← Back to home

Privacy Policy

Last updated: August 18, 2026

NFCReviewCard respects the privacy of its users and processes personal data in accordance with Regulation (EU) 2016/679 (GDPR) and applicable law.

1. Data Controller

The data controller for personal data is NFCReviewCard.

For any privacy-related request, you can contact us at:

hello@nfcreviewcard.eu

2. Data We Collect

When you place an order, we collect:

  • email address;
  • order and product information.

Shipping and payment details are collected at checkout by our payment provider Stripe on our behalf; we receive the shipping address and order summary from Stripe in order to fulfil your order. Full payment card details are not stored by NFCReviewCard.

The website may also automatically collect certain technical data necessary for the service to function and to analyse aggregate traffic, such as IP address, device type, browser, and connection information. This data is processed without the use of cookies and does not allow the identification of individual users.

3. How We Use Your Data

We use personal data to:

  • process and manage orders;
  • ship products;
  • communicate with customers regarding their order;
  • handle payments, refunds, and support requests;
  • fulfil tax and legal obligations;
  • prevent fraud, abuse, and misuse of the service;
  • keep the website secure and operational.

We do not sell personal data or use it for third-party marketing purposes.

4. Legal Basis

The processing of personal data is based, as applicable, on the need to:

  • perform the purchase contract;
  • fulfil legal obligations;
  • pursue the legitimate interests of the controller, such as website security and fraud prevention;
  • obtain consent, where required by law.

5. Data Sharing

We may share personal data only where necessary to provide the service or fulfil legal obligations.

Depending on the order, this may include the following providers:

  • payments — Stripe;
  • website hosting and infrastructure — Vercel;
  • database services — Supabase;
  • email and communications — Resend;
  • shipping and delivery;
  • accounting and tax compliance.

These parties receive only the data necessary to carry out their respective activities.

6. International Data Transfers

Some of the service providers we rely on, including Stripe, Vercel and Supabase, are based outside the European Economic Area (EEA), in particular in the United States.

Transfers of personal data to these providers take place on the basis of the EU-US Data Privacy Framework or, where applicable, on the basis of the European Commission's standard contractual clauses. A copy of the relevant safeguards is available on request.

7. Data Retention

We retain personal data for as long as necessary for the purposes for which it was collected and, where required, for the period prescribed by applicable tax, accounting, or legal obligations.

Data that is no longer needed is deleted or anonymised where possible.

8. Your Rights

To the extent provided by the GDPR, you have the right to:

  • obtain confirmation that your personal data exists;
  • access your data;
  • request correction of inaccurate data;
  • request deletion of your data where applicable;
  • request restriction of processing;
  • object to certain processing activities;
  • request data portability, where applicable;
  • withdraw consent where processing is based on consent.

To exercise your rights, contact hello@nfcreviewcard.eu

You also have the right to lodge a complaint with the competent supervisory authority.

9. Cookies and Similar Technologies

The website uses only cookies that are strictly necessary for its operation:

  • Stripe — required to process payments and to prevent fraud during checkout.

No advertising, analytics or marketing cookies are used. Web analytics are carried out without cookies and do not identify individual users.

You can block or delete cookies in your browser settings at any time; please note that doing so may affect the proper functioning of the website, including payment processing.

10. Security

We adopt reasonable technical and organisational measures to protect personal data against unauthorised access, loss, alteration, or disclosure.

However, no data transmission or storage system can be considered completely secure.

11. Changes to This Privacy Policy

This Privacy Policy may be updated periodically to reflect changes to the service, applicable law, or our data processing practices.

The most recent version will always be available on the website.

12. Contact

NFCReviewCard hello@nfcreviewcard.eu