Back

Privacy Policy

OVERVIEW

This Nepogodova Fashion Jewellery Store website [https://www.nepogodova.co.nz] is operated by Nepogodova Design, c/o Olga Nepogodova. Registered Office: PO Box 4288, Hamilton 3247, Waikato, New Zealand. Throughout this website, the terms “I”, “me”, “my”, “we”, “us” and “our” refer to Nepogodova Design and Olga Nepogodova. Olga Nepogodova offers this website, including all information, tools and services available on this website, to you, the user, conditional upon your acceptance of all terms, conditions, policies and notices stated here.

PRIVACY STATEMENT

Nepogodova Design is committed to safeguarding your privacy. Contact us at support@nepogodova.com if you have any questions or problems regarding the use of your Personal Data and we will gladly assist you. By using this site or/and our services, you consent to the Processing of your Personal Data as described in this Privacy Policy.
This Privacy Policy is a part of our Terms and Conditions; by agreeing to Terms and Conditions you also agree to this Policy. In the event of a collision of terms used in the Terms and Conditions and Privacy Policy, the latter shall prevail.

DEFINITIONS

  • Personal Data – any information relating to an identified or identifiable natural person.
  • Processing – any operation or set of operations which is performed on Personal Data or sets of Personal Data.
  • Data subject – a natural person whose Personal Data is being Processed.
  • Child – a natural person under 16 years of age.

DATA PROTECTION PRINCIPLES

We promise to follow the following data protection principles:

  • Processing is lawful, fair, and transparent. Our Processing activities have lawful grounds. We always consider your rights before Processing Personal Data. We will provide you with information regarding Processing upon request.
  • Processing is limited to the purpose. Our Processing activities fit the purpose for which Personal Data was gathered.
  • Processing is done with minimal data. We only gather and Process the minimal amount of Personal Data required for any purpose.
  • Processing is limited within a period. We will not store your personal data for longer than needed. We will do our best to ensure the accuracy of the data. We will do our best to ensure the integrity and confidentiality of data.

DATA SUBJECT’S RIGHTS

The Data Subject has the following rights:

  • Right to information – meaning you have to right to know whether your Personal Data is being processed; what data is gathered, from where it is obtained and why and by whom it is processed.
  • Right to access – meaning you have the right to access the data collected from/about you. This includes your right to request and obtain a copy of your Personal Data gathered.
  • Right to rectification – meaning you have the right to request rectification or erasure of your Personal Data that is inaccurate or incomplete.
  • Right to erasure – meaning in certain circumstances you can request for your Personal Data to be erased from our records.
  • Right to restrict processing – meaning where certain conditions apply, you have the right to restrict the Processing of your Personal Data.
  • Right to object to processing – meaning in certain cases you have the right to object to the Processing of your Personal Data, for example in the case of direct marketing.
  • Right to object to automated Processing – meaning you have the right to object to automated Processing, including profiling; and not to be subject to a decision based solely on automated Processing. This right you can exercise whenever there is an outcome of the profiling that produces legal effects concerning or significantly affecting you.
  • Right to data portability – you have the right to obtain your Personal Data in a machine-readable format or if it is feasible, as a direct transfer from one Processor to another.
  • Right to complain – in the event that we refuse your request under the Rights of Access, we will provide you with a reason as to why. If you are not satisfied with the way your request has been handled please contact us.
  • Right for the help of a supervisory authority means you have the right to the help of a supervisory authority and the right for other legal remedies such as claiming damages.
  • Right to withdraw consent – you have the right to withdraw any given consent for the Processing of your Personal Data.

COOKIE POLICY

What are cookies? Cookies are small pieces of data, stored in text files, that are stored on your computer or other devices when websites are loaded in a browser. If you leave a comment on our site you may opt-in to saving your name, email address and website in cookies. These are for your convenience so that you do not have to fill in your details again when you leave another comment. These cookies will last for one year. If you visit our login page, we will set a temporary cookie to determine if your browser accepts cookies. This cookie contains no personal data and is discarded when you close your browser. When you log in, we will also set up several cookies to save your login information and your screen display choices. Login cookies last for two days, and screen options cookies last for a year. If you select “Remember Me”, your login will persist for two weeks. If you log out of your account, the login cookies will be removed. If you edit or publish an article, an additional cookie will be saved in your browser. This cookie includes no personal data and simply indicates the post ID of the article you just edited. It expires after 30 days.

USERS COOKIES

WORDPRESS COOKIE NAME            PURPOSE
wordpress_{hash}                              WordPress uses the login wordpress_{hash} cookie to store authentication details. Its use is limited to the Administration Screen area, /wp-admin/
wordpress_logged_in_{hash}             Remember the User session. WordPress sets the after login wordpress_logged_in_{hash} cookie, which indicates when you’re logged in, and who you are.
wordpres_test_cookie                       Test if the cookie can be set. WordPress also sets wordpress_test_cookie cookie to check if the cookies are enabled on the browser.
wp-settings-{user_id}                        Customization cookie. Used to persist a user’s wp-admin configuration. The ID is the user’s ID. This is used to customize the view of the admin interface.
wp-settings-time-{user}                    Time at which wp-settings-{user} was set.
wp-saving-post                                 Auto-saving cookie: wp-saving-post is a WordPress cookie created when auto-saving a post in the editor.
wp-postpass_{hash}                          Used to maintain session if a post is password protected
wordpress_sec                                  There is not yet any general information about this cookie based on its name only.

LOGGED-IN USER COOKIES ONLY

WORDPRESS COOKIE NAME            DURATION             PURPOSE
comment_author_{HASH}                 347 days                 Used to track comment author name, if “Save my name, email, and website in this browser for the next time I comment.” is checked
comment_author_email_{HASH}       347 days                 Used to track comment author email, if “Save my name, email, and website in this browser for the next time I comment.” is checked
comment_author_url_{HASH}           347 days                 Used to track comment author URL, if the “Save my name, email, and website in this browser for the next time I comment.” is checked

WOOCOMMERCE COOKIES

WORDPRESS COOKIE NAME                DURATION             PURPOSE
woocommerce_cart_hash                     session                    Helps WooCommerce determine when cart contents/data changes.
woocommerce_items_in_cart                session                    Helps WooCommerce determine when cart contents/data changes.
wp_woocommerce_session_                 2 days                     Contains a unique code for each customer so that it knows where to find the cart data in the database for each customer.
woocommerce_recently_viewed           session                    Powers the Recent Viewed Products widget.
store_notice[notice id]                          session                    Allows customers to dismiss the special store notice.

WHAT PERSONAL DATA DO WE COLLECT AND WHY DO WE COLLECT IT?

COMMENTS

When visitors leave comments on the site we collect the data shown in the comments form, and also the visitor’s IP address and browser user agent string to help spam detection. An anonymized string created from your email address (also called a hash) may be provided to the Gravatar service to see if you are using it. The Gravatar service privacy policy is available here. After approval of your comment, your profile picture is visible to the public in the context of your comment.

MEDIA

If you upload images to the website, you should avoid uploading images with embedded location data (EXIF GPS) included. Visitors to the website can download and extract any location data from images on the website.

WHAT DO WE DO WITH YOUR INFORMATION?

We use cookies and similar technologies to help us to do this. Some are necessary to help our website work properly and can’t be switched off, and some are optional but support the Nepogodova Design and your experience in other ways. For instance, we and our partners use information about you, your devices and your online interactions with us to provide, analyse and improve our services. This includes personalising content or advertising for you. We use cookies and similar technologies for the following purposes: Ads and content can be personalised based on a profile. More data can be added to better personalise ads and content. Ad and content performance can be measured. Insights about audiences who saw the ads and content can be derived. Data can be used to build or improve user experience, systems and software.

When you purchase something from our store, as part of the buying and selling process, we collect the personal information you give us such as your name, address and email address. When you browse through our store, we also automatically receive your computer’s internet protocol (IP) address to provide us with information that helps us learn about your browser and operating system. Email marketing (if applicable): With your permission, we may send you emails about our store, new products and other updates.

Who do we share your data with? If you request a password reset, your IP address will be included in the reset email.

How long we retain your data? If you leave a comment, the comment and its metadata are retained indefinitely. This is so we can recognize and approve any follow-up comments automatically instead of holding them in a moderation queue. For users who register on our website (if any), we also store the personal information they provide in their user profile. All users can see, edit, or delete their personal information at any time (except they cannot change their username). Website administrators can also see and edit that information.
What rights do you have over your data? If you have an account on this site or have left comments, you can request to receive an exported file of the personal data we hold about you, including any data you have provided to us. You can also request that we erase any personal data we hold about you. This does not include any data we are obliged to keep for administrative, legal, or security purposes.

Where do we send your data? Visitor comments may be checked through an automated spam detection service.

EMBEDDED CONTENT FROM OTHER WEBSITES

Articles on this site may include embedded content (e.g. videos, images, articles, etc.). Embedded content from other websites behaves in the exact same way as if the visitor has visited the other website.
These websites may collect data about you, use cookies, embed additional third-party tracking, and monitor your interaction with that embedded content, including tracking your interaction with the embedded content if you have an account and are logged in to that website.

CONSENT

How do you get our consent? When you provide us with personal information to complete a transaction, verify your credit card, place an order, arrange for a delivery or return a purchase, we imply that you consent to us collecting it and using it for that specific reason only. If we ask for your personal information for a secondary reason, like email marketing, we will either ask you directly for your expressed consent or provide you with an opportunity to say no.

HOW DO I WITHDRAW MY CONSENT?

If after you opt-in or if you change your mind, you may withdraw your consent for us to contact you, for the continued collection, use or disclosure of your information, at any time, by contacting us and submitting a new request to us at [support/at/nepogodova.co.nz].

HOW DO YOU GET OUR CONSENT?

When you provide us with personal information to complete a transaction, verify your credit card, place an order, arrange for a delivery or return a purchase, we imply that you consent to us collecting it and using it for that specific reason only. If we ask for your personal information for a secondary reason, like email marketing, we will either ask you directly for your expressed consent or provide you with an opportunity to say ‘no mailing me’ at [support/at/nepogodova.co.nz].

DISCLOSURE

We may disclose your personal information if we are required by law to do so or if you violate any our Terms or Policies.

PAYMENTS

If you choose a direct payment gateway to complete your purchase, then PayPal or Stripe stores your credit card data on their side. It is encrypted through the Payment Card Industry Data Security Standard (PCI-DSS). Your purchase transaction data is stored only as long as is necessary to complete your purchase transaction. After that is complete, your purchase transaction information is deleted. Both payment gateways adhere to the standards set by PCI-DSS as managed by the PCI Security Standards Council, which is a joint effort of brands like Visa, MasterCard, American Express and Discover. PCI-DSS requirements help ensure the secure handling of credit card information by our store and its service providers. For more insight, you may also want to read the PayPal User Agreement, PayPal Privacy Statement and Stripe Services Agreement with Stripe Global Privacy Policy respectively.

THIRD-PARTY SERVICES

In general, the third-party providers used by us will only collect, use and disclose your information to the extent necessary to allow them to perform the services they provide to us. However, certain third-party service providers, such as payment gateways and other payment transaction processors, have their privacy policies concerning the information we are required to provide to them for your purchase-related transactions. For these providers, we recommend that you read their privacy policies so you can understand how your personal information will be handled by these providers. In particular, remember that certain providers may be located in or have facilities that are located in a different jurisdiction than either you or us. So if you elect to proceed with a transaction that involves the services of a third-party service provider, then your information may become subject to the laws of the jurisdiction(s) in which that service provider or its facilities are located. As an example, if you are located in Canada and your transaction is processed by a payment gateway located in the United States, then your personal information used in completing that transaction may be subject to disclosure under United States legislation, including the Patriot Act. Once you leave our store’s website or are redirected to a third-party website or application, you are no longer governed by this Privacy Policy or our website’s Terms of Service.

LINKS

When you click on links on our store, they may direct you away from our site. We are not responsible for the privacy practices of other sites and encourage you to read their privacy statements.

SECURITY

To protect your personal information, we take reasonable precautions and follow industry best practices to make sure it is not inappropriately lost, misused, accessed, disclosed, altered or destroyed. If you provide us with your credit card information, the information is encrypted using secure socket layer technology (SSL) and stored with AES-256 encryption. Although no method of transmission over the Internet or electronic storage is 100% secure, we follow all PCI-DSS requirements and implement additional generally accepted industry standards.

AGE OF CONSENT

By using this site, you represent that you are at least the age of majority in your state or province of residence, or that you are the age of majority in your state or province of residence and you have given us your consent to allow any of your minor dependents to use this site. We do not intend to collect or knowingly collect information from children. We do not target children with our services.

QUESTIONS AND CONTACT INFORMATION

If you would like to: access, correct, amend or delete any personal information we have about you, register a complaint, or simply want more information email to our Privacy Compliance Officer at [support/at/nepogodova.co.nz] or mail us to Nepogodova Design [Re: Privacy Compliance Officer], PO Box 4288 Hamilton, 3247 Waikato, New Zealand.

CHANGES TO THIS PRIVACY POLICY

We reserve the right to modify this privacy policy at any time, so please review it frequently. Changes and clarifications will take effect immediately upon their posting on the website. If we make material changes to this policy, we will notify you here that it has been updated, so that you are aware of what information we collect, how we use it, and under what circumstances, if any, we use and/or disclose it. If our store is acquired or merged with another company, your information may be transferred to the new owners so that we may continue to sell products to you.

We reserve the right to make changes to this Privacy Policy. The last modification was made on 14.03.2025.