1. Introduction

In this privacy policy, we - Urban Ponics B.V. ("we", "our" or "our") - explaining how we collect, process and protect personal data when you visit our website nacar.co.uk and the NACAR web shop used. According to the General Data Protection Regulation (GDPR), a privacy notice must be concise, transparent, understandable and easily accessible. It must include the identity of the controller, the purposes and legal basis of the processing, the recipients of the data, information on transfers to third countries, the retention period, the rights of the data subject and the existence of automated decision-making.

2. Controller and contact details

The controller responsible for processing your personal data is:

Urban Ponics B.V., Raadhuisstraat 8C, 5241 BL Rosmalen, the Netherlands, telephone +31 616 665 391, e-mail: info@nacar.nl. Our Chamber of Commerce number (64289400) and VAT identification number (NL855601425B01) are included in the colofon.

3. Data we collect

We process the following types of personal data:

  • Account and order details: When you register or order, we collect your name, billing and delivery address, e-mail, telephone number and payment details so that we can fulfil your order.
  • Device data and log files: When you visit our website, we record your IP address, browser type and pages visited to secure and improve the website.
  • Payment details: Payments are processed by trusted providers (e.g. Klarna, Apple Pay, Google Pay). We send only the necessary data (order number, amount, currency, invoice details) to these providers.
  • Customer contact: When you call us, email us or use the contact form, we process your name, contact details and message to answer your query.
  • Cookies and analytics: Our website uses cookies to remember the shopping cart and your login status. We also use analytical cookies to understand site usage. You can manage cookies via your browser settings.

Use of Google Analytics and Google Search Console

Our website uses for analysis and search performance Google Analytics and Google Search Console, services provided by Google LLC (USA). These services set cookies and collect anonymised statistics on website usage and search terms. Google may process data such as abbreviated IP addresses and browser information on servers outside the European Economic Area. We rely on appropriate safeguards, such as EU model contractual clauses, to ensure an adequate level of protection.

4. How we collect data

  • Immediately: You provide data when you create an account, place an order, subscribe to the newsletter, complete a survey or contact us.
  • Automatic: We collect technical data via log files and cookies.
  • From third parties: We receive data from payment and shipping partners (e.g. payment status and delivery information). We do not purchase marketing lists.

5. Legal basis and purposes

We process personal data only when there is a legal basis:

  • Execution of the agreement: To fulfil orders, manage accounts and provide customer service (Art. 6(1)(b) AVG).
  • Legal obligation: To comply with tax, accounting and consumer law requirements (Art. 6(1)(c) AVG).
  • Legitimate interest: To improve our website, prevent fraud, enforce legal claims and make internal analyses (Art. 6(1)(f) AVG).
  • Consent: For marketing purposes (e.g. newsletter), we request express consent (Art. 6(1)(a) AVG). You can withdraw this consent at any time.

6. Recipients of personal data

We share data only to the extent necessary:

  • Payment service providers: For payment processing (Klarna, Apple Pay, Google Pay, credit card acquirers).
  • Carriers and logistics partners: For delivery of your order.
  • Hosting and IT service providers: The website is hosted by Hostinger on servers in Amsterdam.
  • Analysis providers: For anonymous usage statistics.
  • Government agencies: If required by law.

We do not sell personal data to third parties.

Use of Google services for analysis

In addition to the general analysis providers above, we use Google Analytics and Google Search Console (Google LLC, USA) for anonymised statistics on website usage and search performance. These services may process data such as abbreviated IP addresses and browser information on servers outside the European Economic Area. We use appropriate protection measures, such as EU model contracts, to ensure an adequate level of protection.

7. Transfers to third countries

Our infrastructure is located in the EU. Some payment and technical service providers may process data outside the EEA. In this case, we use appropriate safeguards such as EU model contracts or adequacy decisions.

8. Retention periods

  • We keep order data for as long as necessary to perform the agreement and thereafter for as long as legally required (usually seven years).
  • We keep account information until you delete your account or until we no longer need it.
  • We keep data for the newsletter until you unsubscribe.
  • Server log files are deleted after a maximum of 12 months, unless they are needed for security or evidence purposes.

9. Your rights

Under the AVG, you have the following rights:

  • Insight: You can request a copy of the personal data we process about you.
  • Corrigendum: You can have incorrect data corrected.
  • Erasure ("right to oblivion"): You can have your data deleted under certain circumstances.
  • Limitation: You can have the processing restricted in certain cases.
  • Portability: You can receive your data in a structured, common format.
  • Objection: You can object to processing based on legitimate interest or direct marketing.
  • Revoke consent: You can withdraw your consent at any time.
  • Complaint: You can complain to the Personal Data Authority or your local regulator.

You can exercise your rights via the contact details in section 2.

10. Marketing Communications

When you subscribe to our newsletter, we use your e-mail address for product information and offers. You can unsubscribe at any time using the link in the emails or by contacting us.

11. Cookies

We use:

  • Necessary cookies: for basic functions such as shopping cart and login.
  • Preferred cookies: to remember your language and settings.
  • Analytical cookies: for anonymised statistics on website usage.

You can manage cookies in your browser. Disabling cookies may affect the functionality of the site.

12. Data security

We take technical and organisational measures to protect your data, including encrypted connections (HTTPS), hosting within the EU, access management and regular backups.

13. Changes to this policy

We may update this privacy policy when necessary. The current version is always available at nacar.co.uk. In case of important changes, we will inform you by e-mail or via the website.

14. Contact

Questions about this privacy policy or our data protection policy should be sent to info@nacar.nl or by post to Urban Ponics B.V., Raadhuisstraat 8C, 5241 BL Rosmalen, the Netherlands.