Privacy policy

PRIVACY POLICY

RFH COMMERCE LLC ("we", "us", "our") operates nalubaby (https://nalubaby.com/). This Privacy Policy explains how we collect, use, and protect your information.

Who this applies to
This policy applies to you as a customer or visitor of nalubaby, whether you placed an order, created an account, or browsed as a guest.

Information we collect
We may collect personal information when you visit the site, create an account, place an order, or subscribe to our newsletters (email, SMS): name, contact details, billing and shipping address, order history, and device/usage data. We use it to operate the store, process and deliver your orders, prevent fraud, issue refunds, and manage customer reviews. Legal bases include your consent, performance of a contract, and our legitimate interest.

Where your data goes
Your data is handled by RFH COMMERCE LLC and is not sold to third parties. It is shared only with the providers needed to process your orders (payment processing, customer support, shipping, and hosting by Shopify Inc., whose servers are secured and firewall-protected).

Data retention
We retain data only as long as necessary: prospect data up to 3 years from last contact; order data up to 5 years; payment-card data for the validity of the card (plus one day).

Your rights
Depending on your state of residence (for example under the CCPA/CPRA in California), you may have the right to access, correct, delete, or port your personal data, to opt out of the sale or sharing of personal information, and to withdraw consent at any time. You can unsubscribe from marketing emails via the "unsubscribe" link in any newsletter. To exercise your rights, email contact@nalubaby.com.

Cookies
When you browse nalubaby, cookies may be placed on your device: Essential cookies (required for ordering and site function), Analytics & Personalization cookies (to improve your experience), and Advertising cookies (relevant ads). You can accept or refuse cookies at any time through your browser settings.

Security
We implement technical and organizational measures appropriate to the risk and comply with the PCI-DSS payment-card security standard.

Updates
We update this policy whenever necessary to stay aligned with applicable law. Questions: contact@nalubaby.com.