Privacy Policy

Tnailhour (“we,” “us,” or “our”) operates the website tnailhour.com (the “Site”). We are committed to protecting the privacy and security of our customers and site visitors. This Privacy Policy explains how we collect, use, share, and safeguard your personal information when you visit our Site, make a purchase, or interact with our services.

If you have any questions about this Privacy Policy, please contact us at:

• Email: [email protected]

1. Information We Collect

We collect personal information that you voluntarily provide to us, as well as information automatically collected through your use of our Site.

1.1 Information You Provide to Us

When you interact with our Site, we may collect the following categories of personal information:

• Order Information: When you make a purchase, we collect your name, billing address, shipping address, email address, phone number, and payment information (such as credit/debit card details). We use this information to process and fulfill your orders, communicate with you about your purchase, and provide customer support.

• Account Information: If you create an account on our Site, we collect your username, password, and purchase history to manage your account preferences and facilitate future purchases.

• Communications: When you contact us via email, live chat, or contact forms, we collect the information you provide, including your name, email address, and the content of your communication.

• Marketing Information: If you subscribe to our newsletter or marketing communications, we collect your email address and marketing preferences.

1.2 Information Automatically Collected (Device & Usage Information)

When you visit our Site, we automatically collect certain information about your device and browsing activity through cookies, web beacons, and similar tracking technologies:

• Device Information: IP address, browser type and version, time zone setting, operating system, device type, and screen resolution.

• Usage Information: Pages you view, products you view or add to cart, search queries, referring/exit pages, clickstream data, and timestamps of your interactions.

• Location Information: Approximate geographic location derived from your IP address.

We use this automatically collected information to improve our Site’s functionality, analyze trends, administer the Site, track user movements, and gather demographic information for internal purposes such as analytics and marketing optimization.

2. How We Use Your Information

We use your personal information for the following business and commercial purposes:

• Order Processing & Fulfillment: To process payments, fulfill and ship orders, send order confirmations, and provide customer support.

• Account Management: To create and manage your account, maintain your purchase history, and personalize your shopping experience.

• Marketing & Communications: To send you promotional emails, newsletters, and special offers (where you have consented or as permitted by law). You may opt out of marketing communications at any time.

• Site Improvement & Analytics: To analyze how users interact with our Site, improve product offerings, optimize user experience, and develop new features.

• Legal Compliance & Security: To comply with applicable laws and regulations, respond to legal requests, prevent fraudulent transactions, protect against unauthorized access, and maintain the security of our Site.

• Customer Service: To respond to your inquiries, provide technical support, and address your concerns.

Where required by applicable law (e.g., under GDPR/UK GDPR), we rely on specific lawful bases to process your personal information, including: (i) performance of a contract (e.g., processing your order); (ii) legitimate interests (e.g., improving our Site, preventing fraud, direct marketing to existing customers); (iii) consent (e.g., sending marketing emails, placing non-essential cookies); and (iv) compliance with legal obligations (e.g., retaining transaction records for tax purposes).

3. Sharing Your Information

We do not sell your personal information to third parties. We may share your personal information in the following circumstances:

• Service Providers: We share your information with third-party service providers who perform services on our behalf, such as payment processing, order fulfillment, shipping carriers, email marketing platforms, analytics providers (e.g., Google Analytics), and IT hosting services. These providers are contractually obligated to process your information only in accordance with our instructions and applicable data protection laws.

• Legal Compliance: We may disclose your information if required to do so by law or in response to valid requests by public authorities (e.g., a court order, subpoena, or government investigation).

• Business Transfers: In the event of a merger, acquisition, reorganization, bankruptcy, or sale of all or a portion of our assets, your personal information may be transferred as part of that transaction. We will notify you of any such change in ownership or control of your personal information.

• Protection of Rights: We may disclose your information when we believe in good faith that disclosure is necessary to protect our rights, enforce our Terms of Service, protect your safety or the safety of others, investigate fraud, or respond to a government request.

4. International Data Transfers

When we transfer personal information from the European Economic Area (EEA), the United Kingdom, or Switzerland to countries that have not been deemed by the European Commission or UK authorities as providing an adequate level of data protection, we rely on appropriate safeguards, including:

• Standard Contractual Clauses (SCCs): We implement the European Commission‘s approved Standard Contractual Clauses with our data processors and sub-processors, which contractually obligate recipients to protect your personal information to EU data protection standards.

• UK Addendum to the SCCs: For transfers from the UK, we implement the UK International Data Transfer Agreement (IDTA) or the UK Addendum to the EU SCCs as applicable.

In accordance with the requirements established by the Court of Justice of the European Union in the Schrems II decision, we conduct Transfer Risk Assessments (TRA/DTIA) for each international data transfer to evaluate and address any risks posed by the legal environment of the destination country, implementing supplementary measures where necessary.

By using our Site and providing your personal information, you acknowledge that your information may be transferred to and processed in countries outside your own, which may have different data protection laws than your country of residence. We take all reasonable steps to ensure that your data is treated securely and in accordance with this Privacy Policy and applicable data protection laws.

5. Data Retention

We retain your personal information only for as long as necessary to fulfill the purposes for which it was collected, including for the purposes of satisfying any legal, accounting, or reporting requirements.

The retention period for specific categories of information is as follows:

• Order Information: Retained for 3 years to comply with tax and accounting laws (typically 6–7 years depending on jurisdiction), and to manage customer service and warranty claims.

• Account Information: Retained for as long as you maintain an active account with us. Upon account deletion, we will delete or anonymize your account information within 15 days, except where we are required to retain certain information for legal compliance.

• Marketing Information: Retained until you unsubscribe from our marketing communications or request deletion of your data.

• Device & Usage Information: Retained for 12 months for analytics and security purposes.

When we no longer need to retain your personal information, we will securely delete or anonymize it. For more information on our data retention practices, please contact us using the details provided above.

6. Data Security

We implement reasonable and appropriate technical and organizational measures to protect your personal information from unauthorized access, loss, misuse, alteration, or disclosure. These measures include:

• Encryption: We use Secure Socket Layer (SSL) technology to encrypt sensitive information transmitted during checkout and payment processing.

• Access Controls: Access to personal information is restricted to authorized personnel who need the information to perform their job duties (e.g., customer service and order fulfillment).

• Secure Hosting: Our Site is hosted on Podean, which employs industry-standard security measures, including firewalls and secure server infrastructure.

• Regular Monitoring: We regularly review and update our security practices to safeguard your information.

7. Your Privacy Rights

Depending on your jurisdiction of residence, you may have certain rights regarding your personal information. We are committed to respecting these rights and responding to your requests in accordance with applicable law.

7.1 Rights for EEA, UK, and Switzerland Residents (GDPR/UK GDPR)

If you are located in the European Economic Area, the United Kingdom, or Switzerland, you have the following rights under the GDPR or UK GDPR:

• Right to Access: You have the right to request confirmation of whether we are processing your personal information and, if so, to request access to that information, including details about the categories of data processed, the purposes of processing, and any third parties with whom we have shared your data.

• Right to Rectification: You have the right to request correction of inaccurate or incomplete personal information we hold about you.

• Right to Erasure (“Right to be Forgotten”): You have the right to request deletion of your personal information where there is no compelling reason for us to continue processing it (e.g., where the data is no longer necessary for the purposes for which it was collected, or where you withdraw your consent).

• Right to Restrict Processing: You have the right to request that we restrict processing of your personal information in certain circumstances (e.g., while we verify the accuracy of your data or assess the lawfulness of processing).

• Right to Data Portability: You have the right to receive your personal information in a structured, commonly used, and machine-readable format and to transmit that information to another data controller, where technically feasible.

• Right to Object: You have the right to object to the processing of your personal information based on our legitimate interests (including direct marketing). Where you object to direct marketing, we will cease processing your information for that purpose.

• Right to Withdraw Consent: Where we rely on your consent as the lawful basis for processing (e.g., for marketing emails or non-essential cookies), you have the right to withdraw your consent at any time. Withdrawal of consent does not affect the lawfulness of processing based on consent before its withdrawal.

To exercise any of these rights, please contact us at [email protected]. We will respond to your request without undue delay and within one month (which may be extended by two further months where necessary, taking into account the complexity and number of requests).

7.2 Rights for California Residents (CCPA/CPRA)

If you are a resident of California, you have the following rights under the California Consumer Privacy Act (CCPA), as amended by the California Privacy Rights Act (CPRA):

• Right to Know / Access: You have the right to request that we disclose the following information covering the 12-month period preceding your request: (i) categories of personal information we have collected about you; (ii) categories of sources from which your personal information was collected; (iii) our business or commercial purpose for collecting or sharing your personal information; (iv) categories of third parties with whom we share your personal information; and (v) the specific pieces of personal information we have collected about you.

• Right to Delete: You have the right to request deletion of personal information we have collected from you, subject to certain exceptions (e.g., where we need the information to complete a transaction, detect security incidents, or comply with legal obligations).

• Right to Correct: You have the right to request correction of inaccurate personal information we hold about you.

• Right to Opt-Out of Sale/Sharing: We do not sell your personal information as defined by the CCPA/CPRA. If we engage in “sharing” of personal information for cross-context behavioral advertising, we will provide you with a “Do Not Sell or Share My Personal Information” link. As of the effective date of this Privacy Policy, we do not engage in such activities.

• Right to Limit Use of Sensitive Personal Information: We do not collect sensitive personal information as defined by the CCPA/CPRA (e.g., Social Security number, driver‘s license number, precise geolocation, genetic data, etc.).

• Right to Non-Discrimination: You have the right not to receive discriminatory treatment for exercising any of your CCPA/CPRA rights. We will not deny goods or services, charge different prices, or provide a different level of service to you for exercising your privacy rights.

To exercise your California privacy rights, please contact us at [email protected].

Authorized Agent: You may designate an authorized agent to submit requests on your behalf. The authorized agent must provide proof of your written permission to act on your behalf, and we may require you to verify your identity directly with us.

Verification Process: We may need to verify your identity before processing your request. We will ask you to provide certain information to match against our records and may require additional verification for sensitive requests.

Shine the Light: Under California‘s “Shine the Light” law (Civil Code Section 1798.83), California residents may request information about our disclosure of personal information to third parties for their direct marketing purposes. We do not share personal information with third parties for their own direct marketing purposes without your consent.

7.3 Rights for Other Jurisdictions

Residents of other jurisdictions may have additional rights under their local privacy laws. We are committed to complying with all applicable privacy laws wherever our customers are located.

7.4 How to Exercise Your Rights

To exercise any of your privacy rights, please submit a request to:

• Email: [email protected]

We will respond to your request within the timeframes required by applicable law (typically 30 days for GDPR requests and 45 days for CCPA requests). In some cases, we may need to request additional information from you to verify your identity before processing your request, particularly for requests involving access to or deletion of your personal information.

8. Cookies and Tracking Technologies

Our Site uses cookies and similar tracking technologies to enhance your browsing experience, analyze Site traffic, and personalize content and advertisements.

8.1 What Are Cookies?

Cookies are small text files that are placed on your device (computer, smartphone, tablet) when you visit a website. Cookies are widely used to make websites work more efficiently and to provide information to website owners.

8.2 Types of Cookies We Use

We use the following categories of cookies on our Site:

• Strictly Necessary Cookies: These cookies are essential for the operation of our Site. They enable you to navigate the Site and use its core features, such as accessing secure areas, adding items to your cart, and completing checkout. These cookies do not require your consent.

• Functional Cookies: These cookies allow our Site to remember choices you make (such as your language preference or login information) and provide enhanced, more personalized features.

• Analytics/Performance Cookies: These cookies collect information about how visitors use our Site, such as which pages are visited most often, how users navigate between pages, and whether they receive error messages. We use this information to improve Site performance and user experience. These cookies require your consent.

• Targeting/Advertising Cookies: These cookies are used to deliver advertisements relevant to you and your interests. They may be set by us or by our advertising partners (such as Meta, Google). They require your consent.

8.3 Your Cookie Choices

You can configure your browser settings to refuse all or some cookies, or to alert you when cookies are being sent. Please note that if you disable or refuse cookies, some parts of our Site may become inaccessible or may not function properly.

9. Children‘s Privacy

Our Site is not intended for children under the age of [13 or 16, depending on jurisdiction], and we do not knowingly collect personal information from children. If you are a parent or guardian and believe that your child has provided personal information to us, please contact us immediately. If we become aware that we have collected personal information from a child without verification of parental consent, we will take steps to delete that information from our servers.

10. Third-Party Links

Our Site may contain links to third-party websites, products, or services that are not owned or controlled by us. This Privacy Policy does not apply to those third-party websites. We encourage you to review the privacy policies of any third-party websites you visit, as we are not responsible for the privacy practices or content of those websites.

11. Changes to This Privacy Policy

We reserve the right to update or modify this Privacy Policy at any time to reflect changes in our data practices, legal requirements, or operational needs. When we make material changes to this Privacy Policy, we will notify you by:

• Posting the updated Privacy Policy on our Site with a new “Last Updated” date;

• Sending an email notification to the email address associated with your account (if applicable);

• Displaying a prominent notice on our Site for a reasonable period before the changes take effect.

We encourage you to review this Privacy Policy periodically to stay informed about how we are protecting your personal information. Your continued use of our Site after any changes to this Privacy Policy constitutes your acceptance of the revised terms.

12. Contact Information

If you have any questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us at:

📧 Email: [email protected]
🕖 Customer Service: Mon‑Fri, 10:00–19:30 

Appendix: Data Collection Summary

For your convenience, the table below summarizes the categories of personal information we collect, the sources of that information, and the purposes for which it is used:

This Privacy Policy is intended to provide transparency regarding our data practices in compliance with applicable global privacy laws, including the GDPR (EU), UK GDPR, CCPA/CPRA (California), PIPEDA (Canada), and other relevant regulations.