Your data, handled like we'd want ours handled.

Last updated: May 2026

Who we are

Nubs ("we", "us") is based in Barcelona, Spain. For anything privacy-related you can reach us at privacy@trynubs.com. We are the data controller for the personal data described below.

What we collect

• Account & order data: name, email, shipping and billing address, phone number (if provided), order history.
• Payment data: handled directly by our payment processor (Stripe / Shop Pay). We never see or store your full card number.
• Communication: emails and support messages you send us, plus newsletter and SMS preferences.
• Usage data: device type, browser, pages visited, referrer, and similar analytics signals.
• Cookies & similar tech: essential cookies for cart and checkout, plus analytics and marketing cookies you consent to.

Why we use it

• To process and ship your orders and manage your account.
• To provide customer support and respond to your messages.
• To send order, shipping, and account emails (transactional).
• To send marketing emails, SMS, or product updates — only if you opt in.
• To improve our products and site, prevent fraud, and meet legal and tax obligations.

Legal basis (GDPR)

• Contract: processing your order and running your account.
• Consent: marketing emails, SMS, and non-essential cookies.
• Legitimate interest: security, fraud prevention, improving our products and site.
• Legal obligation: tax records, accounting, consumer protection.

Who we share data with

We use a small number of trusted service providers who only process data on our instructions:

• E-commerce platform (Shopify) — storefront and orders.
• Payment processors (Stripe, Shop Pay, PayPal) — payments.
• Shipping carriers (e.g. DHL, GLS, Royal Mail) — to deliver your parcel.
• Email & SMS platform (Klaviyo) — transactional and marketing messages.
• Analytics (Google Analytics, Meta) — aggregated usage and advertising performance.

We never sell your personal data. We may share data when legally required (court order, regulator request).

Your rights

Under GDPR and equivalent laws you can ask us to:

• Access the data we hold about you.
• Correct anything inaccurate.
• Delete your data (right to be forgotten).
• Export your data in a portable format.
• Restrict or object to certain processing.
• Withdraw consent for marketing at any time.

Email privacy@trynubs.com and we'll action your request within 30 days. You can also lodge a complaint with the Spanish Data Protection Agency (AEPD) or your local supervisory authority.

How long we keep it

Order and tax records: 6 years (legal requirement). Account data: until you delete your account. Marketing data: until you unsubscribe. Analytics: typically up to 26 months in aggregated form.

Children

Our site and products are intended for adults (18+). We don't knowingly collect data from children.

Changes to this policy

If we make material changes we'll update this page and, where appropriate, notify you by email.