Privacy Policy

1. Who We Are

TidyNest ("we", "us", "our") is an e-commerce store selling home organisation and storage products internationally. You can reach us at tidynest.boutique@gmail.com.

This policy explains what personal data we collect when you visit our store or place an order, why we collect it, how we use it, and what rights you have over it.

We comply with the following laws, as applicable to you based on your location:

• Israeli Privacy Protection Law 5741-1981, as amended by Amendment 13 (effective August 14, 2025)
• EU General Data Protection Regulation (GDPR) — for customers in the European Economic Area
• UK General Data Protection Regulation (UK GDPR) — for customers in the United Kingdom
• Australian Privacy Act 1988 — for customers in Australia
• California Consumer Privacy Act (CCPA / CPRA) — for California residents

2. Data We Collect

• Account & order data: name, email address, billing and shipping address, phone number, order history.
• Payment data: payment is processed securely by Shopify Payments and our payment processors. We do not store full card numbers.
• Technical data: IP address, browser type, device type, pages visited, referral source, and cookie identifiers.
• Communications: messages you send us via the contact form or by email.
• Marketing preferences: whether you have opted in to receive promotional emails.

3. Why We Use Your Data

4. Who We Share Your Data With

We do not sell your personal data. We share it only with trusted third-party service providers who help us operate the store:

• Shopify Inc. — our e-commerce and payment platform (servers located in the United States and Canada). We have a Data Processing Agreement with Shopify.
• Shipping carriers and fulfillment partners — to deliver your orders. Your name and shipping address are shared as required.
• Email service providers — to send transactional and marketing emails.
• Analytics providers — to understand how our site is used (only with your cookie consent).

All processors are contractually bound to handle your data securely and only for the specified purpose.

5. International Data Transfers

Our store is based in a country that the European Commission has recognised as providing an adequate level of data protection. Where your data is transferred to countries without an adequacy decision (for example, to Shopify's US infrastructure), we rely on Standard Contractual Clauses or equivalent safeguards approved by the relevant supervisory authority.

EU Representative (GDPR Art. 27): As a business outside the European Union that processes the personal data of EU residents, we are in the process of appointing an authorised representative within the EU as required by Article 27 of the GDPR. Once appointed, their contact details will be published here. In the meantime, EU residents may contact us directly at tidynest.boutique@gmail.com.

UK Representative (UK GDPR Art. 27): Similarly, we are in the process of appointing a UK representative for our UK customers. UK residents may also contact us directly in the meantime.

6. Data Security & Breach Notification

We take the security of your personal data seriously. In accordance with Israeli Privacy Protection Law (Amendment 13), GDPR, and UK GDPR, we implement appropriate technical and organisational measures to protect your data against unauthorised access, loss, or disclosure. These include encryption of data in transit, access controls, and regular security reviews.

In the event of a data breach that is likely to affect your rights and freedoms, we will notify the relevant supervisory authority within 72 hours (GDPR / UK GDPR) or without undue delay (Israeli PPL). If the breach poses a high risk to you personally, we will also notify you directly as soon as reasonably practicable.

7. How Long We Keep Your Data

• Order and financial records: 7 years to comply with applicable accounting law.
• Customer account data: for the life of your account, plus 2 years after your last order.
• Marketing data: until you unsubscribe or withdraw consent.
• Support communications: 3 years from the date of the last message.

8. Your Rights

Depending on your country, you may have the right to:

• Access the personal data we hold about you.
• Correct inaccurate or incomplete data.
• Erase your data ("right to be forgotten"), subject to legal retention requirements.
• Restrict how we process your data in certain circumstances.
• Data portability — receive your data in a structured, machine-readable format.
• Object to processing based on legitimate interests or for direct marketing.
• Withdraw consent at any time (this does not affect processing already carried out).

To exercise any of these rights, email us at tidynest.boutique@gmail.com. We will respond within 30 days.

EU residents have the right to lodge a complaint with their national data protection authority. UK residentsmay contact the Information Commissioner's Office (ICO) at ico.org.uk. Israeli residents may contact the Privacy Protection Authority (PPA, formerly ILITA). Australian residents may contact the Office of the Australian Information Commissioner (OAIC) at oaic.gov.au.

9. Cookies

We use cookies and similar technologies to operate the store (e.g. your shopping cart) and, with your consent, to analyse traffic and personalise content. For full details see our Cookie Policy.

10. Children's Privacy

Our store is not directed at children under 16. We do not knowingly collect personal data from children. If you believe a child has provided us with data, please contact us and we will delete it promptly.

11. Changes to This Policy

We may update this policy from time to time. When we do, we will revise the "last updated" date at the top and, for material changes, notify you by email or a prominent notice on the site.

12. Contact

For any privacy-related questions or requests, contact us at tidynest.boutique@gmail.com.