PRIVACY POLICY

Last Updated: September 24, 2026

1. INTRODUCTION

Welcome to Nerava™.

Nerava™ (“Nerava”, “we”, “us” or “our”) operates this online store and website, including the products, content, features and services made available through it (collectively, the “Services”). Our online store is powered by Shopify.

We respect your privacy and are committed to handling your personal information responsibly and transparently.

This Privacy Policy explains how we collect, use, disclose, store and protect personal information when you visit our website, place an order, contact us or otherwise interact with our Services. It also explains the rights and choices available to you under applicable privacy and data protection laws.

Nerava™ operates from Spain and serves customers in Australia. Depending on your location and the circumstances in which your information is processed, different privacy and data protection laws may apply, including the European Union General Data Protection Regulation (“GDPR”) and applicable Australian privacy legislation.

Please read this Privacy Policy carefully. If there is a conflict between this Privacy Policy and our Terms of Service regarding the collection or processing of personal information, this Privacy Policy will apply to that subject matter, subject to applicable law.

2. PERSONAL INFORMATION WE COLLECT

“Personal information” means information that identifies you or can reasonably be linked to you.

The categories of personal information we collect depend on how you interact with our website and Services.

Contact and Delivery Information

When you place an order, create an account or contact us, we may collect:

• Your full name.
• Email address.
• Telephone number.
• Billing address.
• Shipping address.
• Other information necessary to process and deliver your order.

Order and Transaction Information

We may collect information relating to your purchases and interactions with our store, including:

• Products you view, add to your cart or purchase.
• Order numbers and purchase history.
• Order status and delivery information.
• Returns, refunds and customer support requests.
• Payment method and transaction confirmation details.

Payments are processed through the payment services available at checkout. Payment providers may collect and process payment card information in accordance with their own privacy policies and security requirements. We do not represent that Nerava™ independently stores complete payment card details.

Account Information

If you create a customer account, we may collect your account credentials, preferences and information needed to manage your account.

Communications

When you contact our customer support team, we may collect the information you provide, including your contact details, order information, enquiries, complaints and any photographs or videos you choose to submit in connection with a product issue.

Device and Website Usage Information

When you access our website, we and our service providers may collect technical information such as:

• Internet Protocol (IP) address.
• Browser type and settings.
• Device type and operating system.
• Pages viewed and website interactions.
• Referral information.
• Cookie identifiers and similar online identifiers.

This information may be collected through cookies, pixels, server logs and similar technologies, subject to applicable law and your privacy choices.

3. HOW WE COLLECT PERSONAL INFORMATION

We may collect personal information:

Directly from you: When you place an order, create an account, contact customer support, subscribe to marketing communications or otherwise provide information to us.

Automatically: When you browse or interact with our website through cookies, device information, website logs and similar technologies.

From service providers: When payment processors, shipping providers, fulfilment partners, Shopify or other providers share information necessary to operate our store and deliver our Services.

From third parties: Where permitted by law, we may receive information from advertising, analytics or other business partners in connection with the services they provide.

We collect and use personal information only where we have an appropriate purpose and a lawful basis for doing so.

4. HOW WE USE PERSONAL INFORMATION

We may use personal information for the following purposes.

Processing and Fulfilling Orders

We use your information to:

• Confirm and process purchases.
• Receive and verify payments.
• Arrange product fulfilment and delivery.
• Provide order confirmations and shipping updates.
• Respond to order enquiries.
• Assess and resolve returns, refunds and product-related claims.

Providing Customer Support

We use your contact details, order information and communications to respond to questions, investigate issues and provide assistance.

Operating and Improving Our Website

We may use information about website activity to maintain functionality, identify technical problems, understand how customers use our store and improve the shopping experience.

Marketing and Advertising

Where permitted by applicable law, we may use personal information to send promotional communications or display advertising relevant to our products.

You can unsubscribe from marketing emails at any time using the unsubscribe link included in those messages or by contacting us.

Unsubscribing from marketing does not prevent us from sending essential communications about your orders, account, customer support requests or other service-related matters.

Where consent is legally required for marketing or advertising technologies, we will seek that consent before using them.

Security and Fraud Prevention

We may process information to protect our website, customers and business, including to detect suspicious transactions, prevent fraud, investigate security incidents and address unlawful activity.

Legal and Regulatory Compliance

We may process and retain information where necessary to comply with applicable laws, maintain legally required business records, respond to lawful requests or establish, exercise or defend legal claims.

5. LEGAL BASES FOR PROCESSING PERSONAL INFORMATION

Where the GDPR applies, we process personal data only where an appropriate legal basis exists. Depending on the circumstances, these bases may include:

Performance of a contract: Processing information necessary to accept, fulfil and manage your orders or provide Services you request.

Compliance with a legal obligation: Processing required to meet applicable tax, accounting, consumer protection or other legal requirements.

Legitimate interests: Processing necessary for purposes such as website security, fraud prevention, customer support and improving our Services, provided those interests are not overridden by your rights and freedoms.

Consent: Processing based on your permission, such as certain marketing activities or the use of non-essential cookies where consent is required.

Where processing is based on consent, you may withdraw that consent at any time. Withdrawal does not affect the lawfulness of processing carried out before consent was withdrawn.

6. COOKIES AND SIMILAR TECHNOLOGIES

Our website and its service providers may use cookies and similar technologies to operate the store, remember preferences, analyse website performance and support advertising activities.

Some technologies are necessary for core website functions, such as maintaining a shopping cart, enabling checkout and protecting the website against fraud.

Other technologies, including certain analytics and advertising cookies, may require your consent under applicable law.

Where required, we will provide an appropriate mechanism for you to accept, reject or manage non-essential cookies.

You may also be able to control cookies through your browser settings. Disabling certain cookies may affect website functionality.

The specific cookies used on our website may vary depending on the Shopify features, applications and third-party services enabled on our store.

7. HOW WE SHARE PERSONAL INFORMATION

We may disclose personal information where reasonably necessary to operate our business, provide our Services or comply with applicable law.

Recipients may include:

Shopify: Our e-commerce platform provider, which supports the operation of our online store and processes information in connection with the Services.

Payment providers: To securely process payments, verify transactions and manage payment-related issues.

Suppliers, fulfilment partners and shipping providers: To prepare, dispatch, track and deliver customer orders.

Customer support and technology providers: To maintain our website, manage customer enquiries, provide technical services and support our operations.

Analytics and advertising partners: Where we use their services and the disclosure is permitted by applicable law and your relevant privacy choices.

Professional advisers and public authorities: Where disclosure is necessary for legal compliance, legitimate legal proceedings or the establishment, exercise or defence of legal claims.

We may also disclose information in connection with a lawful business restructuring, merger, acquisition or transfer of business operations, subject to applicable privacy requirements.

We do not disclose personal information to third parties without an appropriate business purpose or other lawful basis.

8. OUR RELATIONSHIP WITH SHOPIFY

Our online store is hosted by Shopify.

Shopify processes personal information to provide the technology and services that enable our store to operate. Depending on the Shopify features used, Shopify may also process information for purposes described in its own privacy notices.

Information you provide through our website may be transmitted to Shopify and to service providers involved in operating the store, processing transactions and fulfilling orders.

Shopify’s processing activities and the privacy rights available in relation to those activities are described in its consumer privacy information:

Shopify Consumer Privacy Policy: https://www.shopify.com/legal/privacy/app-users

Shopify Privacy Portal: https://privacy.shopify.com/en

Where Nerava™ determines the purposes and means of processing personal information, we remain responsible for meeting our applicable privacy obligations.

9. INTERNATIONAL DATA TRANSFERS

Nerava™ operates from Spain and serves customers internationally, including in Australia.

To operate our store and fulfil orders, personal information may be accessed, transferred, stored or processed in countries other than your country of residence.

For example, information may be processed by Shopify, payment providers, international suppliers, fulfilment partners, shipping providers and other service providers involved in delivering our Services.

Where the GDPR applies to a transfer of personal data outside the European Economic Area, we will use an appropriate transfer mechanism where required by law. Depending on the circumstances, this may include an adequacy decision, the European Commission’s Standard Contractual Clauses or another legally recognised safeguard.

We take reasonable steps, appropriate to the circumstances and applicable law, to protect personal information transferred internationally.

10. DATA SECURITY

We take reasonable technical and organisational measures designed to protect personal information against unauthorised access, loss, misuse, alteration and disclosure.

These measures may include using established e-commerce and payment service providers, restricting access to personal information and maintaining appropriate account and website security practices.

However, no method of electronic transmission or storage is completely secure. We cannot guarantee that security incidents will never occur.

Please avoid sending complete payment card details, passwords or other highly sensitive information to us by email.

If you believe your account or personal information may have been compromised, please contact us promptly at neravaofficial@gmail.com.

11. HOW LONG WE RETAIN PERSONAL INFORMATION

We retain personal information only for as long as reasonably necessary for the purposes described in this Privacy Policy or as required or permitted by applicable law.

Retention periods may depend on:

• Whether you have an active customer account.
• The need to process and fulfil orders.
• Customer support and product-related enquiries.
• Applicable tax, accounting and recordkeeping requirements.
• Fraud prevention and website security.
• The establishment, exercise or defence of legal claims.

When personal information is no longer required, we will delete, anonymise or otherwise handle it in accordance with applicable law.

12. YOUR PRIVACY RIGHTS

Depending on your location and the laws applicable to the processing of your information, you may have rights concerning the personal information we hold about you.

Where the GDPR applies, these rights may include:

Access: Request confirmation of whether we process your personal data and obtain access to that data.

Correction: Request correction of inaccurate personal data and completion of incomplete data.

Erasure: Request deletion of personal data in circumstances where the law provides this right.

Restriction: Request that we restrict certain processing activities where the applicable legal conditions are met.

Data portability: Request a copy of certain personal data in a structured, commonly used and machine-readable format, and request its transmission to another controller where applicable.

Objection: Object to processing based on legitimate interests in circumstances provided by law, and object at any time to processing of your personal data for direct marketing.

Withdrawal of consent: Withdraw consent where consent is the legal basis for processing.

You may also have rights under other applicable privacy laws, including rights to access or correct personal information.

These rights are subject to applicable legal conditions and exceptions. For example, we may need to retain certain transaction records to comply with legal obligations even after receiving a deletion request.

To exercise an applicable privacy right, contact us at neravaofficial@gmail.com.

We may request information reasonably necessary to verify your identity before responding to a request. We will respond within the timeframe required by applicable law.

13. MARKETING PREFERENCES

You may opt out of promotional emails at any time by selecting the unsubscribe link included in the message or contacting us at neravaofficial@gmail.com.

Where required by law, we will obtain your consent before sending electronic marketing communications.

You may also be able to manage certain advertising and cookie preferences through the privacy controls available on our website or through your browser settings.

Your marketing preferences do not affect our ability to send necessary transactional or service-related communications.

14. CHILDREN’S PRIVACY

Our online store is intended for individuals who are legally able to make purchases or who have the necessary consent to do so.

We do not knowingly collect personal information directly from children in circumstances where doing so would be unlawful.

If you are a parent or guardian and believe that a child has provided personal information to us without the consent required by applicable law, please contact neravaofficial@gmail.com.

We will review the request and take appropriate action in accordance with applicable law.

15. THIRD-PARTY WEBSITES

Our website may contain links to websites, applications or services operated by third parties.

This Privacy Policy does not govern the independent privacy practices of third-party websites that we do not control.

We encourage you to review the privacy policies of those third parties before providing them with personal information.

The inclusion of a third-party link does not, by itself, mean that Nerava™ controls or endorses that third party’s privacy practices.

16. PRIVACY COMPLAINTS

If you have a concern about how Nerava™ collects, uses, discloses or protects your personal information, please contact us at neravaofficial@gmail.com.

Please describe your concern and provide any information reasonably necessary for us to investigate it.

We will review privacy complaints and respond in accordance with applicable law.

Where the GDPR applies, you may have the right to lodge a complaint with a competent data protection supervisory authority, including the Agencia Española de Protección de Datos (AEPD) in Spain.

Where Australian privacy legislation applies, you may also have the right to raise a complaint with the Office of the Australian Information Commissioner (OAIC), subject to its jurisdiction and applicable complaint procedures.

17. CHANGES TO THIS PRIVACY POLICY

We may update this Privacy Policy from time to time to reflect changes in our business operations, website functionality, service providers, data processing practices or legal obligations.

When we make changes, we will publish the updated policy on our website and revise the “Last Updated” date.

Where required by applicable law, we will provide additional notice or obtain consent before implementing relevant changes.

18. CONTACT INFORMATION

If you have any questions about this Privacy Policy, our privacy practices or the personal information we hold about you, please contact us:

NERAVA™
Email: neravaofficial@gmail.com
Business Location: Spain