Privacy Policy

Privacy Policy

Last updated: December 6, 2025

At Nappiro, we are committed to protecting your privacy and personal information. This Privacy Policy explains how we collect, use, disclose, and protect your information when you visit our website or make purchases in Canada, the United States, and the European Union.

1. Information We Collect

Personal Information

  • First and Last Name
  • Shipping and Billing Address
  • Email Address
  • Phone Number
  • Payment Information (processed securely)

Technical Information

  • IP Address
  • Browser Type and Version
  • Pages Visited on Our Site
  • Time Spent on Each Page & Cookie Data

2. How We Use Your Information

We use your personal information to:

  • Process and ship your orders
  • Communicate with you about your purchases
  • Improve our customer service
  • Personalize your shopping experience
  • Send you promotions (with your consent)
  • Comply with our legal obligations

For EU customers, we process your data based on the following legal grounds: performance of contract (to fulfill your orders), legal obligation (tax and accounting requirements), legitimate interests (fraud prevention, marketing with opt-out), and consent (for optional marketing communications).

3. Sharing Information

We never sell your personal information. We may share your data with:

  • Service providers: Carriers, payment processors, hosting services
  • Legal authorities: When required by Canadian, U.S., or EU law
  • Business partners: Only with your explicit consent

4. Data Protection

We implement appropriate security measures to protect your information:

  • SSL encryption for all transactions
  • Secure data storage
  • Limited access to personal information
  • Regular data protection training for our team

5. Your Rights

For Canadian residents

In accordance with Canadian privacy laws (PIPEDA), you have the right to:

  • Access your personal information
  • Correct inaccurate information
  • Request deletion of your data
  • Withdraw your consent to marketing communications
  • File a complaint with the Privacy Commissioner of Canada

For U.S. residents

Depending on your state of residence, you may have additional rights:

  • California (CCPA/CPRA): Right to Know, delete, correct, and limit the use of your data
  • Virginia (VCDPA): Rights of access, correction, deletion, and portability
  • Colorado (CPA): Rights similar to California
  • Connecticut (CTDPA): Rights of access, correction, deletion, and portability

For European Union residents (GDPR)

Under the General Data Protection Regulation (GDPR), you have the right to:

  • Access your personal data
  • Rectify inaccurate or incomplete data
  • Request erasure of your data ("right to be forgotten")
  • Restrict processing of your data
  • Data portability (receive your data in a structured format)
  • Object to processing based on legitimate interests
  • Withdraw consent at any time (where processing is based on consent)
  • Lodge a complaint with your local data protection authority

6. Cookies and Similar Technologies

Our site uses cookies to:

  • Remember your preferences
  • Analyze site traffic
  • Personalize content
  • Improve site functionality

You can manage your cookie preferences in your browser settings.

7. International Data Transfers

Your information may be transferred to and stored in Canada or the United States. For customers in the European Union, we ensure that all data transfers outside the EU comply with GDPR requirements through appropriate safeguards such as Standard Contractual Clauses (SCCs) approved by the European Commission.

8. Data Retention

We retain your personal information for as long as necessary to:

  • Provide our services
  • Comply with our legal obligations
  • Resolve disputes
  • Enforce our agreements

9. Changes to this Policy

We may update this Privacy Policy periodically. Significant changes will be communicated by email or through a notice on our website.

10. Contact Us

For any questions about this Privacy Policy or your personal data, contact us:

Nappiro Email: Shop.Nappiro@gmail.com Website: Https://Nappiro.com

We promise to respond to your requests within 30 days of receipt.

11. Jurisdiction-Specific Information

Canada

This policy complies with the Personal Information Protection and Electronic Documents Act (PIPEDA) and applicable provincial laws.

United States

This policy complies with U.S. federal law as well as the specific laws of the states where we operate, including the CCPA in California and other similar laws.

European Union

This policy complies with the General Data Protection Regulation (GDPR) (EU) 2016/679. For data protection inquiries, please contact us at Shop.Nappiro@gmail.com. You have the right to lodge a complaint with your local supervisory authority. A list of EU data protection authorities can be found at https://edpb.europa.eu/about-edpb/about-edpb/members.