Privacy policy

Last updated: 19 July 2026

Nylro is operated by Articope Ltd (Company No. 13077351), registered in England and Wales ("we", "us", "our"). We operate this store and website, including all related information, content, features, tools, products and services, in order to provide you, the customer, with a curated shopping experience (the "Services"). Nylro is powered by Shopify, which enables us to provide the Services to you.

This Privacy Policy describes how we collect, use, and disclose your personal information when you visit, use, or make a purchase using the Services or otherwise communicate with us. For the purposes of UK data protection law (including the UK GDPR and the Data Protection Act 2018), the data controller is Articope Ltd. If there is a conflict between our Terms of Service and this Privacy Policy, this Privacy Policy controls with respect to the collection, processing, and disclosure of your personal information.

Personal Information We Collect or Process

"Personal information" means information that identifies or can reasonably be linked to you. It does not include anonymised or de-identified data. Depending on how you interact with the Services, we may collect:

  • Contact details — name, billing and shipping address, phone number, email address.
  • Financial information — payment card details, transaction details, payment confirmations. Full card numbers are processed by our payment providers and are never stored by us.
  • Account information — username, password, preferences and settings.
  • Transaction information — items you view, add to cart, purchase, return or cancel, and your order history.
  • Communications — the content of messages you send us, for example customer support enquiries.
  • Device information — device, browser, IP address and other unique identifiers.
  • Usage information — how and when you interact with the Services.

Where We Collect Personal Information From

  • Directly from you — when you place an order, create an account, or contact us.
  • Automatically — from your device via cookies and similar technologies when you use the site.
  • From our service providers — such as payment, analytics, and delivery partners acting on our behalf.

How We Use Your Personal Information

  • Providing the Services — processing payments, fulfilling and shipping orders, handling returns and refunds, managing your account, sending order notifications, and remembering your preferences. This processing is necessary to perform our contract with you.
  • Marketing and advertising — sending promotional emails and showing you relevant advertising, including based on items you viewed or purchased. You can unsubscribe from marketing emails at any time using the link in each email.
  • Security and fraud prevention — authenticating accounts, securing payments, and detecting or investigating fraudulent or malicious activity. Keep your account credentials confidential; do not share your password with anyone.
  • Communicating with you — providing customer support and responding to your enquiries.
  • Legal compliance — complying with applicable law, responding to valid legal process, and enforcing our terms and policies.

How We Disclose Personal Information

We may share personal information with:

  • Shopify and service providers performing services on our behalf — payment processing, IT, analytics, customer support, cloud storage, fulfilment and shipping.
  • Business and marketing partners to provide advertising services. These partners use your information in accordance with their own privacy notices. You may have the right to opt out of targeted advertising based on your activity across different websites.
  • Third parties at your direction — for example couriers delivering your order, or social media platforms you choose to interact with.
  • Legal and business circumstances — in connection with a business transaction such as a merger, to comply with legal obligations, to enforce our terms, or to protect our rights and the rights of others.

We do not sell your personal information.

Relationship with Shopify

The Services are hosted by Shopify, which collects and processes personal information about your use of the Services in order to provide and improve them. Information you submit may be transmitted to and shared with Shopify and third parties located outside your country. We also use certain Shopify enhanced features that draw on data from your interactions with our store, other merchants, and Shopify; for those features, Shopify is responsible for the processing of your personal information, including responding to rights requests. Learn more at the Shopify Consumer Privacy Policy (https://www.shopify.com/legal/privacy/app-users) or exercise your rights via the Shopify Privacy Portal (https://privacy.shopify.com/en).

Third-Party Websites and Links

The Services may link to websites operated by third parties. We are not responsible for the privacy or security of those sites; review their policies before providing personal information. Information you share on public or social platforms may be viewable by others.

Children's Data

The Services are not intended for children, and we do not knowingly collect personal information from children under 18. If you are a parent or guardian of a child who has provided us with personal information, contact us using the details below and we will delete it.

Security and Retention

No security measure is perfect and we cannot guarantee absolute security; avoid sending sensitive information through insecure channels. We retain personal information only as long as needed to provide the Services, comply with legal obligations (for example, order and payment records are kept for 6 years for tax purposes), resolve disputes, and enforce our agreements. Account data is retained while your account is active and deleted or anonymised on verified request.

Your Rights

Under UK data protection law you have the right to:

  • Access — request a copy of the personal information we hold about you.
  • Rectification — ask us to correct inaccurate information.
  • Erasure — ask us to delete your information, subject to legal retention requirements.
  • Portability — receive your information in a portable format.
  • Objection and restriction — object to or restrict certain processing, including direct marketing at any time.
  • Withdraw consent — where processing is based on consent, withdraw it at any time without affecting prior processing.

To exercise any of these rights, email contact@nylro.com. We may need to verify your identity before acting on a request, and we will respond within the timeframes required by law (normally one month). You may appoint an authorised agent to act for you, subject to proof of authorisation. We will never discriminate against you for exercising your rights.

Complaints

If you have a complaint about how we handle your personal information, contact us first at contact@nylro.com and we will respond within 1 business day. You also have the right to lodge a complaint with the UK's supervisory authority, the Information Commissioner's Office (ICO) — ico.org.uk. If you are in the EEA, you may contact your local data protection authority.

International Transfers

We may transfer, store and process your personal information outside the UK. Where we transfer personal information out of the UK or the EEA, we rely on recognised safeguards such as the UK International Data Transfer Agreement or the European Commission's Standard Contractual Clauses, unless the destination country has been deemed to provide an adequate level of protection.

Changes to This Privacy Policy

We may update this Privacy Policy from time to time. We will post the revised version on this page, update the "Last updated" date, and provide notice where required by law.

Contact

Email: contact@nylro.com
Phone: +44 7537177410
Address: 15 Camden Passage, London N1 8EA, United Kingdom
Data controller: Articope Ltd (Company No. 13077351), registered in England and Wales.