Nalcomania ("we", "us", "our", "the Atelier") is a slow-living homeware brand founded on principles of transparency, craft, and respect for nature. This Privacy Policy explains how we collect, use, disclose, and protect your personal information when you visit our website, make a purchase, subscribe to our journal, or interact with our studio.
We are committed to complying with the General Data Protection Regulation (GDPR), the California Consumer Privacy Act (CCPA), and other applicable privacy frameworks. By using Nalcomania's services, you entrust us with your data — we honor that trust with minimal collection, maximal protection, and never selling your information.
To provide you with a seamless experience — from browsing handcrafted vessels to receiving your package — we collect the following categories of data:
Name, billing/shipping address, email, phone number, and account credentials.
Order history, payment method details (securely processed via PCI-compliant gateways), delivery preferences.
IP address, browser type, pages visited, referral source, and interactions with our platform (via anonymized analytics).
Newsletter subscriptions, survey responses, and product interest signals.
We never intentionally collect sensitive data (e.g., health, political beliefs, biometrics). If you share such information voluntarily in customer service inquiries, it will be treated with strict confidentiality.
Under GDPR and similar laws, Nalcomania relies on the following lawful bases for data processing:
We do not engage in automated decision-making or profiling that has legal or significant effects on you.
Nalcomania never sells your personal data. However, we work with trusted partners to operate our atelier:
All third-party partners are bound by data processing agreements and only access information necessary for their services.
Nalcomania operates from Sweden (EU) and serves customers worldwide. If you are located outside the European Economic Area (EEA), your data may be transferred to and processed in countries with different data protection laws. We ensure adequate safeguards (e.g., Standard Contractual Clauses, EU-US Data Privacy Framework compliance) to protect your information.
We retain your personal information only as long as necessary to fulfill the purposes outlined in this policy:
After retention periods expire, we securely delete or anonymize your data.
Depending on your location (EEA, UK, California, Brazil, etc.), you may have the following rights regarding your personal data:
Nalcomania does not knowingly collect personal information from individuals under the age of 16. If you believe a child has provided us with data, please contact us immediately so we can delete it.
We implement industry-standard security measures including SSL encryption, role-based access controls, regular vulnerability scans, and secure data centers (ISO 27001 certified). Payment information is tokenized and never stored on our servers. While no system is 100% impenetrable, we continuously update our safeguards.
Our website may contain links to independent artisans' portfolios, payment gateways, or social media platforms. This Privacy Policy does not apply to those third-party sites. We encourage you to review their privacy notices before interacting.
We may revise this Privacy Policy occasionally to reflect legal changes, new features, or operational improvements. The "Last revised" date at the top indicates the latest version. Material changes will be notified via email (if you have an account) or via a banner on our website.
For privacy inquiries, data requests, or concerns, please reach out to our dedicated Privacy Team:
privacy@lumora-studio.com
Nalcomania Atelier — Data Protection Office, Hornstulls Strand 13, 117 39 Stockholm, Sweden
+46 (0)8 121 234 50
If you are unsatisfied with our response, you have the right to lodge a complaint with the Swedish Authority for Privacy Protection (IMY) or your local supervisory authority.