Privacy Policy

Last updated: 27/11/2025

This Privacy Policy explains how Nulsi (“we”, “us”, or “our”) collects, uses, and protects your personal information when you visit our website, make a purchase, subscribe to our products, or otherwise interact with us (collectively, the “Services”).

By using our Services, you agree to the collection and use of information in accordance with this Privacy Policy.

1. Who we are

Controller:
Nulsi
SaleMania
The Netherlands, Almelo, Loofgang 12

Contact email: support@nulsi.com

If you have questions about this Privacy Policy or your data, you can contact us at support@nulsi.com.

If you are in the EU/EEA or UK, Nulsi is the “data controller” of your personal data under GDPR.

2. Information we collect

We collect the following categories of information:

2.1 Information you provide to us

Account & order details: name, email address, billing and shipping address, phone number.
Purchase information: products ordered, order value, currency, payment method (tokenized/last 4 digits via our payment provider), subscription details (frequency, start date, status).
Customer support: information you provide when you contact us (emails, chat messages, form submissions, social media DMs).
Marketing preferences: your choices about receiving email/SMS marketing and newsletters.
Health-related context (optional): if you choose to share information such as age range, menopausal stage, or symptoms in surveys or forms. We do not use this information to provide medical diagnosis or treatment.

2.2 Information we collect automatically

When you visit our website or use our Services, we may automatically collect:

Device & usage data: IP address, browser type, device type, operating system, referring URLs, pages viewed, time spent on pages, clicks, scrolls, and general interaction data.
Log data: date/time of visits, error logs, and performance data.
Cookies & similar technologies: small text files stored on your device, web beacons, pixels, and tags (see Section 6 – Cookies & Tracking).

2.3 Information from third parties

We may receive information about you from:

Payment processors (e.g. Shopify Payments, Stripe, PayPal, Klarna, etc.) to confirm payment status and fraud checks.
Subscription platforms (e.g. Seal Subscriptions or similar) to manage your recurring orders.
Analytics & advertising partners (e.g. Google Analytics, Meta/Facebook, TikTok, Pinterest) – typically aggregated or pseudonymized data about ad performance and user behavior.
Fulfillment & shipping partners with updates on delivery status (e.g. tracking numbers, delivery confirmation).

3. How we use your information

We use your personal data for the following purposes:

To process and deliver your orders
- Creating and managing your orders and subscriptions
- Processing payments and refunds
- Arranging shipping, delivery, and tracking
To provide customer support
- Responding to questions, requests, and complaints
- Managing returns, refunds, and product issues
To operate and improve our website and Services
- Monitoring performance and usage trends
- Debugging and protecting against fraud or abuse
- Optimizing user experience and website design
To manage subscriptions
- Sending subscription reminders, renewal notices, and updates
- Allowing you to view, pause, resume, or cancel your subscription
To send marketing communications (with your consent where required)
- Newsletters, product launches, promotions, discount offers
- Reminders about items in your cart or subscriptions
- Requests for reviews or feedback
To comply with legal obligations
- Tax and accounting requirements
- Responding to lawful requests from authorities
- Enforcing our Terms of Use and preventing fraud

4. Legal bases for processing (EEA/UK visitors)

If you are located in the EEA or UK, we process your personal data on the following legal bases:

Performance of a contract: to process your orders, manage subscriptions, provide customer support.
Legitimate interests: to improve our Services, prevent fraud, personalize content, and perform limited direct marketing (where permitted).
Consent: for non-essential cookies/trackers, email/SMS marketing where required, and optional surveys or questionnaires.
Legal obligation: to keep records for tax, accounting, and regulatory purposes.

You may withdraw your consent at any time by changing your preferences (e.g. cookie settings, unsubscribe links in emails).

5. How we share your information

We do not sell your personal data.
We may share your data with:

Service providers (processors)
- Website hosting & e-commerce platform (e.g. Shopify)
- Payment processors and fraud prevention services
- Subscription management tools
- Email & SMS marketing platforms
- Analytics & advertising platforms
- Fulfillment centers, warehouses, and shipping carriers
- Customer support and helpdesk tools

These providers only process your data on our behalf and according to our instructions.

Business transfers
If we merge, sell, or reorganize our business, your information may be transferred as part of that transaction, subject to this Privacy Policy.
Legal requirements
We may disclose information when required by law, court order, or to protect our rights, safety, or property.

6. Cookies & tracking technologies

We use cookies and similar technologies to:

Remember your preferences and items in your cart
Keep you logged into your account or subscription portal
Analyze site traffic and performance
Measure and optimize the performance of our marketing campaigns
Show relevant ads on third-party platforms (retargeting)

You can manage cookies via:

Our cookie banner/settings (where implemented)
Your browser settings (blocking or deleting cookies)
Opt-out tools provided by specific platforms (e.g. Google Ads settings, Meta Ad Preferences)

Note: Disabling certain cookies may impact some functionality of our website (e.g. cart, login, checkout).

7. International data transfers

Our store and service providers may operate globally. This means your personal data may be transferred to and processed in countries outside your own, including countries that may not provide the same level of data protection as your home jurisdiction.

Where required (e.g. under GDPR), we use appropriate safeguards such as:

Standard Contractual Clauses (SCCs)
Data processing agreements
Technical and organizational security measures

8. Data retention

We keep your personal data only for as long as necessary for the purposes described in this Policy, including:

Orders & subscriptions: usually kept for the period required by tax and accounting laws (often 5–10 years, depending on jurisdiction).
Marketing data: until you unsubscribe or withdraw consent, or after a reasonable period of inactivity.
Customer support records: kept as long as necessary to resolve your query and for internal documentation.

When data is no longer needed, we will delete or anonymize it where technically possible.

9. Your rights

Depending on your location, you may have the following rights:

Access – ask for a copy of the personal data we hold about you.
Rectification – request corrections to inaccurate or incomplete data.
Erasure – request deletion of your data in certain circumstances.
Restriction – ask us to limit how we use your data.
Portability – request your data in a structured, commonly used format.
Objection – object to certain processing, including direct marketing.
Withdraw consent – where processing is based on consent, you may withdraw that consent at any time.

To exercise these rights, contact us at support@nulsi.com with your name, email address, and request.

If you are in the EEA/UK and believe your data protection rights have been violated, you can also lodge a complaint with your local data protection authority.

10. California Privacy Rights (CCPA/CPRA)

If you are a resident of California, you may have additional rights under the California Consumer Privacy Act (CCPA/CPRA), including:

Right to know what categories of personal information we collect, use, and disclose
Right to request deletion of your personal information (with some exceptions)
Right to correct inaccurate personal information
Right to opt out of “sale” or “sharing” of personal information (as defined under CCPA)
Right not to be discriminated against for exercising your privacy rights

We do not sell your personal information in the traditional sense, but certain advertising tools may be considered a “sale” or “sharing” under California law. You can contact us at support@nulsi.com to exercise your California rights or to inquire about opt-out mechanisms.

11. Security

We implement reasonable technical and organizational measures to protect your personal data, including:

Encryption (where appropriate)
Access controls and authentication
Secure payment processing through vetted providers
Regular monitoring for suspicious activity

However, no method of transmission or storage is 100% secure, and we cannot guarantee absolute security.

12. Children’s privacy

Our website and products are not intended for children under 16 (or under the minimum age required in your jurisdiction). We do not knowingly collect personal information from children. If you believe we may have collected data from a child, please contact us at support@nulsi.com, and we will take appropriate steps to delete it.

13. Changes to this Privacy Policy

We may update this Privacy Policy from time to time. The “Last updated” date at the top indicates when it was last revised. Changes become effective when posted on our website.

We encourage you to review this Policy periodically to stay informed about how we protect your information.

14. Contact us

If you have any questions or concerns about this Privacy Policy or your personal data, you can contact us at:

Nulsi – Privacy Inquiries
Email: support@nulsi.com
The Netherlands, Almelo, Loofgang 12