Privacy Policy

We greatly appreciate your interest in Nauaa. Protecting your personal data is our highest operational priority. You may browse our website without submitting any personal information. However, if you wish to place orders, subscribe to updates or use our customer support services, processing your personal details will be required. Where data processing is necessary and no legal basis exists, we will collect your explicit consent beforehand.

All personal data processing activities comply with the EU General Data Protection Regulation (GDPR) for UK customers, as well as applicable US federal and state privacy laws for American shoppers. This policy outlines what personal information we collect, how we use and store it, and all legal rights you hold as a data subject.

While we implement comprehensive technical and organizational security measures to protect your data, internet data transmission carries inherent security risks, and absolute data protection cannot be fully guaranteed. You may contact us via email as an alternative channel to share sensitive personal information.

Controller for all data processing activities under GDPR and global privacy regulations: Email: nauaacon@outlook.com Website: https://nauaa.com

For clarity, we define standard GDPR terminology used throughout this policy: a) Personal Data: Any information linked to an identified or identifiable natural person, including name, delivery address, email, phone number, location data, online identifiers and characteristics relating to your personal identity. b) Data Subject: Any individual whose personal data we process via our website. c) Processing: Any action performed on personal data, including collection, storage, editing, retrieval, sharing, restriction and permanent deletion. d) Restriction of Processing: Marking stored personal data to limit all future processing activities. e) Profiling: Automated analysis of personal data to evaluate personal preferences, behaviour or traits. f) Pseudonymisation: Processing data so it cannot be linked back to you without separate secure supplementary records. g) Controller: Nauaa, the party that determines why and how personal data is processed. h) Processor: Third-party service providers that process data on our behalf (logistics, payment providers, analytics tools). i) Recipient: Any party we share your personal data with. j) Third Party: Any entity outside of you, Nauaa, our data processors and authorized staff. k) Consent: Voluntary, specific, informed and clear agreement from you for us to process your personal data.

Nauaa’s website uses cookies – small text files saved to your device browser to improve site functionality and user experience. Unique cookie IDs allow our site to recognize returning visitors, save cart contents, remember login preferences and tailor product recommendations for our aircraft weathervanes.

You may disable cookie storage at any time via your browser settings, or delete existing cookies directly through your browser tools. Disabling cookies may limit full functionality of our website, including checkout and order tracking features.

Every visitor to our site generates anonymous server log data automatically collected by our system, including:

This anonymous data is used only to maintain website stability, optimize page content, defend against cyberattacks and compile anonymous traffic statistics. We never link log data to your personal identity, and all server logs are stored separately from customer order data.

You may create a registered customer account on our website. Any personal details you submit during registration are stored solely for order processing, customer service and internal business use. We may share essential delivery information with trusted logistics processors only to fulfill your aircraft weathervane orders.

You may opt in to our email newsletter to receive updates on new British & American aircraft weathervane designs, promotions and store announcements. We follow a strict double opt-in process: after you submit your email, a confirmation link will be sent to verify your subscription. We record your IP address and registration timestamp for legal anti-spam protection.

Collected contact data is only used for newsletter distribution. We will never sell or share your email address with external third parties. You may unsubscribe at any time via the unsubscribe link included in every newsletter, or update your subscription preferences within your customer account.

Our marketing emails contain invisible tracking pixels to measure open rates and link clicks, helping us optimize relevant aviation product updates for our audience. All tracking analytics data will be permanently deleted once you unsubscribe from emails.

Our website provides direct email and contact form channels for customer support. Any personal details you submit when contacting us (order number, name, shipping address) are stored exclusively to resolve your enquiry, and will not be shared with external third parties. Our 24-hour support team handles all customer data requests securely.

We offer a blog section where visitors may leave public comments about our handcrafted aircraft weathervanes. When you post a comment, your chosen display name, comment text and your device IP address will be stored. IP logging acts as a security safeguard against illegal, defamatory or infringing content. We will only release this stored data to official authorities if legally required.

We retain your personal data only for as long as required to complete the purpose for which it was collected, or to comply with mandatory legal retention periods under UK and US regulations. Once the storage purpose expires or legal retention windows close, your data will be securely blocked or fully erased automatically.

You may exercise all below rights at any time by contacting our support team via nauaacon@outlook.com: a) Right of Confirmation: Request confirmation whether we hold any of your personal data. b) Right of Access: Receive a full copy of all personal data we store about you, alongside full details of data processing purposes, recipients and storage timelines. c) Right to Rectification: Request correction of inaccurate or incomplete personal details. d) Right to Erasure (Right to be Forgotten): Request full permanent deletion of your data if it is no longer required, you withdraw consent, you object to processing, data was processed unlawfully, or deletion is required by law. e) Right to Restrict Processing: Request we pause all data processing activities under specific legal conditions (disputed data accuracy, unlawful processing, pending legal claims). f) Right to Data Portability: Receive your submitted personal data in a standard machine-readable format, or request direct transfer to another data controller where technically feasible. g) Right to Object: Object to data processing for marketing purposes or processing based on our legitimate business interests, citing your personal circumstances. We will cease processing unless we can prove overriding legal grounds to retain your data. h) Right to Contest Automated Decisions: We do not use fully automated decision-making or profiling that creates legal impacts on customers. If automated tools are used in limited cases, you may request human review of any outcome. i) Right to Withdraw Consent: Revoke any consent you previously granted for data processing at any time, without affecting processing completed before your withdrawal.

Our website embeds official Facebook and Instagram share/like buttons. When you visit our site while logged into your social media accounts, the platforms receive visitor traffic data linked to your social profile. You can stop this data transfer by logging out of Facebook/Instagram before browsing our site. Full platform privacy rules are available via Meta’s official privacy centre.

Pinterest share buttons on our site transmit page visit data to Pinterest when you are logged into your account. Log out of Pinterest before visiting us to prevent data sharing; review Pinterest’s public privacy policy for full details.

We use Google Analytics for anonymous website traffic analysis, Google Remarketing for relevant product advertising, and Google AdWords for paid search promotion. All IP addresses collected via analytics are anonymized to protect your identity. You may block Google cookie tracking permanently via Google’s official browser opt-out add-on, or adjust ad tracking preferences in your Google account settings. All Google data handling is governed by Google’s global privacy policy.

If you select PayPal during checkout, your essential order data (full name, delivery address, email, payment amount, IP address) will be shared with PayPal solely to complete payment processing and fraud prevention. PayPal may share limited data with credit reference agencies for identity verification. You may manage your PayPal data consent directly within your PayPal account dashboard.

We rely on the following legal grounds under GDPR to process your personal data:

Our core legitimate business interest is operating a transparent, reliable store for aviation decor customers across the UK and US.

Some personal data submission is required by tax and commercial law, or necessary to complete a sales contract with us. If you refuse to provide required order and delivery information, we cannot process or ship your aircraft weathervane order. Contact our support team if you wish to clarify which data fields are mandatory.

Nauaa does not utilise fully automated decision-making or customer profiling that creates binding legal or significant practical impacts on shoppers. All order, support and refund decisions are reviewed manually by our customer service team.

For data access, deletion, correction or privacy-related questions, reach our 24-hour support team at: Email: nauaacon@outlook.com