Privacy Policy and Personal Data Protection
We place great importance on the confidentiality of your information. The data you share with us as part of our SMS and email marketing services is used exclusively to enhance your experience and to keep you informed about your orders, cart reminders, promotional offers, and product review requests.
Our website also uses cookies to track the contents of your shopping cart, even if you have not completed your purchase. This information allows us to send you relevant reminders and optimize your browsing experience.
Your personal data is collected and processed only:
with your consent,
for the performance of a contract (e.g., orders, deliveries), or
when required by law.
When you make a purchase, we collect the information you provide directly to us, such as your name, address, email address, phone number, etc.
When you browse our website, we automatically collect certain technical information, such as your IP address, browser type, and operating system.
Email marketing: with your permission, we may send you communications about our store, new products, and promotions.
How we obtain your consent:
When you provide us with your personal information to complete an order or transaction, we consider this as consent to use that information for that specific purpose. For any additional use, such as marketing, we will request your explicit consent.
Withdrawal of consent:
You may withdraw your consent at any time by sending an email to:
Your personal information may only be disclosed if required by law or in the event of a breach of our General Terms and Conditions of Sale and Use.
Our store is hosted by Shopify Inc., a secure e-commerce platform.
Your data is stored on secure servers protected by firewalls. For direct payments, Shopify complies with PCI-DSS standards relating to the secure processing and deletion of credit card information.
Certain third-party service providers (payment, logistics) may have access to your data, but only to the extent necessary to provide their services.
Depending on their location, your data may be subject to the local laws of these service providers.
When you leave our website via external links, these third-party providers are no longer governed by this privacy policy.
We implement industry-standard security measures to protect your sensitive information (SSL encryption, AES-256). However, no system is completely secure.
Cookies used:
_session_id: unique session identifier
_shopify_visit: visit tracking (30 minutes)
_shopify_uniq: visitor tracking (expires at midnight)
cart: shopping cart contents (2 weeks)
_secure_session_id: secure session
storefront_digest: access verification (password)
By using this website, you confirm that you are of legal age in your jurisdiction, or that you have given consent for a minor under your responsibility to use it.
We reserve the right to modify this policy at any time. Updates take effect immediately upon publication on the website.
In the event of a merger or acquisition, your data may be transferred to the new owners.
In accordance with applicable regulations, you have the following rights:
Right of access
Right to rectification
Right to erasure
Right to restriction of processing
Right to data portability
Right to object
Right to lodge a complaint with a supervisory authority
To exercise your rights, you may contact us at:
contact@framemyheart.com
Erasure
Restriction
Objection
Portability
To exercise your rights, contact us at:
contact@nightswell.com
For any questions regarding your personal data or to exercise your rights:
Data Protection Officer
📧 contact@nightswell.com