Privacy Policy

Pacha Organic Ltd trading as Nunaïa is registered in the Republic of Ireland and is the sole owner of the information collected on www.nunaia.com. We are committed to protecting your privacy, and at the same time we endeavour to use any data we collect from you to provide the best possible service. This Policy should be read in conjunction with the general Terms and Conditions of this website.

OVERVIEW

Maintaining the security of your data is a priority at NUNAÏA, and we are committed to respecting your privacy rights. We pledge to handle your data fairly and legally at all times. NUNAÏA is also dedicated to being transparent about what data we collect about you and how we use it. We at nunaia.com respect your right to privacy and comply with our obligations under the Irish Data Protection Act's of 1988 and 2003. NUNAÏA is registered in Ireland and is referred to as "NUNAÏA", "we" or "us" in this policy.

This policy, which applies whether you use your mobile device or go on line, provides you with information about:

- how we use your data;

- what personal data we collect;

- how we ensure your privacy is maintained; and

- your legal rights relating to your personal data.

1. HOW WE USE YOUR DATA

General

NUNAÏA (and trusted partners acting on our behalf) uses your personal data:

- to provide services to you;

- to make a tailored website available to you;

- to manage any registered account(s) that you hold with us;

- to verify your identity;

- for crime and fraud prevention, detection and related purposes;

- with your agreement, to contact you electronically or by SMS message about promotional offers and products and services which we think may interest you;

- for market research purposes - to better understand your needs;

- to enable NUNAÏA to manage customer service interactions with you; and

- where we have a legal right or duty to use or disclose your information (for example in relation to an investigation by a public authority or in a legal dispute).

Other Marketing

Promotional communications

NUNAÏA uses your personal data for electronic marketing purposes (with your consent).

NUNAÏA aims to update you about products & services which are of interest and relevance to you as an individual.

You have the right to opt out of receiving promotional communications at any time, by:

making use of the simple “unsubscribe” link in emails replying STOP to SMS messages and/or

contacting NUNAÏA via the contact channels set out in this Policy.

Web Banner Advertising

If you visit our websites, you may receive personalised banner advertisements whilst browsing other websites. Any banner advertisements you see will relate to products you have viewed whilst browsing our websites on your computer or other devices.

These advertisements are provided by NUNAÏA via market leading specialist providers using ‘cookies’ placed on your computer or other devices (see further information on the use of cookies in our Cookie Policy below). You can remove or disable cookies at any time - see below for further information.

Sharing data with third parties

Our service providers and suppliers

In order to make certain services available to you, we may need to share your personal data with some of our service partners. These include IT, delivery and marketing service providers.

NUNAÏA only allows its service providers to handle your personal data when we have confirmed that they apply appropriate data protection and security controls. They can only use your data to provide services to NUNAÏA and to you, and for no other purposes.

Other third parties

Aside from our service providers, NUNAÏA will not disclose your personal data to any third party, except as set out below. We will never sell or rent our customer data to other organisations for marketing purposes.

We may share your data with:

- governmental bodies, regulators, law enforcement agencies, courts/tribunals and insurers where we are required to do so: -

- to comply with our legal obligations;

- to exercise our legal rights (for example in court cases);

- for the prevention, detection, investigation of crime or prosecution of offenders; and

- for the protection of our employees and customers.

International transfers

To deliver products and services to you, it is sometimes necessary for NUNAÏA to share your data outside of the European Economic Area. This will typically occur when service providers are located outside the EEA or if you are based outside the EEA. These transfers are subject to special rules under data protection laws.

If this happens, we will ensure that the transfer will be compliant with data protection law and all personal data will be secure. Our standard practice is to use ‘standard data protection clauses’ which have been approved by the European Commission for such transfers.

2. WHAT PERSONAL DATA DO WE COLLECT?

NUNAÏA may collect the following information about you:

- your name, age/date of birth and gender;

- your contact details: postal address including billing and delivery addresses, telephone numbers (including mobile numbers) and e-mail address;

- purchases and orders made by you;

- your on-line browsing activities on the NUNAÏA website;

- your communication and marketing preferences;

- your interests, preferences, feedback and survey responses;

- your location;

- your correspondence and communications with NUNAÏA; and

- other publicly available personal data, including any which you have shared via a public platform (such as an Instagram or public Facebook page).

Our website is not intended for children and we do not knowingly collect data relating to children.

This list is not exhaustive and, in specific instances, we may need to collect additional data for the purposes set out in this Policy. Some of the above personal data is collected directly, for example when you set up an on-line account on our website, or send an email to our customer services team. Other personal data is collected indirectly, for example your browsing or shopping activity. We may also collect personal data from third parties who have your consent to pass your details to us, or from publicly available sources.

How long do we keep your data?

We will not retain your data for longer than necessary for the purposes set out in this Policy. Different retention periods apply for different types of data, however the longest we will normally hold any personal data is 6 years.

3. HOW WE PROTECT YOUR DATA

Our controls

NUNAÏA is committed to keeping your personal data safe and secure.

Our security measures include: -

- security controls which protect the entire NUNAÏA IT infrastructure from external attack and unauthorised access; and

- internal policies setting out our data security approach and training for employees

4. WHAT YOU CAN DO TO HELP PROTECT YOUR DATA

NUNAÏA will never ask you to confirm any bank account or credit card details via email. If you receive an email claiming to be from NUNAÏA asking you to do so, please ignore it and do not respond.

If you are using a computing device in a public location, we recommend that you always log out and close the website browser when you complete an online session.

In addition, we recommend that you take the following security measures to enhance your online safety both in relation to NUNAÏA and more generally: -

- keep your account passwords private. Remember, anybody who knows your password may access your account.

- when creating a password, use at least 8 characters. A combination of letters and numbers is best. Do not use dictionary words, your name, email address, or other personal data that can be easily obtained. We also recommend that you frequently change your password.

- avoid using the same password for multiple online accounts.

5. YOUR RIGHTS

You have the following rights:

the right to ask what personal data that we hold about you at any time, subject to a fee specified by law

the right to ask us to update and correct any out-of-date or incorrect personal data that we hold about you free of charge; and

- (as set out above) the right to opt out of any marketing communications that we may send you.

If you wish to exercise any of the above rights, please contact us using the contact details set out below.

6. CONTACT INFORMATION

If you have any questions about how NUNAÏA uses your personal data that are not answered here, or if you want to exercise your rights regarding your personal data, please contact us by E-MAIL HERE.

7. THIRD PARTY SITES

NUNAÏA has partnered with certain trusted third parties to make additional products and services available to you, including:

We use Google Analytics, to collect standard internet log information and details of visitor behaviour patterns. We do this to find out things such as the number of visitors to the various parts of the site. This information is only processed in a way which does not identify anyone. We do not make, and do not allow Google to make, any attempt to find out the identities of those visiting our website. For more information, please see Google's privacy notice.

We use a third-party provider, Klaviyo, to deliver our newsletter. We gather statistics around email opening and clicks using industry standard technologies to help us monitor and improve our e-newsletter. For more information, please see Klaviyo's privacy notice. You can unsubscribe to general mailings at any time of the day or night by clicking the unsubscribe link at the bottom of any of our emails or by emailing our data protection officer here.

These websites, and others linked to from this Policy, are owned and operated by a third party and they are responsible for processing personal data in accordance with their own privacy policies.

8. OUR STORE

Our store is hosted on Shopify Inc. They provide us with the online e-commerce platform that allows us to sell our products and services to you. Your data is stored through Shopify’s data storage, databases and the general Shopify application. They store your data on a secure server behind a firewall.

Payment:

If you choose a direct payment gateway to complete your purchase, then Shopify stores your credit card data. It is encrypted through the Payment Card Industry Data Security Standard (PCI-DSS). Your purchase transaction data is stored only as long as is necessary to complete your purchase transaction. After that is complete, your purchase transaction information is deleted.

All direct payment gateways adhere to the standards set by PCI-DSS as managed by the PCI Security Standards Council, which is a joint effort of brands like Visa, MasterCard, American Express and Discover. PCI-DSS requirements help ensure the secure handling of credit card information by our store and its service providers.

For more insight, you may also want to read Shopify’s Terms of Service here or Privacy Statement here.

9. CHANGES TO THIS PRIVACY POLICY

We reserve the right to modify this privacy policy at any time, so please review it frequently. Changes and clarifications will take effect immediately upon their posting on the website. If we make material changes to this policy, we will notify you here that it has been updated, so that you are aware of what information we collect, how we use it, and under what circumstances, if any, we use and/or disclose it.

We reserve the right to transfer information (including your Personal Data) to a third party in the event of a sale, merger, liquidation, receivership or transfer of all or substantially all of the assets of our company provided that the third party agrees to adhere to the terms of the Website Privacy Policy.

10. COOKIES

Cookies are small pieces of information, stored in simple text files, placed on your computer by a website. Some cookies can be read by the website on your subsequent visits. The information stored in a cookie may relate to your browsing habits on the webpage, or a unique identification number so that the website can ‘remember’ you on your return visit. Other cookies are deleted when you close your browser and only relate to the working of the website. Generally speaking, cookies do not contain personal information from which you can be identified, unless you have furnished such information to the website.

When you first visit this website, you will see a message informing you about cookies where you can select your cookie preference.

Within your browser you can also choose whether you wish to accept cookies or not. Generally, your browser will offer you the choice to accept, refuse or delete cookies.

11. MOBILE TERMS OF SERVICE

The NUNAÏA mobile message service (the "Service") is operated by Pacha Organic Ltd (“NUNAÏA”, “we”, or “us”). Your use of the Service constitutes your agreement to these terms and conditions (“Mobile Terms”). We may modify or cancel the Service or any of its features without notice. To the extent permitted by applicable law, we may also modify these Mobile Terms at any time and your continued use of the Service following the effective date of any such changes shall constitute your acceptance of such changes.

By consenting to NUNAÏA SMS/text messaging service, you agree to receive recurring SMS/text messages from and on behalf of Pacha Organic Ltd through your wireless provider to the mobile number you provided, even if your mobile number is registered on any state or federal Do Not Call list. Text messages may be sent using an automatic telephone dialing system or other technology. Service-related messages may include updates, alerts, information, and order status (e.g., order updates, account alerts, etc.). Promotional messages may include Giveaways, promotions, Product launches, Abandoned cart, and other marketing offers (e.g., cart reminders).

You understand that you do not have to sign up for this program in order to make any purchases, and your consent is not a condition of any purchase with Pacha Organic Ltd. Your participation in this program is completely voluntary.

We do not charge for the Service, but you are responsible for all charges and fees associated with text messaging imposed by your wireless provider. Message frequency varies. Message and data rates may apply. Check your mobile plan and contact your wireless provider for details. You are solely responsible for all charges related to SMS/text messages, including charges from your wireless provider.

You may opt-out of the Service at any time. Text the single keyword command STOP to Nunaia or click the unsubscribe link (where available) in any text message to cancel. You'll receive a one-time opt-out confirmation text message. No further messages will be sent to your mobile device, unless initiated by you. If you have subscribed to other Pacha Organic Ltd mobile message programs and wish to cancel, except where applicable law requires otherwise, you will need to opt out separately from those programs by following the instructions provided in their respective mobile terms.

For Service support or assistance, text HELP to Nunaia or email us here.

We may change any short code or telephone number we use to operate the Service at any time and will notify you of these changes. You acknowledge that any messages, including any STOP or HELP requests, you send to a short code or telephone number we have changed may not be received and we will not be responsible for honouring requests made in such messages.

The wireless carriers supported by the Service are not liable for delayed or undelivered messages. You agree to provide us with a valid mobile number. If you get a new mobile number, you will need to sign up for the program with your new number.

To the extent permitted by applicable law, you agree that we will not be liable for failed, delayed, or misdirected delivery of any information sent through the Service, any errors in such information, and/or any action you may or may not take in reliance on the information or Service.