Privacy
Who is responsible
The controller is Pumpernickel HoldCo Ltd, trading as Nildun, a private limited company registered in England and Wales, company number 16976437. The registered office is Flat 140, 4 Dukes Road, London, E17 3SE.
What we collect
Your email address and order details, so we can deliver your access link. Payment card details are handled by Stripe. We don’t see or store full card numbers.
If you join a product waitlist, your email address, the product you asked about, and the consent you gave.
This site uses no cookies or analytics.
Why we use it
To deliver what you bought, handle support and refunds, and meet legal and tax record duties. Our lawful bases are contract and legal obligation.
If you join a waitlist, we email you once, when that product goes live, with the link. We send no other marketing. The lawful basis for this is consent.
Who we share it with
- Stripe, as payment processor.
- Resend, to send delivery and support emails.
How long we keep it
We keep order and payment records for 6 years after the end of the tax year, and we keep your email only as long as needed for delivery and support, then delete it on request where the law allows.
If you join a product waitlist, we also keep your email address, the product you asked about, and the consent you gave, so we can email you once, when that product goes live, with the link. The lawful basis for this is consent. We keep waitlist details until we have sent that one email, or until you ask to leave (email hello@nildun.com), and then we delete them.
To limit repeated waitlist sign-up attempts, we keep a one-way hash of your IP address for about an hour, then delete it. We do not store the address itself.
International transfers
Stripe and Resend may process your data outside the UK, including in the United States. They use approved safeguards for these transfers.
Your rights
Under UK GDPR you have the right to access, rectification, erasure, restriction, objection and portability. You can complain to the ICO at ico.org.uk.