Privacy policy
**Last updated: June 26, 2026**
NJIA operates this e-commerce platform, including all related information, content, features, tools, products, and services, to provide you with a curated shopping experience (the "Services"). NJIA is powered by Shopify, which enables us to deliver these Services to you. This Privacy Policy describes how we collect, use, and disclose your personal information when you visit, use, or make a purchase from NJIA, or otherwise communicate with us. If there is a conflict between our Terms of Service and this Privacy Policy, this Privacy Policy controls with respect to the collection, processing, and disclosure of your personal information.
By using and accessing any of our Services, you acknowledge that you have read and understand the collection, use, and disclosure of your information as detailed in this policy.
---
## Personal Information We Collect and Process
When we refer to "personal information," we mean information that identifies or can reasonably be linked to you. It does not include anonymized or completely de-identified data. We collect or process the following categories of personal information depending on how you interact with our store:
* **Contact Details:** Your name, billing address, shipping address, phone number, and email address.
* **Financial Information:** Payment card details (credit card, debit card), transaction history, payment confirmations, and billing details processed via secure payment gateways.
* **Account Information:** Your username, encrypted password, security questions, and saved account preferences.
* **Transaction History:** Detailed logs of the items you view, add to your cart, place on your wishlist, purchase, return, exchange, or cancel.
* **Communications:** Any information you provide when reaching out to customer support, including emails sent to our management team.
* **Device & Usage Data:** Your IP address, device type, browser specifications, network connection details, and technical logs regarding how and when you navigate the Services.
---
## Sources of Personal Information
We collect your data through the following channels:
* **Directly From You:** When you create an account, complete a purchase, or communicate with us.
* **Automated Technologies:** Via cookies, web beacons, and similar tracking pixels as you interact with our storefront.
* **Service Providers & Partners:** Through platforms that enable our infrastructure, such as payment processors, fulfillment partners, and Shopify.
---
## How We Use Your Personal Information
We utilize your personal information to deliver a premium, tailored shopping experience under the following lawful bases:
* **Fulfillment of Contract:** To process payments, verify transactions, ship your orders, handle authorized returns or exchanges, and manage your customer account.
* **Marketing & Personalization:** To send promotional updates, curated collection previews, or targeted online advertisements based on your browsing and purchase history. You may opt out of marketing communications at any time.
* **Security & Fraud Prevention:** To authenticate account credentials, secure our payment ecosystem, and detect or investigate fraudulent, unsafe, or malicious activity.
* **Customer Support:** To maintain an efficient business relationship and respond directly to your inquiries.
* **Legal Compliance:** To comply with applicable laws, respond to valid legal requests from law enforcement, or defend our legal rights.
---
## How We Disclose Personal Information
Under certain circumstances, we share your personal information with trusted third parties for legitimate business operations:
* **Shopify and Core Vendors:** To support our technical infrastructure, database management, cloud storage, payment processing, and local shipping logistics.
* **Marketing Partners:** To optimize our advertising campaigns and deliver personalized content across external networks.
* **Corporate Transactions:** In connection with a business merger, asset sale, or restructuring, where consumer data is transferred as a business asset.
* **Legal Requirements:** When mandated by law, subpoenas, or regulatory bodies to protect the safety, rights, and property of NJIA, our users, or the public.
---
## Relationship with Shopify
Our storefront is hosted by Shopify Inc. Shopify collects and processes your personal information to optimize store performance and delivery. To support our business growth, we utilize Shopify's enhanced commercial features, which incorporate aggregate data from your interactions across Shopify-powered merchants.
In these specific instances, Shopify acts as an independent data controller for that shared data ecosystem. To learn more about how Shopify processes your information, please visit the [Shopify Consumer Privacy Policy](https://privacy.shopify.com/en) and the [Shopify Privacy Portal](https://privacy.shopify.com).
---
## International Data Transfers
As a global e-commerce platform, NJIA may transfer, store, and process your personal information outside of your country of residence. When transferring personal data out of the European Economic Area (EEA) or the United Kingdom, we rely strictly on recognized legal transfer mechanisms, such as the European Commission's Standard Contractual Clauses (SCCs), unless the destination country has been formally designated as providing an adequate level of data protection.
---
## Data Security and Retention
While we employ rigorous industry-standard administrative and technical security measures to safeguard your personal data, no digital environment is entirely impenetrable. We cannot guarantee perfect security and recommend against using unsecure channels to transmit confidential data.
We retain your personal information only for as long as necessary to maintain your customer account, fulfill orders, comply with legal obligations, resolve business disputes, or enforce our active terms and policies.
---
## Your Rights and Choices
If you reside within the United Kingdom or the European Economic Area (EEA), you possess the following legally guaranteed rights under the GDPR:
* **Right to Access / Know:** You have the right to request a comprehensive copy of the personal information we hold about you.
* **Right to Deletion:** You have the right to request that we erase your personal data from our active systems, subject to legal retention overrides (e.g., tax compliance).
* **Right to Rectification:** You have the right to request the immediate correction of inaccurate or incomplete personal data.
* **Right to Data Portability:** You have the right to receive your data in a structured, machine-readable format or request its transfer to a third party.
* **Objection & Restriction of Processing:** You have the right to object to, or request that we restrict, the processing of your personal information for specific purposes (such as direct marketing).
* **Withdrawal of Consent:** Where processing relies on your explicit consent, you retain the right to withdraw that consent at any time without affecting the lawfulness of processing executed prior to withdrawal.
To exercise any of these rights, or to modify your communication preferences, please contact our data controller team directly at **Info@njia.nl**. We will verify your identity before processing the request in accordance with applicable timelines.
---
## Third-Party Integration and Children's Data
Our storefront may contain links to external web platforms or social media widgets. We do not control and are not responsible for the privacy practices of third-party websites; please review their independent policies directly.
Our Services are intended strictly for adult consumers. We do not knowingly collect or maintain personal information from individuals under the age of majority in their respective jurisdictions.
---
## Complaints and Contact Information
If you have questions, concerns, or formal complaints regarding how your personal information is managed, please contact us. For the purposes of applicable data protection laws, NJIA operates as the primary data controller.
**Email:** Info@njia.nl
If our response does not satisfy your inquiry, residents of the EEA hold the legal right to lodge a formal complaint with their local data protection supervisory authority (such as the *Autoriteit Persoonsgegevens* in the Netherlands).