Last updated: October 9, 2025

1. Controller

Nostalys (the “Company”).

Contact: contact@nostalysmemory.com

2. Scope

This Privacy Policy explains what personal data we collect, why we collect it, how we use and share it, how long we retain it, and the rights you have under applicable law. This policy applies to data collected when you place an order, contact customer service, or otherwise interact with our store and services.

3. Data we collect

We only collect the personal data strictly necessary to process and fulfil orders and to provide related customer service. This may include:

• Contact and identity data: name, shipping address, billing address, email, phone number.
  
• Transaction data: order details, payment confirmation, invoice.
  
• Customer service communications: messages you send us about orders or requests.
  

We do not collect personal data for profiling or marketing unless you expressly opt in.

4. Purposes and legal bases

We process personal data for the following purposes and legal bases:

• Order fulfilment and payment processing (performance of the sales contract).
  
• Shipping and returns management (performance of the sales contract).
  
• Customer support and dispute resolution (legitimate interest and contract performance).
  
• Compliance with legal obligations (e.g., accounting, tax).
  

Where we ask for consent (for example to send marketing), we will process data only after you opt in and you may withdraw consent at any time.

5. Recipients and disclosures

We share personal data only with parties necessary to deliver services: payment processors, shipping carriers, payment card networks, and trusted service providers who act on our behalf (e.g., hosting, IT operations, order fulfilment). These parties process data under contract and only for the purposes listed above. We do not sell personal data.

6. International transfers

Personal data may be transferred to service providers located outside your country. When transfers occur, we rely on appropriate safeguards (contractual protections or other lawful mechanisms) to ensure an adequate level of protection.

7. Data retention

We retain personal data only as long as necessary to fulfill the purpose it was collected for, to comply with legal obligations (for example tax or accounting requirements), or to resolve disputes. When data is no longer required it is securely deleted or anonymized.

8. Security

We implement organizational and technical measures designed to protect personal data against unauthorized access, loss, alteration or disclosure. No system is completely secure. If a security incident affecting personal data occurs we will act in accordance with legal requirements.

9. Your rights

Subject to applicable law you may have the right to: access, correct, delete or restrict processing of your personal data; obtain a copy in a portable format; object to processing; and withdraw consent where processing is based on consent. To exercise your rights, or for questions, contact contact@nostalys.com. We may request information to verify your identity prior to responding. If you remain dissatisfied you may lodge a complaint with your local data protection authority.

10. Children

Our services are not intended for children. We do not knowingly collect personal data from minors.

11. Changes to this policy

We may update this Privacy Policy from time to time. If changes are material we will post the updated policy and a revised “Last updated” date.