Privacy Policy

We collect personal information that you provide directly to us, information generated when you use our website, and information received from service providers that help us operate our business.

Information you provide

When you make a purchase, create or use an account, subscribe to communications, participate in a promotion, submit a request, or otherwise interact with Nibblora, we may collect information such as:

• Your name, billing address, shipping address, email address, and telephone number.
• Order details, selected products, purchase history, returns, exchanges, and related transaction records.
• Account credentials and preferences when account functionality is available.
• Messages, feedback, reviews, survey responses, and other information you choose to submit.

Payment information

Payments may be processed by third-party payment providers. Depending on the payment method you select, those providers may collect payment card details, billing information, authentication data, and other information necessary to complete a transaction. Nibblora may receive transaction confirmations and limited payment-related details, but we do not need to store complete card numbers in order to fulfill your purchase.

Information collected automatically

When you browse our website, certain technical and usage information may be collected automatically. This can include your IP address, browser type, device type, operating system, referring pages, pages viewed, approximate location derived from technical information, session activity, and interaction data.

We use personal information for legitimate business purposes related to operating Nibblora and serving our customers.

• Process, confirm, fulfill, deliver, return, exchange, and manage purchases.
• Send transactional messages about orders, payments, delivery, account activity, or policy-related matters.
• Respond to questions, requests, complaints, and other customer communications.
• Maintain website functionality, troubleshoot errors, and improve usability.
• Understand how customers use our store and evaluate products, content, and customer experiences.
• Detect, investigate, and help prevent fraud, misuse, unauthorized transactions, and security incidents.
• Comply with tax, accounting, regulatory, legal, and recordkeeping requirements.
• Protect our rights, customers, systems, property, and business operations.
• Send marketing communications where permitted by law and according to your communication preferences.

Marketing preferences

If you receive promotional emails from us, you may use the unsubscribe mechanism provided in those messages. Even if you opt out of marketing, we may still send non-promotional communications that are necessary to administer transactions, provide requested services, or address important store or account matters.

We may disclose personal information to organizations that perform services on our behalf or that are necessary to complete transactions and operate our store. These recipients may include:

• Ecommerce, website hosting, infrastructure, and technology providers.
• Payment processors and financial service providers.
• Shipping, logistics, fulfillment, and delivery providers.
• Customer service and communications providers.
• Analytics, security, fraud prevention, and performance providers.
• Advertising and marketing service providers where permitted by applicable law.
• Professional advisers such as accountants, insurers, auditors, and legal advisers.

Legal and business requirements

We may disclose information when reasonably necessary to comply with law, legal process, court orders, government requests, regulatory obligations, or to protect the rights, safety, property, and security of Nibblora, our customers, or others.

Personal information may also be disclosed or transferred in connection with a business transaction such as a merger, financing, reorganization, sale of assets, acquisition, or similar corporate event, subject to applicable legal requirements.

We retain personal information for as long as reasonably necessary for the purposes described in this Policy, including to fulfill transactions, maintain appropriate business records, resolve disputes, enforce agreements, prevent fraud, and satisfy tax, accounting, regulatory, and other legal requirements.

Retention periods may vary depending on the type of information, the context in which it was collected, our operational needs, and applicable laws. When information is no longer reasonably required, we may delete, anonymize, or otherwise dispose of it in accordance with our practices and legal obligations.

Depending on where you live, applicable privacy law may provide you with certain rights concerning your personal information. These rights are not identical in every jurisdiction and may be subject to exceptions.

Submitting a privacy request

To protect personal information, we may need to verify your identity before fulfilling certain requests. Verification requirements depend on the nature of the request, the information involved, and applicable law. We may also be permitted or required to retain certain information despite a deletion request.

Where permitted by law, an authorized agent may submit a request on your behalf. We may require evidence of authorization and may ask you to verify your identity directly.

Non-discrimination

We will not unlawfully discriminate against you for exercising privacy rights provided by applicable law.

We use reasonable administrative, technical, and organizational measures intended to protect personal information against unauthorized access, loss, misuse, alteration, or disclosure.

No online service, electronic transmission, or information storage system can be guaranteed to be completely secure. For that reason, while we work to protect personal information, we cannot guarantee absolute security.

You can also help protect your information by using strong credentials, keeping account information confidential, using trusted devices and networks, and being cautious about unsolicited requests for personal or payment information.

Our store is intended for a general audience and is not directed to children under the age at which parental consent is required under applicable law. We do not knowingly seek to collect personal information from children in circumstances where such collection would require parental authorization.

If we learn that personal information has been collected from a child in a manner inconsistent with applicable law, we will take reasonable steps to address the information as required.

The companies and service providers that support our website and transactions may operate in different locations. As a result, personal information may be processed or stored in jurisdictions outside your state, province, or country of residence.

Privacy and data protection laws can vary between jurisdictions. Where required, we seek to use appropriate contractual, organizational, or other safeguards for relevant transfers and processing activities.

We may update this Privacy Policy periodically to reflect changes to our practices, technologies, services, business operations, or legal requirements. When changes are made, the revised version will be posted on this page and the effective date may be updated.

We encourage you to review this page from time to time so you remain informed about how personal information is handled.