Privacy policy
Privacy Policy
Last updated: 27 January 2026
Nashīnasu ナシーナス (“we”, “us”) operates this website and store (the “Services”) to provide access to works, editions, and related services, and to administer orders and Concierge enquiries. This Privacy Policy explains how we collect, use, share, and protect personal information when you visit, purchase, submit an enquiry, or otherwise communicate with us.
If there is a conflict between our Terms of Service and this Privacy Policy, this Privacy Policy controls in relation to personal information.
1) Who we are and how to contact us
For the purposes of UK data protection law, we are the “data controller” of your personal information.
Contact (Concierge / privacy enquiries): enquiries@nashinasu.com
Postal address: 483 Green Lanes, London, N13 4BS, United Kingdom
2) Personal information we collect
We collect personal information in the following categories (depending on how you interact with the Services):
-Contact details: name, email address, telephone number, billing/shipping address
-Order and transaction details: items purchased, order history, payment confirmation, delivery details
-Payment information: payments are processed by our payment providers; we do not store full card details
-Communications: messages submitted via Concierge/contact forms or email
-Device and usage data: IP address, browser/device information, and activity on the site (often via cookies or similar technologies)
3) Where we get it from
-From you directly (orders, forms, emails)
-Automatically when you use the site (cookies/analytics)
-From service providers who support payments, shipping, site hosting, analytics, and security
4) How we use personal information and our lawful bases (UK/EEA)
We use personal information for the purposes below, relying on the following lawful bases where applicable: contract (to fulfil orders), legal obligation (tax/accounting), legitimate interests (security/fraud prevention and operating the site), and consent (where required for marketing).
A. To fulfil orders and administer the practice (contract)
-process orders and payments
-prepare, dispatch, and deliver works
-provide order updates and service communications
-manage issues that require assessment or a remedy (e.g., damage in transit), in line with our policies and statutory rights
B. Concierge and communications (legitimate interests / contract)
-respond to acquisition enquiries, commission requests, and institutional communications
-maintain records of communications for continuity and quality control
C. Security and fraud prevention (legitimate interests / legal obligations)
-protect the site, accounts, and transactions
-detect and prevent fraud, abuse, or unauthorised access
D. Collector communications (consent where required)
If you opt in, we may send communications about releases or administrative updates. You can opt out at any time using the unsubscribe link in our emails.
E. Legal and compliance (legal obligation / legitimate interests)
-comply with legal obligations
-enforce our terms and policies
-respond to lawful requests and protect our rights
5) How we share personal information
We share personal information only as necessary to operate the Services:
-Shopify (our ecommerce platform/hosting provider)
-Payment processors (to process transactions)
-Shipping and logistics providers (to deliver orders)
-Service providers supporting website operations (IT, security, analytics, customer support tools)
We may also disclose information if required by law, or in connection with a business transaction (such as a restructuring), subject to applicable safeguards.
6) Shopify
Our store is hosted on Shopify, which processes personal information to provide and improve the Services. Shopify may process information in accordance with its own privacy practices and may store or process data in other countries. Shopify provides resources on GDPR and policy templates that merchants can customise.
7) Cookies and similar technologies
We and our service providers may use cookies and similar technologies to operate the site, remember preferences, understand performance, and help prevent fraud. You can control cookies through your browser settings and (where available) the site’s cookie tools.
8) International transfers
Where personal information is transferred outside the UK/EEA, we rely on recognised transfer mechanisms (such as standard contractual clauses or equivalent UK mechanisms) where required.
9) Data retention
We retain personal information only for as long as necessary for:
-fulfilling orders and providing the Services
-legal, tax, and accounting obligations
-resolving disputes and enforcing policies
-security and fraud prevention
10) Your rights (UK/EEA and other regions where applicable)
Depending on your location, you may have rights to:
-access your personal information
-correct inaccurate information
-request deletion (subject to legal requirements)
-restrict or object to certain processing
-data portability
-withdraw consent (where processing is based on consent)
To exercise rights, contact us at enquiries@nashinasu.com. We may need to verify your identity before responding.
11) Children
The Services are not intended for children, and we do not knowingly collect personal information from children.
12) Security
We take reasonable measures to protect personal information, but no method of transmission or storage is completely secure. Please avoid sending sensitive information through unsecured channels.
13) Third-party links
The site may link to third-party websites. We are not responsible for the privacy practices of third parties.
14) Complaints
If you have concerns about how we handle personal information, contact us first at enquiries@nashinasu.com. You may also have the right to lodge a complaint with the UK Information Commissioner’s Office (ICO).