Privacy policy

PRIVACY POLICY

This Privacy Policy explains how Nolibu Ltd ("we", "us", "our"), operating as Iberian Direct (iberiandirect.com), collects, uses, and protects your personal information when you visit or make purchases from our store.

This policy applies to all personal information we collect about visitors, customers, and users of our Services. By using our Services, you consent to the practices described in this policy.

We are committed to handling your personal information in accordance with the EU General Data Protection Regulation (GDPR), the UK Data Protection Act 2018, and the California Consumer Privacy Act (CCPA), where applicable.

Who we are (data controller)
Nolibu Ltd · Companies House registration 16033166
Registered office: F04 1st Floor Knightrider House, Knightrider Street, Maidstone, ME15 6LU, United Kingdom
Email: info@iberiandirect.com

Information we collect

Information you provide directly:
• Name (billing and shipping) • Email address • Shipping and billing address • Phone number • Payment information (processed securely by payment providers; we do not store full card details) • Account credentials, if you create an account • Order history and product preferences • Communications with customer service

Information collected automatically:
• Device information (IP address, browser type, operating system) • Browsing behaviour on our site (pages viewed, items added to cart, time spent, referring URL) • Cookies and similar technologies

Information from third parties:
• Payment confirmation from payment providers • Shipping status from carriers • Authentication data if you sign in through a third-party service

How we use your information
• To fulfil your orders (processing, shipping, customs declarations, delivery) • To communicate with you about your orders • To process payments and prevent fraud • To maintain your account and order history • To improve our Services • To send marketing emails, only if you opt in (you can unsubscribe at any time) • To comply with legal obligations (tax, customs, fraud prevention, court orders) • To enforce our Terms of Service

Legal basis for processing (GDPR)
• Contract — to fulfil our agreement with you • Legal obligation — tax, customs and other laws • Legitimate interest — to operate, secure and improve our Services • Consent — for marketing and non-essential cookies, withdrawable at any time

Sharing your information
• Shopify — our e-commerce platform, which hosts our website and processes payments (shopify.com/legal/privacy) • Payment providers — PayPal, Shopify Payments and similar • Correos — the Spanish postal service, to deliver your order • Customs and tax authorities — where required by law for international shipments • Email service providers — for order confirmations, shipping updates and, with your consent, marketing • Legal and regulatory authorities — where required by law or to protect our rights

We do not sell your personal information to third parties for their independent marketing purposes.

International data transfers
Your information may be transferred to and processed outside the European Economic Area or the United Kingdom, including the United States. Where we transfer data internationally we use appropriate safeguards, such as Standard Contractual Clauses approved by the European Commission.

Cookies and tracking
We use cookies to maintain your shopping cart and session, remember your preferences, analyse site usage, and — with your consent — deliver personalised content. You can control cookies through your browser settings; disabling them may affect the shopping cart. Visitors in the EU, UK and California see a consent banner for non-essential cookies.

Data retention
• Order and customer data — 7 years (tax and accounting requirements) • Account data — until you delete your account, plus 30 days • Marketing data — until you unsubscribe, plus 30 days • Web analytics — typically 14 months, aggregated

Your rights
Depending on where you live, you have the right to access, rectify, erase, restrict, port, and object to the processing of your data, to withdraw consent, and to lodge a complaint with your data protection authority.

To exercise any of these rights, email info@iberiandirect.com. We respond within 30 days.

Do Not Track signals
Our site does not currently respond to "Do Not Track" browser signals, as no universal standard exists.

Children's privacy
Our Services are not directed to children under 16 and we do not knowingly collect their personal information. If you believe a child has provided us with data, contact us and we will delete it.

Data security
We use appropriate technical and organisational measures to protect your information. No internet transmission is completely secure, but we commit to notifying affected users promptly in the event of a breach.

Changes to this policy
We may update this policy. Material changes will be communicated by email, where we have it, and posted on our website.

Contact
Email: info@iberiandirect.com
Post: Nolibu Ltd, F04 1st Floor Knightrider House, Knightrider Street, Maidstone ME15 6LU, United Kingdom

UK complaints: Information Commissioner's Office — ico.org.uk
EU complaints: your national data protection authority.

Last updated: September 2026