collected automatically

When you browse our UK Store, we automatically collect certain technical data, including:

  • Your IP address and device identifiers

  • Browser type and version, operating system

  • Pages visited, time spent on pages, and referring URLs

  • Cookie data (see Section 11 for full details)

Section 2 – Legal basis for processing

Under UK GDPR, we must have a lawful basis for collecting and using your personal data. We rely on the following legal bases:

  • Contract performance: to process your orders, arrange delivery, manage returns, and provide customer support

  • Legitimate interests: to improve our website and services, prevent fraud, and maintain the security of our store, where these interests are not overridden by your rights

  • Consent: for email marketing and non-essential cookies, you may withdraw your consent at any time (see Section 3)

  • Legal obligation: where we are required to retain data by law (e.g., for tax and accounting purposes)

Section 3 – Consent and how to withdraw it

How we obtain your consent

Where we rely on consent as our legal basis, for example, for email marketing, we will ask for your explicit agreement before sending you marketing communications. We will make it easy to understand what you are consenting to.

How to withdraw your consent

You have the right to withdraw your consent at any time. To do so, you can:

Withdrawing consent does not affect the lawfulness of any processing carried out before you withdrew it.

Section 4 – How we use your information

We use your personal data for the following purposes:

  • Processing and fulfilling your orders, including arranging delivery and handling returns

  • Managing your customer account

  • Sending transactional communications (order confirmations, shipping notifications)

  • Sending marketing emails about new products, promotions, and updates only where you have given consent

  • Improving our website experience and product offering

  • Complying with our legal and regulatory obligations

  • Fraud prevention and maintaining the security of our store

Section 5 – Disclosure of your information

We do not sell your personal data. We may share your information with trusted third parties in the following circumstances:

  • Service providers who assist us in operating our store (e.g., our e-commerce platform, payment processors, delivery partners, email marketing platform) only to the extent necessary for them to perform their services

  • Professional advisers such as solicitors, accountants, and insurers, where necessary

  • Law enforcement agencies or regulatory authorities, if we are legally required to do so

  • A buyer or successor organisation, if we are involved in a merger, acquisition, or sale of assets, in which case we will notify you before your data is transferred

All third-party service providers are required to process your personal data in accordance with UK GDPR, and we ensure appropriate contractual protections are in place.

Section 6 – Shopify and payment processing

Our UK Store is hosted on Shopify Inc. Shopify provides the e-commerce platform that enables us to sell products to you. Your data is stored on Shopify’s secure infrastructure, including its databases.

Payment security

If you choose a direct payment gateway, Shopify stores your credit card data in an encrypted format in accordance with the Payment Card Industry Data Security Standard (PCI-DSS). Your purchase transaction data is stored only long enough to complete your transaction, after which it is deleted.

For more information, please refer to Shopify's Privacy Policy at https://www.shopify.com/legal/privacy.

Section 7 – International data transfers

Some of our third-party service providers (including Shopify) are based outside the UK. When we transfer your personal data outside the UK, we ensure appropriate safeguards are in place to protect it, in accordance with UK GDPR. These safeguards may include:

  • Transfers to countries that benefit from a UK adequacy regulation

  • Use of the UK International Data Transfer Agreement (IDTA) or UK Addendum to the EU Standard Contractual Clauses

Where we transfer your data to a provider in a country without an adequacy decision, we will ensure the transfer is governed by appropriate contractual protections. You may request details of the specific safeguards we rely on by contacting us at care@nomadthelabel.co.uk.

Section 8 – Third-party services and links

Certain third-party service providers used by us will only collect, use, and disclose your personal data to the extent necessary to allow them to perform the services they provide to us. We recommend reading their privacy policies to understand how they handle your data.

Our UK Store may contain links to third-party websites. We are not responsible for the privacy practices of those sites. Once you leave nomadthelabel.co.uk, this Privacy Policy no longer applies, and we encourage you to read the privacy statements of any other sites you visit.

Section 9 – Data retention

We retain your personal data only for as long as is necessary for the purposes set out in this policy, or as required by applicable law:

  • Order and transaction data: retained for 7 years to comply with HMRC tax requirements

  • Customer account data: retained for as long as your account is active, or up to 3 years after your last transaction

  • Marketing preferences and consent records: retained until you withdraw consent or request deletion

  • Website usage data: retained for up to 26 months

When your data is no longer required, we will securely delete or anonymise it.

Section 10 - Security

We take the security of your personal data seriously. We implement appropriate technical and organisational measures to protect your data against unauthorised access, accidental loss, destruction, or damage.

Where you have created an account, you are responsible for keeping your login credentials confidential. Credit card information is encrypted using SSL (Secure Sockets Layer) and stored using AES-256 encryption. We comply with all PCI-DSS requirements and follow industry-standard security practices.

No method of internet transmission is 100% secure. While we do our best to protect your data, we cannot guarantee absolute security.

Section 11 - Cookies

We use cookies to help us provide you with a good experience on our website and to improve our store. By continuing to browse our website, you agree to our use of cookies in accordance with this policy.

Under the Privacy and Electronic Communications Regulations (PECR), we are required to obtain your consent before setting non-essential cookies. You can manage your cookie preferences at any time via the cookie settings on our website.

Cookies we use

  • _session_id — unique token, session-based. Allows Shopify to store information about your session (referrer, landing page, etc.)

  • _shopify_visit — no data held, persistent for 30 minutes from last visit. Used to record the number of visits for internal analytics

  • _shopify_uniq — no data held, expires midnight of the following day. Counts the number of visits to the store by a single customer's

  • cart — unique token, persistent for 2 weeks. Stores information about the contents of your shopping cart

  • _secure_session_id — unique token, session-based

  • storefront_digest — unique token, indefinite. Used to determine if a visitor has access where a store password is active

You may opt out of non-essential cookies via your browser settings or our cookie preference centre. Please note that disabling certain cookies may affect the functionality of our website.

Section 12 – Your rights under UK GDPR

As a data subject under UK GDPR, you have the following rights regarding your personal data:

  • Right of access: you may request a copy of the personal data we hold about you (a “Subject Access Request”)

  • Right to rectification: you may ask us to correct any inaccurate or incomplete data

  • Right to erasure (“right to be forgotten”): you may ask us to delete your personal data in certain circumstances

  • Right to restriction of processing: you may ask us to restrict how we use your data in certain circumstances

  • Right to data portability: you may request that we transfer your data to another organisation or to you, in a structured, machine-readable format

  • Right to object: you may object to us processing your data for direct marketing purposes or where we rely on legitimate interests as our legal basis

  • Rights in relation to automated decision-making and profiling

To exercise any of these rights, please contact us at care@nomadthelabel.co.uk. We will respond to your request within one calendar month. We may need to verify your identity before processing your request.

Section 13 – Changes to this privacy policy

We may update this Privacy Policy from time to time to reflect changes in our practices or in applicable law. We will post the updated policy on this page with a revised “Last updated” date. Where changes are material, we will notify you by email or by a prominent notice on our website.

We encourage you to review this policy periodically. Your continued use of our UK Store after any changes constitutes your acceptance of the revised policy.

Contact Us

If you have any questions about this Privacy Policy, your personal data, or how to exercise your rights, please contact us at care@nomadthelabel.co.uk.

We are committed to working with you to achieve a fair resolution of any privacy-related concern or complaint.