SPECIAL LIMITED TIME OFFER | 65% OFF
Privacy Policy
Last updated 29 July 2026
This policy explains what we collect when you buy from us, why, and what you can ask us to do about it. We are the data controller for that information.
Who we are
NanoPolish is a trading name of Pluriventures LLP, a limited liability partnership registered in England and Wales under number OC427218, with its registered office at 50 Princes Street, Ipswich, IP1 1RJ, England. You can reach us at support@getnanopolish.com.
What we collect
When you place an order: your name, email address, delivery address, and phone number if you give one. We need these to take the order, ship it, and contact you about it.
Payment details are entered directly into fields hosted by Stripe, our payment processor. Your full card number never reaches our servers and we never store it. We receive only the result of the payment, the card brand, and the last four digits.
When you browse: pages viewed, approximate location derived from your IP address, device and browser type, and how you arrived at the site. This comes from cookies and similar technologies.
Why we use it, and our lawful basis
To take payment and deliver your order, and to handle returns and refunds. Lawful basis: performance of a contract with you.
To detect and prevent fraudulent orders and chargebacks. Lawful basis: our legitimate interests in protecting the business.
To keep records required by tax and company law. Lawful basis: legal obligation.
To measure how the site performs and how our advertising performs. Lawful basis: consent, which you can withdraw at any time.
Who we share it with
Stripe, to process payments. Stripe is an independent controller for the payment data it handles.
Our delivery partners, to get the parcel to you.
PostHog and Sentry, which we use to understand site usage and to diagnose errors.
Advertising platforms such as Google and Meta, where you have consented to advertising cookies, so we can measure which campaigns lead to orders.
We do not sell your personal data.
International transfers
Some of these providers process data outside the UK, including in the United States. Where that happens we rely on the UK International Data Transfer Addendum or equivalent safeguards approved for UK transfers.
How long we keep it
Order and transaction records: 6 years after the end of the relevant financial year, which is the period UK tax law requires.
Support correspondence: 2 years after the conversation ends.
Analytics data: 12 months.
Your rights
You can ask us for a copy of your data, ask us to correct it, ask us to delete it, ask us to restrict or stop a particular use, or ask for it in a portable format. Where we rely on consent, you can withdraw it at any time.
To exercise any of these, email support@getnanopolish.com. We will respond within one month.
If you are not satisfied with our response you can complain to the Information Commissioner's Office at ico.org.uk, or by calling 0303 123 1113.
Cookies
Strictly necessary cookies keep your cart and your session working; these cannot be switched off. Analytics and advertising cookies are only set where you have consented, and you can change that choice at any time in your browser settings.