Privacy Policy
At Nuwoot, we prioritize the safety and privacy of your family’s information. As a brand dedicated to children, we adhere to strict global standards, including the Children’s Online Privacy Protection Act (COPPA) and General Data Protection Regulation (GDPR).
1. Information We Collect
We limit data collection to essentials:
- Parent/Guardian Information: Name, email, shipping address, and payment details (processed via PCI-DSS compliant gateways like Stripe/PayPal)
- Child-Related Data: Only non-identifiable information (e.g., clothing size preferences or birthday month for gift reminders) with explicit parental consent
- Automated Data: Device type, IP address, and browsing behavior through cookies (see Section 4)
2. How We Use Your Information
- Order Fulfillment: Process purchases and send shipment updates
- Customer Support: Respond to inquiries via email/chat (e.g., sizing recommendations)
- Personalization: Suggest products based on past purchases or browsing history
- Security: Detect and prevent fraudulent activities
- Marketing: Send promotional offers only with your opt-in consent (unsubscribe anytime)
3. Data Sharing & Third Parties
We never sell your data. Limited sharing occurs with:
- Service Providers: Logistics partners (e.g., DHL), payment processors, and IT security firms under confidentiality agreements
- Legal Compliance: Authorities if required by law or to protect Nuwoot’s rights
- Business Transfers: Mergers/acquisitions (with prior notice)
4. Cookies & Tracking Technologies
- Essential Cookies: Enable cart functionality and secure checkout
- Analytical Cookies: Google Analytics (anonymized data only) to improve website performance
- Advertising Cookies: Retargeting ads via platforms like Meta, controllable through browser settings
5. Protecting Children’s Privacy
- COPPA Compliance: We never knowingly collect data from children under 13 without verified parental consent.
- Parental Controls: Access, edit, or delete your child’s information by contacting privacy@nuwoot.com.
- School Partnerships: Data from educational collaborations is anonymized and aggregated.
6. Your Rights & Choices
- Access/Correction: Request a copy of your data or update inaccuracies
- Deletion: Ask us to erase your data (exceptions apply for legal obligations)
- Opt-Out: Unsubscribe from emails via footer links or disable cookies
- Data Portability: Receive your data in a machine-readable format
7. International Data Transfers
- Servers located in the EU and US, protected by Standard Contractual Clauses (SCCs)
- Data processed in countries with adequacy decisions under GDPR (e.g., Canada, Japan)
8. Security Measures
- Encryption: SSL/TLS for all transactions
- Access Controls: Role-based employee training and biometric authentication
- Annual Audits: Penetration testing by cybersecurity firms
9. Policy Updates
- Notify changes via email or website banners 30 days before生效
- Archive previous versions at nuwoot.com/privacy-archive
Contact Us
For privacy requests or questions:
- Email: privacy@nuwoot.com
- Postal: Nuwoot Data Protection Officer, 123 Safety Lane, Helsinki, Finland