Privacy Policy

Nafi Privacy Policy

Last updated: 13.05.2025

This privacy policy explains how Nafi Limited ("Nafi", "we", "our", or "us") collects, uses, and protects your personal information when you interact with us online at https://www.nafi.world.

We are committed to respecting your privacy and complying with UK data protection laws. This policy is designed to be easy to understand and clearly sets out how your data is handled.

1. Who We Are

Nafi Limited is registered in the UK. Our website is https://www.nafi.world.

For all privacy-related queries, you can contact:
Email: dataprotection@nafi.world
Post: The Data Protection Team, Nafi, [Insert Address]

We are the data controller for your personal information when you shop with us or use our website.

2. What Personal Data We Collect

We collect your data when you:

  • Place an order

  • Sign up to our newsletter

  • Create an account

  • Enter a competition or survey

  • Contact customer service

  • Browse our website

Types of data we collect may include:

  • Name, address, and contact details (email, phone)

  • Delivery and billing addresses

  • Order history

  • Marketing preferences

  • Device information (IP address, browser, etc.)

  • Payment details (handled securely by payment providers)

3. How We Use Your Information

We use your data to:

  • Fulfil and manage your orders

  • Communicate order updates

  • Send marketing communications (if opted in)

  • Respond to your queries or complaints

  • Improve our website and user experience

  • Prevent and detect fraud

Legal grounds for processing:

  • Contract performance (e.g., fulfilling your order)

  • Consent (e.g., email marketing)

  • Legitimate interests (e.g., improving our services)

  • Legal obligation (e.g., accounting requirements)

4. Marketing & Preferences

We only send marketing emails or texts if you opt in. You can unsubscribe at any time using the link in our emails or by contacting us.

You can also opt out of postal marketing by contacting our support team.

5. Sharing Your Information

We share your information with trusted third-party service providers, including:

  • Payment processors (e.g., Stripe)

  • Delivery services (e.g., Royal Mail, DPD)

  • Email marketing platforms

  • IT and analytics providers

We do not sell your personal data.

We may also share information where required by law or to prevent fraud.

6. Cookies

We use cookies to:

  • Understand how our site is used

  • Improve site performance

  • Tailor marketing and ads

You can manage cookie preferences in your browser or via our cookie banner.

7. Keeping Your Data Secure

We use appropriate technical and organisational measures to protect your personal data, including:

  • SSL encryption for online payments

  • Secure servers and access controls

  • Staff training

8. How Long We Keep Your Data

We only keep your data as long as necessary:

  • Order and account info: up to 6 years (for legal/accounting reasons)

  • Marketing data: until you unsubscribe

9. Your Rights

You have the right to:

  • Access the data we hold about you

  • Ask us to correct inaccurate data

  • Request deletion of your data

  • Object to or restrict certain uses

  • Withdraw consent at any time

To exercise any of these rights, contact us at: dataprotection@nafi.world

10. Changes to This Policy

We may update this policy from time to time. The latest version will always be posted on our website.

11. Questions or Complaints

If you have questions or concerns, please contact us. If you're not happy with our response, you can contact the UK Information Commissioner's Office at https://ico.org.uk.