This Privacy Policy explains how Nowhere Girl Collective collects, uses and protects personal information when you visit our website, place an order, join our mailing list, contact us or otherwise interact with us.

1. INFORMATION WE COLLECT
Depending on how you use the website, we may collect:
- your name;
- email address;
- billing and delivery address;
- telephone number, where provided;
- order and transaction information;
- correspondence you send to us;
- mailing-list preferences;
- technical information relating to your visit, such as device, browser, IP address and website usage information;
- information collected through cookies and similar technologies.
We do not directly store your full payment-card details. Payments are processed through the payment providers made available through our website.

2. HOW WE USE YOUR INFORMATION
We may use your personal information to:
- process and fulfil your orders;
- arrange payment, delivery, returns and refunds;
- communicate with you about an order;
- respond to enquiries;
- manage our mailing list;
- send newsletters or marketing communications where you have chosen to receive them;
- operate, maintain and improve our website;
- detect or prevent fraud, misuse or security issues;
- maintain financial and business records;
- comply with legal, tax and regulatory obligations.
We will not sell your personal information.

3. OUR LAWFUL BASIS FOR USING YOUR INFORMATION
Under UK data protection law, we must have a lawful reason for processing personal information.
Depending on the circumstances, we rely on:
Contract - where we need your information to process an order, take payment, deliver goods or otherwise fulfil our agreement with you.
Legal obligation - where we need to retain or use information to comply with tax, accounting, consumer or other legal requirements.
Legitimate interests - where necessary to operate and protect Nowhere Girl Collective, provide customer support, prevent fraud and improve our services, provided those interests do not override your rights.
Consent - where you have actively chosen to receive marketing communications or agreed to certain optional cookies or tracking technologies.
Where we rely on consent, you can withdraw it at any time.

4. MARKETING AND MAILING LISTS
If you subscribe to our mailing list, we may use your name and email address to send news, publication announcements, open calls, events and other Nowhere Girl Collective updates. You can unsubscribe at any time using the unsubscribe link included in our emails or by contacting us.

5. WHO WE SHARE INFORMATION WITH
We may share personal information only where necessary with trusted service providers involved in operating the website and fulfilling orders, such as:
- Squarespace and website-hosting providers;
- payment processors;
- postal and courier services;
- shipping and fulfilment providers;
- email and mailing-list platforms;
- analytics and website-service providers;
- accountants, professional advisers or regulatory authorities where required.
These providers may process information on our behalf or under their own privacy terms. We do not share customer information with unrelated third parties for them to market their own products or services.

6. INTERNATIONAL DATA TRANSFERS
Some of the services we use may store or process personal information outside the United Kingdom. Where personal data is transferred internationally, we take reasonable steps to ensure appropriate safeguards are in place as required by applicable data protection law.

7. HOW LONG WE KEEP INFORMATION
We keep personal information only for as long as reasonably necessary for the purpose for which it was collected.
For example:
- order and financial records may be retained for the period required by tax and accounting law;
- customer-service correspondence may be retained for as long as needed to resolve an issue and maintain appropriate records;
- mailing-list information is retained until you unsubscribe or ask us to remove it;
- website and analytics information may be retained according to the settings and retention periods of the relevant service providers.
We may retain limited information for longer where necessary to establish, exercise or defend legal claims or comply with legal obligations.

8. COOKIES
Our website may use cookies and similar technologies to:
- make the site function properly;
- remember preferences;
- enable checkout and payments;
- understand website traffic and performance;
- provide analytics or other optional functionality.
Some cookies are necessary for the website to operate. Other cookies may require your consent. Where required, you can manage non-essential cookies through the cookie controls provided on the website.

9. YOUR RIGHTS
Under UK data protection law, you may have rights relating to your personal information, including the right to:
- request access to information we hold about you;
- ask us to correct inaccurate information;
- ask us to delete information in certain circumstances;
- ask us to restrict how information is used;
- object to certain types of processing;
- request transfer of certain information;
- withdraw consent where processing is based on consent.
These rights are not absolute and may depend on the circumstances.
To make a request, contact us at dakota@nowheregirlcollective.com. We may need to verify your identity before responding.

10. SECURITY
We take reasonable steps to protect personal information against loss, misuse, unauthorised access or disclosure. However, no website, internet transmission or electronic storage system can be guaranteed to be completely secure.

11. CHILDREN
The Nowhere Girl Collective shop and mailing list are not specifically directed at children. We do not knowingly collect personal information from children where parental or guardian consent would be legally required.

12. LINKS TO OTHER WEBSITES
Our website may contain links to external websites. We are not responsible for the privacy practices of third-party websites, and you should review their privacy policies separately.

13. CHANGES TO THIS POLICY
We may update this Privacy Policy from time to time to reflect changes to our website, services or legal obligations. The latest version will always be available on this page.

14. QUESTIONS OR COMPLAINTS
If you have questions about how we use your personal information, please contact: dakota@nowheregirlcollective.com.

If you are unhappy with how your personal information has been handled, you also have the right to complain to the UK Information Commissioner's Office (ICO).