Privacy policy

Last updated: 21 August 2026

At NSÌSÌMU, we are committed to handling your personal data with care and transparency. This Privacy Policy explains how we collect, use and protect your personal data in accordance with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018. Please read it carefully to understand your rights and how we handle your information.

Who We Are

NSÌSÌMU Ltd. is the data controller responsible for your personal data.

NSÌSÌMU Ltd.
20 Mortlake Business Centre
Mortlake High Street
London SW14 8JN
United Kingdom

Registered in England and Wales. Company Number: 15929971.

Email: hello@nsisimu.com

All data-related queries should be directed via our Contact Form or at hello@nsisimu.com.

What We Collect

When you use our website or services, we may collect the following categories of personal data:

Contact details: your name, email address, telephone number and delivery address.
Order information: purchase history, product preferences and payment-related information. Payments are processed securely by the payment service providers available through our website. We do not store your full payment card details directly.
Technical data: IP address, browser type, device information, and cookies.
Communications: any messages or feedback submitted via our Contact Form or email.

We collect personal data directly from you when you place an order, create an account, contact us or sign up to receive communications. We may also collect information automatically when you use our website or receive limited information from service providers that help us operate it.

Children's Privacy

Our services are not directed at children under the age of 16 and we do not knowingly collect personal data relating to children. If we become aware that we have inadvertently collected such data, we will delete it promptly. Please contact us using our Contact Form or at hello@nsisimu.com if you believe a child has provided us with personal data.

How We Use Your Data

We collect and process only the personal data necessary for the purposes outlined in this Privacy Policy. We process your personal data only where we have a lawful basis in accordance with the UK GDPR.

Order fulfilment: to process payments, arrange delivery and manage returns. Legal basis: contractual necessity.
Customer accounts: to create and manage your account, authenticate access and maintain account security. Legal basis: legitimate interests.
Customer service: to respond to your enquiries and handle complaints. Legal basis: legitimate interests.
Marketing communications: to send promotional emails and our newsletter, Keeping Company. Legal basis: consent, collected via opt-in at sign-up. You may withdraw consent at any time via the unsubscribe link in any email.
Website analytics: to understand how visitors use our website and improve its performance. Legal basis: consent where required.
Legal and compliance: to maintain records required by law. Legal basis: legal obligation.
Fraud prevention: to detect and prevent fraudulent activity. Legal basis: legitimate interests.

Where we rely on legitimate interests, those interests include providing customer support, maintaining the security and effective operation of our services, and protecting NSÌSÌMU and our customers against fraud and misuse.

We will never sell your personal data to third parties.

Automated Processing

We do not use solely automated decision-making processes, including profiling, that produce legal or similarly significant effects on you as set out in the UK GDPR.

We may use tools to segment our marketing communications based on your purchase history or email engagement. This is used only to make our communications more relevant to you and does not produce any decision with a legal or significant effect.

Sharing Your Information

We share your personal data only with trusted third parties where necessary to provide our services:

Payment processing: Shopify Payments and/or other processors selected for the secure processing of payment transactions.
Order fulfilment: Royal Mail, Evri, DPD and/or other selected couriers.
Platform providers: Shopify (order management) and Klaviyo (email marketing) and other carefully selected service providers where necessary to operate our business.

We require our service providers to handle personal data appropriately and in accordance with applicable data protection law. Some third parties may process your personal data as independent controllers under their own privacy policies. We may also disclose your personal data where required by law or where necessary to protect the rights, property or safety of NSÌSÌMU Ltd. or others.

International Transfers

Some of our service providers may process or store personal data outside the United Kingdom.

Where personal data is transferred internationally, we use appropriate safeguards in accordance with UK data protection law. Depending on the destination and circumstances, these may include UK adequacy regulations or appropriate safeguards such as the UK International Data Transfer Agreement (IDTA), the UK Addendum to the EU Standard Contractual Clauses, or other safeguards recognised under UK data protection law.

You may contact us if you would like further information about the safeguards used for international transfers.

Your Rights

In accordance with UK data protection law, you may have the following rights, depending on the circumstances:

Access — to request a copy of the personal data we hold about you. We will normally respond without undue delay and within one month.
Rectification — to ask us to correct inaccurate or incomplete personal data.
Erasure — to ask us to delete your personal data in certain circumstances, subject to any legal obligations requiring us to retain it.
Withdraw consent — where we rely on your consent, you may withdraw it at any time without affecting processing carried out before withdrawal.
Data portability — to receive certain personal data in a structured, commonly used and machine-readable format, where applicable.
Restriction — to ask us to restrict the processing of your personal data in certain circumstances.
Object — to object to certain processing based on legitimate interests and to object at any time to the use of your personal data for direct marketing.
Automated decision-making — where applicable, you have rights relating to decisions made solely by automated means that produce legal or similarly significant effects.

To exercise any of these rights, contact us via our Contact Form or at hello@nsisimu.com.

If you are not satisfied with how we handle your personal data, you also have the right to lodge a complaint with the Information Commissioner's Office (ICO).

Data Storage and Security

Security

We take appropriate technical and organisational measures to protect your personal data, including secure website connections, access controls and security measures provided by our trusted technology providers. While we take reasonable steps to protect your personal data, no method of transmission over the internet or electronic storage is completely secure.

Retention

Orders and financial records: retained for up to 6 years where required for accounting, tax and legal purposes.
Customer accounts and communications: retained for as long as reasonably necessary to provide our services, manage our relationship with you and deal with enquiries or disputes.
Marketing data: retained while you remain subscribed. If you unsubscribe, we may retain limited information on a suppression list to ensure that we continue to respect your preference.

We may retain certain information for longer where necessary to comply with legal obligations, resolve disputes or enforce our agreements.

Cookies and Tracking

Our website uses cookies and similar technologies to support functionality, personalise your experience and analyse traffic. Some are strictly necessary, while others may require your consent under PECR depending on their purpose and how they are used.

You can manage your preferences at any time via Cookie Preferences in the footer of our website.

For further information, please refer to our Cookies Policy.

Data Breaches

In the event of a personal data breach, we will assess the risk to your rights and freedoms. Where notification to the ICO is required, we will do so without undue delay and, where feasible, within 72 hours of becoming aware of the breach. Where a breach is likely to result in a high risk to you, we will also notify you directly without undue delay.

Policy Updates

We may update this Privacy Policy periodically. Any changes will be published on this page with a revised date at the top. Where appropriate, we may notify you of material changes by email or by placing a prominent notice on our website.

Contact Us

If you have any questions, concerns, or requests relating to this Privacy Policy, please contact us:

Our Contact Form
hello@nsisimu.com
Write to us at our registered office address, set out below.