GDPR

Personal Data Protection Policy (GDPR)

Last updated: January 9, 2026

1. Data Controller

The data controller for personal data collected on the ndk-shop.com website is:
ndk-shop.com
France

2. Data collected

As part of our online sales of premium natural cosmetics, gemstone jewelry and luxury knitwear, we collect the following data:

  • Identification details: ndk-shop
  • email ymarie@034@gmail.com
  • Order details: delivery address, billing address, purchase history
  • Payment data: processed securely by our payment providers
  • Browsing data: cookies, IP address, connection data

3. Purposes of the processing

Your personal data is collected for the following purposes:

  • Process and manage your product orders (cosmetics, jewelry, knitwear)
  • Ensuring delivery in France and Europe
  • Manage your customer account
  • Sending you marketing communications (with your consent)
  • Improving our services and our website
  • Comply with our legal and tax obligations

4. Legal basis for processing

Your data is processed based on:

  • Contract execution: to process your orders
  • Your consent: for marketing communications
  • Our legitimate interest: to improve our services
  • Our legal obligations: for accounting and taxation

5. Data Recipients

Your data may be transmitted to:

  • Our secure payment providers
  • Our carriers for delivery in France and Europe
  • Our technical service providers (hosting, email marketing)
  • The competent authorities upon legal request

6. Shelf life

  • Order data: 10 years (accounting obligations)
  • Customer account data: 3 years after the last activity
  • Marketing data: 3 years after the last contact or withdrawal of consent

7. Your rights

In accordance with the GDPR, you have the following rights:

  • Right of access: obtain a copy of your data
  • Right to rectification: correct your inaccurate data
  • Right to erasure: delete your data (under certain conditions)
  • Right to restriction of processing: limiting the processing of your data
  • Right to data portability: retrieve your data in a structured format
  • Right to object: to object to the processing of your data
  • Right to withdraw your consent: at any time

To exercise your rights, contact us via our Contact page or by email.

8. Cookies

Our site uses cookies for:

  • Ensuring the proper functioning of the site (essential cookies)
  • Analyze traffic and improve user experience
  • Personalize content and ads (with your consent)

You can manage your cookie preferences via your browser settings or our consent banner.

9. Security

We implement appropriate technical and organizational measures to protect your data against unauthorized access, loss or disclosure.

10. International Transfers

Your data is primarily processed within the European Union. In the event of a transfer outside the EU, we ensure that appropriate safeguards are in place.

11. Complaint

If you believe your rights have not been respected, you can file a complaint with the CNIL (National Commission for Information Technology and Civil Liberties):
www.cnil.fr

12. Modifications

We reserve the right to modify this privacy policy. Any changes will be posted on this page with a new update date.