Privacy Policy

Who we are

Niia is the data controller for personal data collected through this website (niia.design). For any privacy matters, contact us at hello@niia.design.

What data we collect

When you submit the order form, we collect:

• Email address — required, for order confirmation and shipping updates.
• How you found Niia — optional, to understand our community better.
• What you plan to plant — optional, for curiosity. This data is never used for profiling or targeting.

Payment is collected at the time of ordering through a third-party payment processor. We do not store card details on our servers.

How we use your data

Your email address is used solely to:

• Send you an order confirmation and shipping updates.
• Notify you of any essential changes (delays, edition changes, etc.).

We do not send marketing emails, newsletters, or promotional material unless you separately opt in.

Legal basis for processing

We process your email address on the basis of contract performance (Article 6(1)(b) GDPR) — it is necessary to fulfil your order. Optional survey answers (discovery source and plant preference) are collected on the basis of consent (Article 6(1)(a) GDPR).

Data retention

We retain your email address for as long as necessary to fulfil your order. If you cancel your reservation or your order is complete, we will delete your data within 30 days of your request or within 12 months of the last transaction — whichever is sooner.

Third-party services

Form submissions are processed through Netlify Forms (Netlify, Inc., USA). Netlify is GDPR-compliant and acts as a data processor on our behalf. Their privacy policy is available at netlify.com/privacy.

If we use an email marketing platform (such as Klaviyo) to deliver shipping notifications, we will update this policy to reflect that. No such platform is currently active.

We use Google Fonts to render typefaces. Google may log your IP address when fonts are loaded. See Google's privacy policy.

Cookies and local storage

This site uses localStorage (a browser-side storage mechanism) to remember your day/night theme preference. This data never leaves your browser and is not sent to any server. We do not use tracking cookies, advertising cookies, or third-party analytics cookies.

If you enable Google Analytics via our admin panel, anonymised analytics data may be collected. You can opt out at any time using a browser extension such as the Google Analytics Opt-out Add-on.

Your rights under GDPR

If you are located in the European Economic Area (EEA), you have the following rights:

• Access — request a copy of the personal data we hold about you.
• Rectification — request correction of inaccurate data.
• Erasure — request deletion of your data ("right to be forgotten").
• Portability — receive your data in a structured, machine-readable format.
• Withdraw consent — opt out of the pre-order list at any time by emailing us.
• Lodge a complaint — contact your national data protection authority if you believe your rights have been violated.

To exercise any of these rights, email hello@niia.design. We will respond within 30 days.

Data transfers outside the EEA

Netlify is based in the United States. Data transfers are covered under the EU–US Data Privacy Framework. We only use processors who provide adequate safeguards for personal data.

Children's privacy

This site is not directed at children under 16. We do not knowingly collect personal data from minors. If you believe a minor has submitted data, contact us and we will delete it promptly.

Changes to this policy

We may update this policy as the service evolves. Material changes will be noted by updating the "Last updated" date at the top. We encourage you to review this page periodically.

Contact

For any privacy-related questions or requests:
hello@niia.design