Privacy Policy

Depending on how you use the Site, we may collect the following information:

• first and last name;
• company name, if applicable;
• billing and delivery addresses;
• email address and phone number;
• order information;
• records showing acceptance of contractual documents;
• shipping-tracking information;
• data needed to prevent fraud;
• limited payment information provided by the payment provider;
• IP address where collection is necessary and legally justified.

We may use data for the following purposes:

• process and ship orders;
• manage customer support;
• record acceptance of the terms of sale and notices;
• manage buyers’ declared eligibility;
• prevent fraud and suspicious transactions;
• meet legal, tax and accounting obligations;
• manage logistics;
• handle disputes or return requests;
• secure the Site.

We do not collect data for advertising profiles.

Depending on the processing, we rely on:

• performance of a contract: processing and shipping orders, order-related customer support and returns;
• compliance with a legal obligation: accounting and tax duties and retaining records of acceptance;
• our legitimate interests: fraud prevention, Site security and proof of acceptance of terms;
• your consent for optional marketing communications, separate from acceptance of the terms of sale and withdrawable at any time.

Only where necessary, data may be shared with:

• authorised Nexum Labs LLC personnel;
• payment providers and banks;
• cryptocurrency payment providers;
• carriers and logistics services;
• the Site host and technical providers needed to operate the Site;
• security and fraud-prevention providers;
• competent authorities where required by law.

Personal data is not sold or rented to third parties.

The Site does not use audience-measurement cookies, advertising pixels or marketing trackers. It uses a self-hosted Umami instance to measure audience anonymously and improve content, user journeys and technical performance.

This measurement may process:

• the page path and referring site;
• campaign UTM parameters;
• estimated country;
• device type, operating system and browser;
• LCP, INP, CLS, FCP and TTFB performance metrics.

Email and postal addresses, order references, customer IDs, form contents and raw IP addresses are never recorded in Umami. URL parameters other than the five permitted UTM parameters, and all URL fragments, are removed before data is sent.

Umami does not use session replay, heatmaps or individual identification. Data is hosted on our infrastructure, kept for no more than 25 months and then deleted. Browser Do Not Track is respected; you may also object to this measurement by enabling it in your browser settings.

Browser local storage is used only for strictly functional purposes:

• remembering age confirmation;
• storing cart contents;
• remembering an applied promotional code;
• remembering dismissal of the announcement banner.

These values remain in the browser and can be cleared in its settings. Age confirmation is not consent to audience measurement. A consent mechanism will be provided if non-essential cookies are introduced.

Nexum Labs LLC is established in the United States, in the State of New Mexico. Some data may therefore be processed or accessed from the United States and from countries where our providers operate, including for hosting, payment processing and logistics.

Where data subject to the General Data Protection Regulation is transferred outside the European Economic Area, the transfer must use a Chapter V mechanism, such as:

• an adequacy decision;
• standard contractual clauses;
• an applicable derogation.

You may request information about applicable safeguards using the contact details in section 15.

Subject to applicable law, you may have the following rights:

• the right to access your data;
• the right to correct your data;
• the right to erase your data;
• the right to restrict processing;
• the right to object to processing;
• the right to request portability where applicable;
• the right to withdraw consent at any time where processing is based on consent.

We may reasonably verify your identity before acting on a request.