Privacy policy

NYSTORM.CO Last updated: 01.09.2026

This Privacy Policy explains how NYSTORM.CO ("we", "us", "our") collects, uses, and protects your personal data when you visit or make a purchase from nystorm.co (the "Site"), in accordance with the EU General Data Protection Regulation (GDPR).

1. Who We Are

NYSTORM.CO 46019 Valencia, Spain Email: contact.nystorm@gmail.com

For the purposes of GDPR, NYSTORM.CO is the data controller of the personal data described in this policy.

2. What Data We Collect

Depending on how you interact with our Site, we may collect:

Order and account information: name, shipping address, billing address, email address, phone number, order history
Payment information: processed securely by our payment provider(s) at checkout. We do not store your full card details on our servers.
Communication data: information you provide when contacting us at contact.nystorm@gmail.com, including your email address and the content of your message
Technical and usage data: IP address, browser type, device information, and pages visited, collected automatically via cookies and similar technologies when you browse the Site
Marketing preferences: if you sign up to receive emails or marketing communications from us, your email address and engagement with those communications

3. How We Use Your Data

We use your personal data to:

Process and fulfil your orders, including preorder production, shipping, and customer service
Communicate with you about your order (confirmations, production updates, shipping notifications)
Respond to inquiries, returns, and support requests
Improve and maintain the Site
Send marketing communications, where you have opted in (you may unsubscribe at any time)
Comply with legal obligations (e.g. tax and accounting records)

4. Legal Basis for Processing

Under GDPR, we process your data on the following legal bases:

Contract: to process and deliver your order
Consent: for marketing communications and non-essential cookies
Legal obligation: to comply with applicable tax, commercial, and consumer protection laws
Legitimate interest: to maintain and improve the security and functionality of the Site

5. Cookies

Our Site may use cookies and similar tracking technologies to operate correctly (e.g. shopping cart functionality) and, where you consent, to understand how visitors use the Site and to show relevant advertising. You can control or disable cookies through your browser settings; disabling some cookies may affect the functionality of the Site.

6. Sharing Your Data

We do not sell your personal data. We may share your data with:

Service providers who help us operate the Site and fulfil orders, such as our e-commerce platform, payment processor, shipping carriers, and email service providers
Manufacturers involved in producing preorder items, to the extent necessary to fulfil production and shipping (e.g. shipping name and address)
Legal or regulatory authorities, where required by law

All third parties who process data on our behalf are required to protect your data in accordance with applicable data protection law.

7. International Transfers

If we ship to you outside the European Economic Area, or use service providers based outside the EEA, your data may be transferred internationally. Where this occurs, we take reasonable steps to ensure your data remains protected in accordance with GDPR requirements.

8. Data Retention

We retain your personal data for as long as necessary to fulfil the purposes described in this policy, including any legal, accounting, or reporting requirements (such as retaining order records for tax purposes for the period required under Spanish law).

9. Your Rights

Under GDPR, you have the right to:

Access the personal data we hold about you
Request correction of inaccurate data
Request deletion of your data ("right to be forgotten"), subject to legal retention requirements
Object to or restrict certain processing
Request a copy of your data in a portable format
Withdraw consent at any time (e.g. unsubscribe from marketing emails)
Lodge a complaint with your local data protection authority (in Spain, the Agencia Española de Protección de Datos)

To exercise any of these rights, contact us at contact.nystorm@gmail.com.

10. Data Security

We take reasonable technical and organisational measures to protect your personal data against unauthorised access, loss, or misuse. However, no method of transmission over the internet is completely secure, and we cannot guarantee absolute security.