Politique de confidentialité

Privacy Policy

NOX Tabletop Tavern is operated by NOEVI ATELIER S.R.L. (CUI: 52024452; VAT/TVA intracomunitar: RO54473903), a company registered in Romania ("we," "us," "our"). This Policy explains what data we collect, how and why we use it, who we share it with, and what rights you have.

What data we collect

  • Contact details: name, address, phone, email.
  • Payment and transaction data (processed securely through payment partners; we do not store card data ourselves).
  • Account information (login, preferences).
  • Technical information (IP address, browser, device).
  • Data you provide when communicating with us.
  • If you choose Login with Google/Facebook, we only receive your name, email address, and, optionally, your profile photo.
  • Chat messages — if you contact us via the live chat widget on our site, we collect your name, email, and the content of your messages, so we can respond to you.
  • Custom order details — if you contact us via WhatsApp to request a custom scale or send us an STL file, we collect your phone number, messages, and any files you send, in order to produce your order correctly.
  • Wishlist data — if you use our wishlist feature, we may collect your name, email, phone, and address to save and manage your saved items.
  • Behavioral and interaction data on the site (pages visited, products viewed, purchase actions), collected through analytics and advertising tools, including Meta Pixel (Facebook/Instagram), for the purpose of measuring and optimizing our advertising campaigns.

Why we process your data (legal basis)

  • Order and payment data — processed to fulfil our contract with you (e.g. shipping your order, handling payment, providing customer support).
  • Marketing and advertising data (Meta Pixel, email marketing) — processed based on your consent, given via our cookie preferences banner or by subscribing to our communications. You can withdraw this consent at any time.
  • Analytics data (Google Analytics) — processed based on your consent via the cookie banner (Analytics category), to help us understand site usage and improve the store.
  • Tax, accounting, and legal compliance — processed based on our legal obligations under Romanian law (e.g. invoicing, tax records).
  • Fraud prevention and site security — processed based on our legitimate interest in keeping the store and our customers safe.

Third parties we share data with

We share data with the following categories of service providers, only as needed for them to perform their function:

  • Shopify — our e-commerce platform provider, which hosts the store, processes orders, and powers built-in features such as live chat, search, and translation (the latter using Google Translate for automated translations).
  • Payment processors (via Shopify Payments and/or other supported gateways) — to process your payment securely. We do not see or store your full card details.
  • Meta Platforms, Inc. (Facebook/Instagram) — for advertising and ad measurement, as described below.
  • WhatsApp (Meta Platforms, Inc.) — if you contact us via WhatsApp, your messages, phone number, and any files you send are processed through WhatsApp's infrastructure, under Meta's own privacy policy.
  • Google (Google Analytics, Google Translate) — for website analytics and automated content translation.
  • Email marketing provider (e.g. Klaviyo/Mailchimp) — to send order updates and, where you've opted in, marketing emails.
  • Wishlist app provider (Wishify) — to let you save and manage a wishlist of products.
  • Shipping carriers — to deliver your order, we share your name, address, and contact details with our courier partners.

We do not sell your personal data to third parties.

International data transfers

Some of our service providers (including Meta and Google) are based in the United States. Where your data is transferred outside the EU/EEA, this is done under appropriate safeguards, such as the EU-US Data Privacy Framework or Standard Contractual Clauses.

Advertising and data sharing with Meta

We use Meta (Facebook/Instagram) to run advertising campaigns. For this purpose, certain data — such as your actions on the site (product views, completed orders) and, in hashed (encrypted) form, your email address or phone number where applicable — may be shared with Meta Platforms, Inc.

This data is used by Meta to help us measure ad effectiveness and show relevant ads. Meta acts as an independent controller for its own advertising purposes, under its own privacy policy, available at facebook.com/privacy/policy.

You can control the use of advertising cookies through the cookie preferences banner on this site (Marketing category), as well as through your own Meta account settings (facebook.com/settings → Ads).

How long we keep your data

  • Order and invoice data is kept for as long as required by Romanian tax and accounting law (generally 10 years for financial records).
  • Marketing data (email list, ad audience data) is kept until you withdraw your consent or unsubscribe.
  • Account and wishlist data is kept for as long as your account is active, plus a reasonable period afterward in case you wish to reactivate it.
  • Technical/analytics data is generally retained for up to 26 months, in line with standard analytics retention practices.

Your rights

Under GDPR, you have the right to:

  • Access the personal data we hold about you.
  • Rectify inaccurate or incomplete data.
  • Erase your data ("right to be forgotten"), subject to legal retention requirements (e.g. we cannot delete invoice data before the legal retention period ends).
  • Restrict or object to processing in certain circumstances.
  • Data portability — receive your data in a structured, machine-readable format.
  • Withdraw consent at any time, where processing is based on consent (e.g. marketing, analytics, advertising cookies).

To exercise any of these rights, contact us at orders@noxtabletoptavern.com.

You also have the right to lodge a complaint with the Romanian data protection authority, ANPDCP (Autoritatea Națională de Supraveghere a Prelucrării Datelor cu Caracter Personal), at anspdcp.ro, or with your local data protection authority if you are based elsewhere in the EU/EEA.

Children's privacy

Our store is not directed at children, and we do not knowingly collect personal data from individuals under 16. If you believe a child has provided us with personal data, please contact us so we can delete it.

Changes to this Policy

We may update this Privacy Policy from time to time to reflect changes in our practices or legal requirements. Material changes will be reflected with an updated "last revised" date on this page.

Contact us

For any questions about this Policy or how we handle your data, contact us at orders@noxtabletoptavern.com.