Privacy policy
To provide a safe online environment and assure data privacy, we strictly adhere to the GDPR regulations. This privacy statement explains the method and purpose of data collecting, as well as the security measures, retention periods, and contact information.
SECTION 1 – Personal Information Collected
1.1 Account
Only customers with a personal account may make purchases. As part of the purchasing and selling process, we gather the following personally identifiable information from you when you register an account or make a purchase from our store:
- First & last name
- Home & invoice address
- Telephone number
- IP address
- E-mail address
- Date of birth
This information is necessary to complete the delivery. In addition, when you browse our shop, we automatically acquire the Internet Protocol (IP) address of your computer. On the basis of this information, we can optimize your online experience and safeguard our online ecosystem.
Purpose of data collection
We gather and keep account-related information for the reasons outlined below:
- Perform our responsibilities resulting from any contracts between you and us, and to provide to you the information, goods, and services that you request from us;
- Create, administer, and communicate with you about your account and orders;
- Conduct market studies and analysis;
- Verify your age and identity in order to detect and prevent fraud.
1.2 Newsletters
With your express consent, we may send you emails on our shop, new goods, and other updates. Consent is required for the distribution of newsletters. Within the course of the newsletter, the following data is collected:
- First & last name
- E-mail address
Purpose of data collection
The gathered data is used to:
- personalize our emails, including mentioning your name;
- improve our website; and
- send you marketing communications.
You may revoke your consent at any time by using the link in the newsletter or the contact information shown in SECTION 2.
1.3 Customer service
Our customer support agents have access to account-related information so that they may provide the necessary assistance. Therefore, their assistance will be incredibly efficient and enjoyable. Our CRM provider utilizes the information supplied by our contact form. Your information will only be used to reply to your message.
SECTION 2 – Consent
When you enter personal information to complete a transaction, validate your credit card, make an order, arrange for a delivery or return an item, we infer that you agree to us collecting and using this information for that particular purpose alone.
If we ask for your personal information for a secondary purpose, such as marketing, we will ask for your agreement beforehand or provide you an option to say no.
2.1 How to withdraw consent?
If you change your mind after providing opt-in consent, you may withdraw your permission at any time by writing us at hello@ninerealms.eu.
SECTION 3 – Disclosure
We may release your personal data if obliged to do so by law or if you break our Terms of Service.
SECTION 4 – Data Control Period
Data minimalism is of utmost significance in Nine Realms. Therefore, we will not store your data for longer than required to fulfill the objectives described in this Policy. Different kinds of data have varying retention periods, however we will typically retain personal information for no more than 10 years.
4.1 Account information
As long as the customer has an account, account-related information stays relevant. Therefore, the data is preserved for the duration of the account's existence. When a user deletes their account, the associated information will be removed within ten days. Requests for access to or correction of stored personal data, or the deletion of an account, should be directed to support@ninerealms.eu.
4.2 Newsletters
Consent to receive the newsletter and the accompanying data remain valid so long as our customers are registered to receive the newsletter. However, we do a periodic (monthly) relevancy check. Customers (and their personal information) who do not react to our request will be removed from our database. In addition, each newsletter communication includes an opt-out option. With the use of this opt-out option, consumers may revoke their permission.
SECTION 5 – Cookies
Cookies are little data files that notify your computer about your prior interactions with our website. These cookies are not saved on our website, but rather on your hard disk. Essentially, when you visit our website, your computer will display its cookies, indicating whether or not you have previously visited. This helps our site to work more quickly and retain information about your past visits (such as your username) to make your experience more comfortable. We employ two sorts of cookies at Nine Realms: functional and analytical cookies.
5.1 Functional cookies
Functional cookies are used to enhance the user experience on a website. These cookies, among other things, monitor the contents of the shopping basket. These cookies may be used without prior authorisation.
5.2 Analytical cookies
Utilizing analytical cookies allows for market research and analysis. The information obtained by these analytical cookies is anonymized, making it unavailable to others. These cookies may be used without prior authorisation.
SECTION 6 – Third-party Services
For us to complete transactions and provide our services, third-party services are required. In general, the third-party providers we use will acquire, use, and disclose your information solely to the extent required to enable them to execute the services they offer to us.
Certain third-party service providers, including payment gateways and other payment transaction processors, have their own privacy rules in regards to the information we are obligated to disclose for your purchase-related transactions.
We suggest that you read the privacy policies of these providers so that you can understand how they will treat your personal information.
Specifically, some service providers may be situated in a different jurisdiction than either you or us, or have facilities in a separate jurisdiction. Consequently, if you choose to continue with a transaction using the services of a third party, your information may become subject to the laws of the jurisdiction(s) where the third party is located.
As soon as you leave our store's website or are transferred to a third-party website or application, this Privacy Statement and our Terms of Service no longer apply.
Web analysis service (anonymised data)
This website includes a component of a web analytics service (with the anonymizer function). Web analysis is the process of collecting, compiling, and analyzing information pertaining to the behavior of website users. A web analysis service gathers, among other things, information on the website from which a user arrived (the so-called referrer), which sub-pages were seen, and how often and for how long. Web analytics are mostly used to optimize a website and assess the cost-effectiveness of internet advertising.
Courier service
We use a courier service to fulfill deliveries. This courier service handles the delivery between our firm and the customer's address. The corporation must have access to the consumer's name and address in order to accomplish these operations.
Mailing service
At Nine Realms, we use an external mail service provider to send the newsletter. This provider has access to limited account information related to opt-in consent (e.g. email address).
Marketing service
Nine Realms is assisted by a corporation that specializes in marketing and communication operations. Their access to personal data is very restricted and mostly anonymous.
Payment services
We utilize external payment systems to complete transactions at Nine Realms (e.g. credit card payments).
SECTION 7 – Security
To safeguard your personal information, we take reasonable efforts and adhere to industry best practices to prevent its loss, misuse, unauthorized access, disclosure, alteration, or destruction.
If you supply your credit card information, it is secured using secure socket layer technology (SSL) and stored using AES-256 encryption. Although no method of data transfer over the internet or electronic storage is 100% safe, we adhere to all PCI-DSS criteria and adopt extra industry-wide standards. Account-related information is protected using a hashing algorithm. This algorithm converts information into a hash value. As a consequence, critical information is protected and even hidden from our view. In addition, our databases are extremely secured against unauthorized access. For example, only authorized IP addresses are allowed to access the database (e.g. at Nine Realms headquarters). Other attempts and addresses are always denied.
In addition, data has been anonymized to the greatest extent feasible. Therefore, the data cannot be directly associated with a particular customer. Nonetheless, we could do market research and analysis using this information. In addition, third-party participants (such as mailing services) are vetted and given with a processor agreement prior to our partnership. Employees inside Nine Realms are granted varying access rights. The particular permission grants access to just the information necessary required to execute an operation.
To ensure the protection of online consumers, digital security measures are susceptible to change and must fulfill stringent standards. The job includes the periodic review and (where required) improvement of security mechanisms.
SECTION 8 - Changes to Privacy Policy
This Privacy Policy is subject to change at any moment, so please review it periodically. Upon their publication to the website, modifications and clarifications will become effective immediately. If we make significant changes to this policy, we will inform you immediately that it has been amended, so that you are aware of what information we collect, how we use it, and, if required, under what conditions we use and/or disclose it.
SECTION 9 – Contact
You can contact us:
- Electronically by sending an e-mail to hello@ninerealms.eu
- By phone: +372 5674 8558