Privacy policy

Last Updated: October 19, 2025

Nayati operates this store and website, including all information, content, features, tools, products, and related services, in order to provide you, as a customer, with a personalized shopping experience (collectively, the “Services”).
Nayati is a store powered by Shopify, which enables us to provide these Services.

This Privacy Policy explains how we collect, use, and disclose your personal information when you access or use our Services, make a purchase or other transaction, or communicate with us in any way.
If there is any inconsistency between our Terms of Service and this Privacy Policy, this Privacy Policy shall prevail regarding the collection, processing, and disclosure of your personal data.

By accessing or using our Services, you acknowledge that you have read and understood this Privacy Policy.

1. Personal Information We Collect

When we say “personal information,” we refer to any information that identifies you or can reasonably be linked to you or another individual.
We may collect or process the following categories of personal data:

Contact Information: name, address, billing/shipping address, phone number, and email.
Financial Information: credit/debit card numbers, bank details, payment confirmations, and related transaction data.
Account Information: username, password, security questions, preferences, and settings.
Transaction Information: items viewed, added to cart or wish list, purchased, returned, exchanged, or canceled, as well as past transactions.
Communications: details from your messages or inquiries with our customer service.
Device Information: device type, browser, network connection, IP address, and unique identifiers.
Usage Information: data about how and when you access and interact with the Services.

2. Sources of Personal Information

We may collect your information from:

Directly from you, when you create an account, place an order, or contact us.
Automatically, through cookies, analytics, and similar technologies.
From service providers, who process data on our behalf.
From business partners or other third parties.

3. How We Use Personal Information

We may use your personal information for the following purposes:

To Provide and Improve Our Services

To process your orders and payments, deliver products, handle returns, personalize your shopping experience, and maintain your account.

Marketing and Advertising

To send promotional offers, updates, or show targeted ads based on your activity and preferences. You may opt out of marketing emails at any time by using the unsubscribe link included in each message.

Security and Fraud Prevention

To authenticate your account, detect and investigate fraud or illegal activities, and ensure a safe shopping environment.

Customer Support and Communication

To respond to your requests, manage inquiries, and maintain our customer relationship.

Legal Obligations

To comply with applicable laws, respond to lawful requests, enforce our policies, or handle disputes and investigations.

4. Disclosure of Personal Information

We may share your personal information in the following situations:

With Shopify and trusted service providers (IT, payment, shipping, customer support, analytics).
With business and marketing partners for promotional purposes.
With third parties when you request or consent (e.g., social media widgets, shipping partners).
Within our group of companies for internal management.
In connection with a business transaction (e.g., merger, acquisition, or insolvency).
When required by law or legal process, to protect rights, property, or safety.

5. Relationship with Shopify

Our Services are hosted by Shopify, which also collects and processes certain personal data about your interactions with our store.
Your information may be transferred and stored outside your country of residence.

For more details about Shopify’s data practices and your rights, please visit the Shopify Consumer Privacy Policyand the Shopify Privacy Portal.

6. Third-Party Websites

Our Services may contain links to third-party websites or platforms.
We are not responsible for their content, privacy, or security.
Please review their respective privacy policies before submitting any data.

7. Children’s Data

Our Services are not intended for minors, and we do not knowingly collect data from anyone under the age of majority.
If you believe a child has provided personal data, please contact us to request deletion.
We do not sell or share the personal data of individuals under 16 years of age.

8. Security and Retention

We use reasonable technical and organizational measures to protect your data.
However, no system is entirely secure.
We retain your data only for as long as necessary to provide our Services, fulfill legal obligations, or resolve disputes.

9. Your Rights

Depending on your location, you may have the following rights:

Access: request copies of your personal data.
Deletion: request the erasure of your data.
Correction: request updates or rectifications of inaccurate information.
Portability: request a copy of your data in a portable format.
Opt-Out: stop receiving marketing communications.

For EEA and UK Residents

You may also:

Object to or restrict certain data processing.
Withdraw consent for processing based on consent (without affecting prior lawful processing).

To exercise your rights, please contact us via the details below.
We may verify your identity before responding to your request.

10. Complaints

If you have concerns about our handling of your data, please contact us first.
You may also contact your local data protection authority.
For EEA residents, a list of authorities can be found here

11. International Data Transfers

Your data may be transferred and processed outside your country of residence.
When transferring data outside the EEA or UK, we rely on Standard Contractual Clauses or other approved safeguards, unless the receiving country ensures an adequate level of protection.

12. Updates to This Policy

We may update this Privacy Policy periodically to reflect operational, legal, or regulatory changes.
The revised version will be posted here with an updated “Last Updated” date.
Significant changes will be communicated as required by law.