Privacy Policy

Hey There!

Thank you for taking the time to read through our privacy policy. We always strive to keep your data as secure as possible in order to protect you and your identity. In the text provided below, you will find detailed information about the measures we take to comply with data protection regulations and your rights. We value Privacy and we try our best to protect your Data! <3

Data Controller

The entity responsible for processing your personal data is Dario Senzow / Nowheregirls.com. For any privacy-related inquiries, please contact us at ghandimacwise@gmail.com.

Legal Basis for Processing (Art. 6 GDPR)

We process your personal data under the following legal bases:

• Contractual necessity (Art. 6(1)(b) GDPR) – to process and fulfill your orders.
• Legal obligation (Art. 6(1)(c) GDPR) – to comply with tax and commercial laws.
• Legitimate interests (Art. 6(1)(f) GDPR) – for website security, fraud prevention, and business operations.
• Consent (Art. 6(1)(a) GDPR) – for cookies and analytics where applicable.

Information We Collect

We collect the following types of personal data:

• Order Information: Name, shipping/billing address, email, and phone number to fulfill your purchase.
• Payment Data: Handled exclusively by Stripe. We do not store or have access to your full credit card numbers.
• Device Data: IP address, browser type, time zone, and cookies for site functionality, analytics, and security.

Hosting and Website Infrastructure

Our website is hosted by Vercel Inc., 440 N Barranca Ave #4133, Covina, CA 91723, USA. Vercel processes personal data such as IP addresses and log files to provide and secure the website. Data processing is based on Art. 6(1)(f) GDPR (legitimate interest in secure and efficient website delivery). Data transfers to the USA are protected by Standard Contractual Clauses (SCCs).

Third-Party Data Sharing

We share your data with service providers to operate our business:

• Payment Processor (Stripe): Stripe collects and processes personal data, including identifying information about the devices that connect to its services, for payment processing and fraud detection.
• Logistics Partners: Your contact details are shared with our fulfillment agents and carriers (e.g., DHL) to deliver your order.
• IT and Hosting Providers: To operate and maintain our website infrastructure.

International Transfers

As we use global service providers, your data may be transferred to countries outside the EEA (e.g., USA). We ensure such transfers are protected by Standard Contractual Clauses (SCCs) to maintain a high level of data protection.

Data Retention

We keep your order data for a minimum of 6 to 10 years as required by EU tax and commercial laws. Other personal data will be retained only as long as necessary for the purposes described in this policy.

Your Rights (GDPR)

Under the GDPR, you have the right to:

• Access the data we hold about you.
• Request the correction or deletion of your data.
• Object to or restrict the processing of your data.
• Request data portability.
• Withdraw consent at any time for cookies or marketing.

To exercise these rights, email us at ghandimacwise@gmail.com.

Right to Lodge a Complaint

You have the right to lodge a complaint with a data protection supervisory authority in your country if you believe that the processing of your personal data violates data protection laws.

Cookies & Tracking

We use essential cookies to keep items in your cart and analytical cookies to improve our shop. You can adjust your preferences via our cookie consent banner.

Data Security

We use SSL encryption (HTTPS) and appropriate technical and organizational security measures to protect your personal data against loss, misuse, unauthorized access, disclosure, or alteration.

Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes to our practices or for legal reasons.