Privacy Policy
Last Updated: April 21, 2026
At NUNUMO, we take your privacy and the privacy of your children very seriously. This Privacy Policy explains how we collect, use, store, and protect your personal information when you visit our Shopify website (the “Site”), purchase our products (including Tees & Sweatshirts, Jeans & Joggers, Girls Dresses, and Kids Jackets), subscribe to our newsletter, or interact with us in any other way. This Policy applies to all users of our Site, including visitors, customers, and subscribers, and complies with key privacy regulations, including the European Union’s General Data Protection Regulation (GDPR), the California Consumer Privacy Act (CCPA) as amended by the California Privacy Rights Act (CPRA), and other applicable privacy laws in the European Union and the United States.
By using our Site, making a purchase, or providing us with your personal information, you agree to the terms of this Privacy Policy. If you do not agree with our practices, please do not use our Site or provide us with your information.
1. Information We Collect
We collect personal information that you voluntarily provide to us, as well as certain non-personal information automatically when you use our Site. We only collect information that is necessary to provide our services, process your orders, and improve your experience with NUNUMO. Below is a detailed breakdown of the information we collect:
1.1 Personal Identifiable Information (PII)
Personal Identifiable Information is information that can be used to identify, contact, or locate you or your child. We collect this information when you: place an order, subscribe to our newsletter, create an account, contact our customer support, or participate in our contests or promotions. The PII we may collect includes:
– Full name (yours and, if applicable, your child’s first name for order personalization)
– Email address
– Phone number (optional, for order updates and customer support)
– Mailing address (for shipping orders)
– Billing address
– Payment information (e.g., credit card details, PayPal account information) – note that we do not store full payment details; these are processed securely by our third-party payment processors (e.g., Shopify Payments, PayPal) in compliance with Payment Card Industry Data Security Standard (PCI DSS)
– Account credentials (username and password, if you create an account)
– Preferences (e.g., size preferences, style preferences, communication preferences)
– Information about your child (e.g., age, size) – only when you voluntarily provide this to help us recommend products or personalize your order
1.2 Non-Personal Information
Non-personal information is data that cannot be used to identify you personally. We collect this information automatically when you visit and use our Site, using cookies and similar tracking technologies. This information helps us understand how users interact with our Site, improve our services, and deliver relevant content. The non-personal information we may collect includes:
– IP address
– Browser type and version
– Operating system
– Device type (e.g., computer, smartphone, tablet)
– Pages visited on our Site
– Time spent on each page
– Referral source (how you found our Site, e.g., search engine, social media, referral link)
– Search queries entered on our Site
– Cookies and tracking identifiers (see Section 4 for more details on cookies)
1.3 Information from Third Parties
We may also collect personal information from third parties that help us provide our services, including:
– Payment processors (e.g., Shopify Payments, PayPal) – to process your payments and verify transaction details
– Shipping carriers (e.g., USPS, DHL, FedEx) – to track your orders and provide delivery updates
– Social media platforms (if you connect your social media account to our Site) – to personalize your experience and share content
– Analytics tools (e.g., Google Analytics) – to analyze Site traffic and user behavior (see Section 4)
We only collect information from third parties if you have given your consent to those third parties to share your information with us.
2. How We Use Your Information
We use the information we collect for legitimate business purposes, in compliance with applicable privacy laws. We will never use your information for purposes that are not disclosed in this Privacy Policy without your prior consent. The main purposes for which we use your information are:
2.1 Process and Fulfill Your Orders
We use your PII (e.g., name, address, email) to process your orders, confirm your purchases, ship your products, and provide order updates. This includes communicating with you about your order status, tracking information, and any issues that may arise during delivery. We may also use your order history to provide you with personalized recommendations for products (e.g., suggesting sizes or styles based on past purchases).
2.2 Provide Customer Support
We use your contact information (email, phone number) to respond to your inquiries, resolve any issues you may have (e.g., returns, exchanges, sizing questions), and provide you with assistance. This helps us deliver a positive customer experience and ensure your satisfaction with our products and services.
2.3 Send Marketing and Promotional Communications
If you subscribe to our newsletter or opt in to receive marketing communications, we will use your email address to send you information about new products, special offers, discounts, and other promotional content related to NUNUMO. We may also send you personalized marketing based on your preferences and order history. You can unsubscribe from marketing communications at any time (see Section 7 for details).
2.4 Improve Our Site and Services
We use non-personal information (e.g., Site traffic data, user behavior) to analyze how users interact with our Site, identify areas for improvement, and optimize our Site’s design, functionality, and content. This helps us provide a better user experience and ensure our Site is easy to navigate and use.
2.5 Personalize Your Experience
We use your preferences, order history, and browsing behavior to personalize your experience on our Site. This includes showing you products that may interest you, recommending sizes based on past purchases, and customizing content to match your preferences.
2.6 Comply with Legal Obligations
We may use and disclose your information to comply with applicable laws, regulations, and legal processes (e.g., responding to a subpoena, court order, or government request). We may also use your information to protect our rights, property, and safety, and the rights, property, and safety of our customers and others.
2.7 Protect Against Fraud and Abuse
We use your information to detect and prevent fraud, unauthorized access, and other misuse of our Site and services. This includes verifying the identity of users, monitoring transactions for suspicious activity, and taking action to protect our business and our customers.
3. How We Share Your Information
We understand that your privacy is important, and we will never sell, rent, or share your personal information with third parties for their own marketing purposes without your explicit consent. We may share your information with the following third parties, but only for the purposes outlined below:
3.1 Service Providers
We work with third-party service providers who help us operate our business, process orders, and provide our services. These service providers may have access to your personal information only to the extent necessary to perform their services, and they are required to protect your information and use it only in accordance with our instructions. Examples of service providers include:
– Payment processors (e.g., Shopify Payments, PayPal) – to process your payments securely
– Shipping carriers (e.g., USPS, DHL, FedEx) – to ship your orders and provide tracking information
– Email marketing platforms (e.g., Klaviyo) – to send newsletters and marketing communications
– Analytics tools (e.g., Google Analytics) – to analyze Site traffic and user behavior
– Customer support platforms – to help us respond to your inquiries
All service providers we work with are required to comply with applicable privacy laws, including GDPR and CCPA/CPRA, and we conduct regular reviews to ensure they meet our privacy standards.
3.2 Legal and Regulatory Authorities
We may disclose your information to legal or regulatory authorities if required by law, or if we believe in good faith that such disclosure is necessary to comply with a legal obligation, protect our rights, property, or safety, or the rights, property, or safety of others.
3.3 Business Transfers
If NUNUMO is acquired, merged, or sold, or if all or part of our assets are transferred to another company, we may transfer your personal information to the new owner or entity. In such cases, the new owner will be required to comply with this Privacy Policy and protect your information in accordance with applicable laws.
3.4 With Your Consent
We may share your information with third parties for other purposes only if you have given your explicit consent to do so. For example, if you agree to share your information with a partner brand for a joint promotion.
4. Cookies and Tracking Technologies
We use cookies and similar tracking technologies (e.g., web beacons, pixels) to collect non-personal information about your use of our Site and improve your experience. Cookies are small text files that are stored on your device when you visit our Site. They help us remember your preferences, track your browsing behavior, and provide you with a more personalized experience.
4.1 Types of Cookies We Use
– Essential Cookies: These cookies are necessary for the operation of our Site. They enable you to navigate our Site, use its features (e.g., add products to your cart, checkout), and access secure areas. Without these cookies, our Site may not function properly. We do not need your consent to use essential cookies.
– Performance Cookies: These cookies collect information about how you use our Site, such as which pages you visit most often, how long you spend on each page, and if you encounter any errors. This information helps us improve the performance and functionality of our Site. These cookies do not collect personal information that can identify you.
– Functionality Cookies: These cookies remember your preferences and settings (e.g., language, currency, size preferences) to provide you with a more personalized experience. For example, they may remember your cart items if you leave our Site and return later.
– Marketing Cookies: These cookies are used to deliver relevant marketing content to you, both on our Site and on third-party websites. They help us track the effectiveness of our marketing campaigns and ensure that you see content that is relevant to your interests. We will only use marketing cookies if you have given your consent.
4.2 Managing Cookies
You can control and manage cookies through your browser settings. Most browsers allow you to block or delete cookies, and you can set your browser to notify you when a cookie is being placed on your device. However, please note that blocking essential cookies may affect the functionality of our Site, and you may not be able to use all of its features (e.g., checkout, adding products to your cart).
For more information about cookies, including how to manage them, visit www.allaboutcookies.org.
5. Data Security
We take data security very seriously and have implemented appropriate technical and organizational measures to protect your personal information from unauthorized access, use, disclosure, alteration, or destruction. These measures include:
– Secure Socket Layer (SSL) encryption to protect data transmitted between your device and our Site
– Secure storage of personal information on encrypted servers
– Restricted access to personal information – only authorized employees and service providers who need access to your information to perform their duties have access
– Regular security audits and updates to our systems and processes
– Compliance with PCI DSS for payment processing, ensuring that your payment information is processed securely
While we take all reasonable steps to protect your information, no method of transmission over the internet or electronic storage is 100% secure. Therefore, we cannot guarantee the absolute security of your information, and you provide your information at your own risk.
6. Data Retention
We retain your personal information only for as long as necessary to fulfill the purposes for which it was collected, or as required by applicable law. The retention period depends on the type of information and the purpose for which it is used:
– Order information: We retain your order history and related information (e.g., name, address, email) for as long as necessary to process your orders, handle returns and exchanges, and comply with tax and legal obligations. After this period, we may retain de-identified information (e.g., order totals, product categories) for analytics and business purposes.
– Newsletter and marketing information: We retain your email address and marketing preferences until you unsubscribe from our marketing communications, or until we no longer need the information for marketing purposes.
– Account information: If you create an account, we retain your account information (e.g., username, password, preferences) until you delete your account. After you delete your account, we will delete your personal information, except as required by law.
– Non-personal information: We may retain non-personal information (e.g., Site traffic data, cookies) for an indefinite period for analytics and business improvement purposes.
When we no longer need your personal information, we will securely delete or anonymize it to ensure it cannot be used to identify you.
7. Your Privacy Rights
Under applicable privacy laws (including GDPR and CCPA/CPRA), you have certain rights regarding your personal information. We are committed to helping you exercise these rights, and we will respond to your requests in a timely manner (in accordance with legal requirements).
7.1 Rights Under GDPR (For European Union Users)
If you are a resident of the European Union, you have the following rights:
– Right to Access: You have the right to request a copy of the personal information we hold about you.
– Right to Rectification: You have the right to request that we correct any inaccurate or incomplete personal information we hold about you.
– Right to Erasure (Right to be Forgotten): You have the right to request that we delete your personal information, subject to certain legal exceptions (e.g., if we need to retain the information to comply with a legal obligation).
– Right to Restriction of Processing: You have the right to request that we restrict the processing of your personal information (e.g., if you dispute the accuracy of the information).
– Right to Data Portability: You have the right to request that we provide you with your personal information in a structured, machine-readable format, or to transfer it directly to another data controller, if technically feasible.
– Right to Object: You have the right to object to the processing of your personal information for marketing purposes, or for other legitimate interests, unless we can demonstrate compelling legitimate grounds for the processing that override your interests.
– Right to Withdraw Consent: If you have given your consent to the processing of your personal information (e.g., for marketing), you have the right to withdraw your consent at any time. Withdrawing your consent will not affect the lawfulness of processing based on consent before its withdrawal.
7.2 Rights Under CCPA/CPRA (For California Users)
If you are a resident of California, you have the following rights under the CCPA/CPRA:
– Right to Know: You have the right to request information about the personal information we have collected about you, including the categories of information, the sources of the information, the purposes for which it is used, and the third parties with whom we have shared it.
– Right to Delete: You have the right to request that we delete your personal information, subject to certain exceptions (e.g., if we need to retain the information to fulfill a contract with you).
– Right to Opt-Out of Sale/Sharing: You have the right to opt out of the sale or sharing of your personal information. Please note that we do not sell your personal information to third parties, but we may share it with service providers as outlined in Section 3. If you wish to opt out of any sharing that qualifies as a “sale” under CCPA/CPRA, you can do so by contacting us.
– Right to Non-Discrimination: You have the right to not be discriminated against for exercising any of your CCPA/CPRA rights (e.g., we will not charge you a higher price or provide you with a lower quality of service because you requested to delete your information).
7.3 How to Exercise Your Rights
To exercise any of your privacy rights, please contact us using the contact information provided in Section 9. We may ask you to provide proof of identity to verify that you are the person requesting access to or modification of the personal information. This is to protect your information from unauthorized access.
We will respond to your request within the timeframes required by applicable law (e.g., 45 days under CCPA/CPRA, 30 days under GDPR, with possible extensions if necessary).
8. Children’s Privacy
NUNUMO sells products for children aged 6–15, but we do not intentionally collect personal information from children under the age of 13 without the consent of a parent or legal guardian. If you are a parent or guardian and believe that your child under 13 has provided us with personal information without your consent, please contact us immediately, and we will delete that information promptly.
We comply with the Children’s Online Privacy Protection Act (COPPA) in the United States, which requires us to obtain verifiable parental consent before collecting personal information from children under 13. We also comply with GDPR requirements regarding children’s data, which require that we obtain consent from a parent or legal guardian for children under the age of 16 (or lower, depending on the member state).
9. Contact Us
If you have any questions, concerns, or requests regarding this Privacy Policy, or if you wish to exercise your privacy rights, please contact us at:
Email: support@nunumo.com
We will respond to your inquiry as soon as possible, typically within 2–3 business days.
10. Changes to This Privacy Policy
We may update this Privacy Policy from time to time to reflect changes in our practices, applicable laws, or business needs. When we make changes, we will update the “Last Updated” date at the top of this Policy. We encourage you to review this Privacy Policy regularly to stay informed about how we are protecting your information.
If we make significant changes to this Policy (e.g., changes to how we collect or use your information), we will notify you by email (if you have provided us with your email address) or by posting a notice on our Site. Your continued use of our Site after the changes take effect constitutes your acceptance of the updated Privacy Policy.
This Privacy Policy is effective as of April 21, 2026.