Privacy Policy

1. Who we are

NIDUAR is a fashion marketplace connecting customers with emerging designers. Our registered email contact is hello@niduar.com. References to "NIDUAR", "we", "us", or "our" in this policy refer to the NIDUAR platform.

2. What data we collect

We collect the following personal data:

• Account data — name, email address, and hashed password when you create an account.
• Order data — billing details, shipping address, and order history when you make a purchase. Payment card data is handled exclusively by Stripe and is never stored on our servers.
• Style preferences — quiz answers, product interactions (views, likes), and AI-generated style profiles used to personalise your experience.
• Back-in-stock requests — email address submitted through product notification forms.
• Designer applications — name, brand name, city, country, and email provided in the apply form.
• Session data — an encrypted session cookie set at login to keep you signed in.

3. How we use your data

• To process and fulfil your orders, and communicate order status.
• To personalise product recommendations via our AI Style Twin.
• To notify you when a requested out-of-stock item is available again.
• To process designer applications and communicate application status.
• To send transactional emails (order confirmations, shipping updates). We do not send marketing emails without your explicit consent.

4. Legal basis for processing (GDPR)

Where GDPR applies, we process your personal data on the following bases:

• Contract performance — to process orders and manage your account.
• Legitimate interests — to personalise your experience and improve the platform.
• Consent — for back-in-stock notifications and any optional marketing.

5. Third-party services

We use the following third-party processors who may receive your data:

• Stripe — payment processing. Stripe's privacy policy: stripe.com/privacy
• Resend — transactional email delivery.
• Anthropic — AI-powered style recommendations (no personal data is sent — only anonymised style preferences).
• Cloudinary — product image hosting.

6. Data retention

We retain your account and order data for as long as your account is active and for up to 7 years thereafter for tax and legal compliance. Style preference data is deleted upon account closure. Back-in-stock request emails are removed after the product is restocked or after 12 months, whichever is earlier.

7. Your rights

If you are in the European Economic Area or UK, you have the right to:

• Access, correct, or delete your personal data.
• Object to or restrict processing.
• Data portability.
• Withdraw consent at any time (where processing is consent-based).
• Lodge a complaint with your local data protection authority.

To exercise any of these rights, email us at hello@niduar.com. We will respond within 30 days.

8. Cookies

We use a single session cookie (httpOnly, Secure, SameSite=Lax) for authentication. We do not use tracking or advertising cookies. No third-party analytics scripts are loaded on this site.

9. Changes to this policy

We may update this policy as the platform evolves. Material changes will be communicated by email to registered users. Continued use of NIDUAR after changes constitutes acceptance of the updated policy.

10. Contact

For any privacy-related questions, contact us at hello@niduar.com.