This policy explains what personal information nesthavi.com collects, why we collect it, who it is shared with, and what you can do about it. We keep the list short on purpose: we only ask for what an order actually needs.

Who is responsible for your data: Nesthavi Limited, Suite C, Level 7, World Trust Tower, 50 Stanley Street, Central, Hong Kong. Questions about this policy: [email protected].

1. Information you give us

  • Order details — name, email address, delivery address, phone number if you provide one, and the items you bought.
  • Payment details — handled by our payment provider. Card numbers and security codes are entered on their systems, not ours. We never see or store them.
  • Account details — if you create an account, your email address and an encrypted password.
  • Messages — anything you send us by email, including photos attached to a claim.
  • Marketing — your email address, if you choose to subscribe.

2. Information collected automatically

Like most shops, our site records basic technical data when you visit: IP address, browser and device type, pages viewed, and the site you arrived from. This is used to keep the store working, to prevent fraud, and to understand which products people look at. Details of the cookies involved are in our Cookie Policy.

3. Why we use it

  • To produce, pack and ship your order, and to keep you updated about it.
  • To answer your questions and handle claims, returns and refunds.
  • To take payment and to detect and prevent fraudulent transactions.
  • To meet accounting and tax obligations.
  • To improve the shop — which designs sell, which pages confuse people, where the site is slow.
  • To send marketing emails, but only if you asked for them.

4. Who we share it with

We do not sell your personal information, and we do not rent or trade mailing lists. We share only what is necessary, and only with:

  • Our print and fulfilment partner — your name, delivery address and the item ordered.
  • Shipping carriers — your name, address and contact details, so the parcel can be delivered.
  • Our payment provider — to take payment and to resolve disputes.
  • Service providers that host the website, send transactional email, or provide analytics, under contracts that restrict what they may do with the data.
  • Authorities, where the law requires it.

5. International transfers

Our suppliers operate in more than one country, so your information may be processed outside where you live. Where that happens we rely on standard contractual protections to keep the same level of care in place.

6. How long we keep it

Order and transaction records are kept for as long as tax and accounting rules require, normally several years. Support correspondence is kept for up to two years. Marketing subscriptions are kept until you unsubscribe. Account data is kept until you ask us to close the account.

7. Your rights

Depending on where you live, you may ask us to:

  • tell you what personal information we hold about you and give you a copy;
  • correct anything that is wrong;
  • delete your information, where we are not required to keep it;
  • restrict or object to a particular use;
  • withdraw consent to marketing at any time.

Write to [email protected] and we will respond within 30 days. We may ask you to confirm your identity first, so that we do not hand your data to somebody else. We do not sell personal information, so there is nothing to opt out of on that front.

8. Marketing email

You are added to our list only if you ask to be. Every message carries an unsubscribe link, and unsubscribing takes effect immediately. Order confirmations, shipping notices and replies to your own messages are service emails, not marketing, and continue regardless.

9. Security

The site runs over an encrypted HTTPS connection. Access to order data is limited to the people who need it to run the shop. Payment credentials never touch our servers. No system is perfect, but if a breach ever affects your data we will tell you and the relevant authority as quickly as the law requires.

10. Children

This shop is not intended for children under 16 and we do not knowingly collect their data. If you believe a child has given us personal information, contact us and we will delete it.

11. Changes

If this policy changes, the new version appears on this page with a new date at the foot. Significant changes will also be announced on the site.

12. Contact

Privacy questions and requests: [email protected].

Last updated: September 18, 2026

Nesthavi Limited
Registered office: Suite C, Level 7, World Trust Tower, 50 Stanley Street, Central, Hong Kong
Email: [email protected]