Legal
Privacy policy
Last updated 12 September 2026
1. Who we are
Nailo is operated by MDM Family s.r.o., Slovakia (“Nailo”, “we”, “us”). We are the data controller for the personal data described in this policy. Contact: mdmfamily.sro@gmail.com.
2. What we collect
- Order data. When you buy, checkout runs on Shopify. Shopify collects your name, email, shipping and billing address, phone number, and payment details (we never see full card numbers). We receive the order details needed to ship and support your purchase.
- Contact messages. Your name, email and message when you write to us through the contact form or by email.
- Newsletter. Your email address when you join the list.
- Usage data. With your consent, analytics and advertising tools collect device, browser and page-interaction data through cookies (see section 4). Without consent, only strictly necessary cookies are used.
3. Why we use it and on what legal basis
- To process and deliver your order, handle returns and warranty claims: performance of a contract.
- To answer your messages: legitimate interest in customer support, or performance of a contract.
- To send the newsletter: your consent. Unsubscribe at any time using the link in every email.
- To measure and improve the site and our advertising: your consent given through the cookie banner.
- To keep records required by tax and accounting law: legal obligation.
4. Cookies
Strictly necessary storage keeps the site working: for example, your cookie choice (stored by the cookie banner) and Shopify’s checkout session.
Analytics and advertising cookies (Google Analytics, Meta Pixel, TikTok Pixel) are loaded only after you choose “Accept” in the cookie banner. They help us understand which pages and ads bring people here. You can change your choice at any time via “Manage preferences” in the cookie banner, or by clearing your browser cookies.
5. Who we share data with
- Shopify Inc.: store platform, checkout and payments.
- Payment providers (Shopify Payments, PayPal, Apple Pay, Google Pay): payment processing.
- Fulfilment partners and carriers: your name, address and phone number so your order can be packed, shipped and delivered. Some partners are located outside the EU.
- Email service provider: sending order updates and the newsletter.
- Google, Meta, TikTok: only if you consent to analytics and advertising cookies.
We do not sell your personal data.
6. International transfers
Some providers process data outside the European Economic Area. Where that happens we rely on the European Commission’s adequacy decisions or Standard Contractual Clauses.
7. How long we keep it
Order records: as long as required by tax and accounting law (typically 10 years in Slovakia). Contact messages: up to 2 years after the last exchange. Newsletter: until you unsubscribe. Analytics data: according to the retention settings of the tool, at most 26 months.
8. Your rights
Under the GDPR you can ask for access to your data, correction, deletion, restriction, portability, and you can object to processing based on legitimate interest. You can withdraw consent at any time. To exercise a right, email mdmfamily.sro@gmail.com. You also have the right to complain to the Slovak Office for Personal Data Protection (Úrad na ochranu osobných údajov) or your local supervisory authority. If you are in California, you have similar rights under the CCPA, including the right to know and to delete.
9. Children
Our products are used on children, but our site and services are directed at adults. We do not knowingly collect personal data from anyone under 16.
10. Changes
We may update this policy. The date at the top shows the current version. Material changes will be announced on the site.
11. Contact
Questions about privacy: mdmfamily.sro@gmail.com or the contact form.