Privacy Policy

Policy updated on Jul 17, 2026

 

Thank you for using our services (the “Services”)! We wrote this policy to help you (the “User”) understand what data (some of which can be “Personal Data” as defined by Privacy Laws) we collect, how we use it, and what choices you have. Because we’re an Internet company, some of the concepts below are a little technical, but we’ve tried our best to explain things in a simple and clear way, plus you are welcome to contact us to receive any further explanation.

The data controller for the personal data described in this policy is:
Nembol Inc.
1209 Orange Street
19801 Wilmington DE, USA
Email: hello@nembol.co.uk

Where Nembol processes personal data relating to your customers or buyers on your behalf as part of the Services (for example, order data received through the e-commerce channels you connect to Nembol), Nembol acts as a processor, and you (as our User) are the controller of that data. That relationship is governed by our Data Processing Agreement, incorporated into our Terms of Service.

 

What data do we collect?

Nembol collects the following data:

1. Personal identification information (email address, your name and phone number if you provide them)
2. The online channels you use (such as Amazon, eBay, Pinterest, etc.) and your username on such channels
3. The product you retail including their pictures, prices, codes, available quantities, and category
4. The Internet Protocol (IP) address from which your connection takes place
5. The orders you receive on the e-commerce channels you connect to Nembol, including products ordered and buyers’ data

 

How do we collect data?

We collect data in three ways:

1. When you directly give data to us or give us permission to obtain it. When you sign up for or use our products, you voluntarily give us certain information. This include your email address and may include your name, texts, comments, your product photos, descriptions, title, prices, categories, and any other information you provide us. If you’re using Nembol on your mobile device, you can also choose to provide us with location data.
2. You also may give us permission to access your information in other services. For example, you may link your Etsy or Shopify account to Nembol, which may allow us to obtain some further information from those accounts as per your settings or their privacy policies.
3. We also get technical information when you use our products or use websites or apps that have Nembol features. These days, whenever you use a website, mobile application, or other Internet service, there’s certain information that almost always gets created and recorded automatically. The same is true when you use our products. Here are some of the types of information we collect:

• Channel Data. When you use Nembol to publish a product on one or more channels, our servers automatically record information (“Channel Data”) including information that your device sends and information the channels send back to Nembol or to you through Nembol. This data may include your product data, the visits or likes your product receives on the channel, the date and time of your request, the orders you received on that channel with order data, how you used Nembol, and more, along as channels and your use of channels and Nembol evolve. To learn more about, and control, what information each of your connected channels makes available to Nembol, please check your own settings and policies in each channel. In most cases, channels provide you a list of the information you may or may not make available to Nembol at the moment you connect Nembol with them.
• Log Data. When you use Nembol or go to a webpage, our servers automatically record information (“log data”) including information that your browser sends whenever you visit a website or your mobile app sends when you’re using it. This log data may include your Internet Protocol address, the address of the webpages you visited that had Nembol features, browser type and settings, the date and time of your request, how you used Nembol, and cookie data.
• Cookie data. Depending on how you’re accessing our products, we may use “cookies” (a small text file created in your browser and sent by your computer each time you visit our website, unique to your Nembol account and your browser), or similar technologies to record log data. When we use cookies, we may use “session” cookies (that last until you close your browser) or “persistent” cookies (that last until you or your browser delete them). For example, we may use cookies to store your language preferences or other Nembol settings so you don’t have to set them every time you visit Nembol. Some of the cookies we use are associated with your Nembol account (including personal information about you, such as the email address you gave us), and other cookies are not.
• Device Information. In addition to log data, we may also collect information about the device you’re using Nembol on, including what type of device it is, what operating system is on it, some device settings, unique device identifiers, and crash data. Whether we collect some or all of this information often depends on what type of device you’re using and its settings. For example, different types of information are available depending on whether you’re using a Mac or a PC, or an iPhone or an Android phone. To learn more about what information your device makes available to us, please also check the policies of your device manufacturer or software provider.

Nembol does not collect nor Process your payment information.

 

How do we use the data we collect?

We use your data for the following purposes. If you are located in the European Union, the United Kingdom, or Switzerland, we also indicate below the legal basis under GDPR (or the equivalent UK GDPR / Swiss FADP) for each purpose; this legal basis framework does not apply to users located elsewhere, including the United States.

• To process your order and manage your account (including invoicing and payments) — legal basis: performance of a contract, Art. 6(1)(b) GDPR.
• To connect your Nembol account with the online channels you use — legal basis: performance of a contract, Art. 6(1)(b) GDPR.
• To email you about product updates and information relevant to your use of the Services — legal basis: performance of a contract, Art. 6(1)(b) GDPR, or our legitimate interest in keeping you informed, Art. 6(1)(f) GDPR.
• To send you marketing communications you’ve opted in to — legal basis: your consent, Art. 6(1)(a) GDPR, which you may withdraw at any time.
• To improve, develop, and secure our products — legal basis: our legitimate interest in maintaining and improving the Services, Art. 6(1)(f) GDPR.
• To respond to your questions or comments — legal basis: performance of a contract or our legitimate interest in providing support, Art. 6(1)(b)/(f) GDPR.
• To comply with legal obligations (e.g., responding to lawful requests from public authorities) — legal basis: compliance with a legal obligation, Art. 6(1)(c) GDPR.

The information we collect may be “personally identifiable” (meaning it can be used to specifically identify you as a unique person) or “non-personally identifiable” (meaning it can’t be used to specifically identify you). We use both types of information, and combinations of both types, as described above.

 

Partners we work with

Nembol shares your data with partner companies exclusively to enable the correct functioning of Nembol products and services, or to advertise our products and services. Nembol does not sell or otherwise trade your data. The legal basis for sharing with each partner (for EU/UK/Swiss users) is noted below:

• Our payment processor — manages payments on our behalf, acting as an independent controller for that data; Nembol does not access, store, or process this data. Legal basis: performance of a contract, Art. 6(1)(b) GDPR.
• Our CRM provider — acting as our processor, handles dialogues and calls when you engage with our Customer Support team. Legal basis: performance of a contract, Art. 6(1)(b) GDPR.
• Our email delivery provider — acting as our processor, ensures deliverability of email messages we send you. Legal basis: performance of a contract, Art. 6(1)(b) GDPR, or legitimate interest, Art. 6(1)(f) GDPR.
• Our product analytics platform — acting as our processor, we use it to understand how the Services are used in order to improve them. We do not send this partner your name or email address, but a pseudonymous account identifier, your IP address, and usage and session data, including session recordings. A pseudonymous identifier does not name you, but it can be linked back to your account, so we treat it as personal data. Session recordings mask all rendered on-screen text before it leaves your browser, not only form-input fields, and we do not record the contents of network requests. Legal basis: your consent, Art. 6(1)(a) GDPR and Art. 5(3) ePrivacy, obtained via our cookie consent mechanism.
• Cloudflare (Turnstile) — acting as our processor, helps protect account sign-up and login from automated abuse. When you create an account or sign in, Turnstile may collect technical information about your device and browser to verify you are human. This processing is also governed by Cloudflare’s own Privacy Policy and Turnstile Privacy Addendum. Legal basis: our legitimate interest in the security of the Services, Art. 6(1)(f) GDPR. Cloudflare Privacy Policy → https://www.cloudflare.com/privacypolicy/ Turnstile Privacy Addendum → https://www.cloudflare.com/turnstile-privacy-policy/

We use analytics and website tools (e.g., Google Analytics) that may collect non-identifying session and usage data to help us understand site traffic. These tools do not receive personal data such as your name, email, or account information.

How do we store your data?

We store your data with our cloud-service supplier Hetzner Online GmbH, headquartered in Germany, European Union. This is not a partner with whom we share your data, rather a supplier company providing us with computing server services. This guarantees you that the data we collect are protected with security precautions constantly updated by a professional supplier.

 

How long do we keep your data?

We keep your data only for as long as necessary for the purposes described in this policy, or as required by law. Retention periods differ depending on the type of data:

• Invoicing and payment records — 10 years, in accordance with statutory accounting and tax record-keeping obligations.
• Account and profile data (name, email, phone number, username on connected channels) — for as long as your account remains active, plus 90 days after you cancel your Nembol subscription, to allow for account recovery and to address potential legal claims.
• Product data you upload — retained as described in our Terms and Conditions, for as long as your products remain listed or as otherwise specified there.
• Order and buyer data received via connected e-commerce channels — deleted or anonymized within 90 days after you cancel your Nembol subscription, after which anonymized data may be retained for analytics purposes.
• Log data, IP addresses, and device information — retained for 12 months, after which it is aggregated and anonymized so it can no longer identify you, and may be retained in that anonymized form for analytics purposes.
• Cookies — session cookies are deleted when you close your browser; persistent cookies are retained for the period specified in our cookie consent tool.
• Session recordings and product analytics data — retained for 90 days.

Once the applicable retention period has expired, we will delete or anonymize your data, unless you have expressly asked us to delete it sooner, which is always among your rights.

 

Marketing

You may explicitly opt-in for Nembol newsletter on our nembol.com website. In such case, Nembol will use your email address to write you periodically with e-commerce tips and other industry news we believe useful for you.

If you haven’t explicitly opted-in for Nembol newsletter, we will contact you via email exclusively to provide you with information about improvements, integrations, new functions, or maintenance of the Nembol product or products you subscribed to.

Nembol will not send you information about products or services of other companies, nor will we sell or trade your email address with third-party companies. Never.

You have the right at any time to stop Nembol from contacting you for marketing purposes. If you no longer wish to be contacted for marketing purposes, please click the opt-out button in the most recent newsletter you received from us.

 

What choices do you have about your data?

Our goal is to give you simple and meaningful choices over your data. If you use Nembol or have a Nembol account, many of the choices you have on Nembol are built directly in to the product or your account settings. For example, you can:

• Access and change data in your profile page at any time.
• Link or unlink your Nembol account from an account on another service.
• Close your account at any time. When you close your account, we’ll deactivate it but we may retain archived copies of your data as required by law or for legitimate business purposes (including to help address fraud and spam) and we will retain the data of products that you uploaded in our databases as per our Terms and Conditions.

In addition to what above, you may have choices available to you through the device or software you use to access Nembol. For example:

• The browser you use may provide you with the ability to control cookies or other types of local data storage.
• Your mobile device may provide you with choices around how and whether location or other data is shared with us.

To learn more about these choices, please see the information provided by the device or software provider.

 

What are your data protection rights?

Nembol would like to make sure you are fully aware of all of your data protection rights. Every user is entitled to the following:

• The right to access. You have the right to request Nembol for copies of your personal data. We may charge you a small fee for this service, according to the Law.
• The right to rectification. You have the right to request that Nembol corrects any information you believe is inaccurate. You also have the right to request Nembol to complete the information you believe is incomplete.
• The right to erasure. You have the right to request that Nembol erases your personal data, under certain conditions.
• The right to restrict processing. You have the right to request that Nembol restricts the processing of your personal data, under certain conditions.
• The right to object to processing. You have the right to object to Nembol’s processing of your personal data, under certain conditions.
• The right to data portability. You have the right to request that Nembol transfers the data that it has collected to another organization, or directly to you, under certain conditions.
• The right to lodge a complaint. If you believe Nembol has not adequately addressed your concerns, or that our processing of your personal data infringes applicable data protection law, you have the right to lodge a complaint with your local data protection supervisory authority. For users in the EU, this is the data protection authority of your EU member state of residence, place of work, or the place of the alleged infringement. For users in the UK, this is the Information Commissioner’s Office (ICO). For users in Switzerland, this is the Federal Data Protection and Information Commissioner (FDPIC).

If you make a request, we have one month to respond to you. If you would like to exercise any of these rights, please contact us at our email: hello@nembol.co.uk

 

How do we share the data we collect?

Nembol is a tool people use to digitalize their products and display them online. When you upload a new product using Nembol, anyone can view it. You may also provide us with profile page information that anyone can view. The other limited instances where we may share your personal information include:

• When we have your instruction to do so. This includes sharing information with the online channels you connect to your Nembol account — such as Amazon, eBay, Pinterest, Etsy, Instagram, or Shopify — when you choose to publish your products through them. These channels act as independent controllers of any data you share with them, in accordance with their own privacy policies, not as Nembol’s processors.
• We may employ third party companies or individuals to process personal information on our behalf, acting as our processors, based on our instructions and in compliance with this Privacy Policy — see “Partners we work with” above. In addition, some of the information we request may be collected by third party providers on our behalf.
• If we believe that disclosure is reasonably necessary to comply with a law, regulation or legal request; to protect the safety, rights, or property of the public, any person, or Nembol; or to detect, prevent, or otherwise address fraud, security or technical issues.
• We may engage in a merger, acquisition, bankruptcy, dissolution, reorganization, or similar transaction or proceeding that involves the transfer of the information described in this Policy.
• We may also share aggregated or non-personally identifiable information with our partners or others.

 

Where we send the data you provide us

Nembol is a US corporation. Most of the infrastructure we use to provide the Services — including our hosting provider and our product analytics platform — is based in the European Union, and data processed through these providers does not leave the EU/EEA.
Where we do use providers based outside the EU/EEA or UK, we take steps to ensure your data receives an adequate level of protection, using mechanisms recognized under GDPR — such as the European Commission’s Standard Contractual Clauses, an applicable adequacy decision, or, where relevant, Nembol’s own certification under a recognized transfer framework. We will update this section to reflect specific safeguards as our vendor arrangements are finalized.

 

Our Policy on Children’s Information

Nembol is not directed to users under 18 years of age. If you learn that your minor child has provided us with information without your consent, please contact us.

 

Privacy policies of other websites

The nembol.com website or services may contain links to other websites or services. Our privacy policy applies only to our website or services, so if you click on a link to another website or service, you should read their privacy policy.

 

How do we make changes to this policy?

We may change this policy from time to time, and if we do, we’ll post any changes on this page. If you continue to use Nembol after those changes are in effect, you agree to the revised policy. If the changes are significant, we may provide more prominent notice or obtain your consent as required by law.

 

How to contact us

Please email us at hello@nembol.co.uk, or write us in the contact box on our website nembol.com

 

EU/EAA & UK GDPR Representatives (Article 27)

If you are located in the EU or UK, and have questions or concerns regarding your personal data, you may contact our GDPR representative:

EU Representative:
Euverify Ltd (Ireland),
Unit 3D North Point House
North Point Business Park
New Mallow Road, Cork
T23 AT2P, Ireland
Email: gdpr@euverify.com

UK Representative:
Euverify Ltd (UK),
3rd Floor, 86-90 Paul Street
London, EC2A 4NE
United Kingdom
Email: gdpr@euverify.com

 

Data processing on behalf of our users

Where Nembol processes personal data as a processor on behalf of our Users — for example, buyer and order data received through the e-commerce channels you connect to Nembol — this processing is governed by our Data Processing Agreement, incorporated by reference into our Terms of Service.