PRIVACY POLICY

1. SPANIS HOME NUJOOM (including our affiliates and subsidiaries) are committed to protect the privacy and security of the personal information shared to us by our customers. When you shop with us online or in-store or communicate with us, we collect and create personal data about you. This Privacy Policy details how we collect, use, process, and disclose information about you.
2. This Privacy Policy sets out the basis on which any personal data we collect from you, or that you provide to us, will be processed by us. Please read the following carefully to understand our views and practices regarding your personal data and how we will treat it.
3. Your access of our services indicates that you have read, understood and unconditionally accepted the provisions in this Privacy Policy, and such acceptance constitutes your legally binding acceptance of all terms and conditions set out in this Privacy Policy.
4. We reserve the right to amend this Privacy Policy at any time to comply with regulatory requirements or in line with our business requirement. Such amends will be made available for your review in our website, mobile applications or any other platform that has been made available for you to access our services. You are requested to familiarize yourself with the Privacy Policy periodically. Your continued use of the services offered following the posting of any such changes will constitute your acceptance of the revised Privacy Policy.

INFORMATION COLLECTION

Data maybe collected by ourselves or vide engaged third party services or tools. We may gather the following types of data from your interaction with us.

1. Personally identifiable information and contact data provided by you at the time of voluntary registration for our loyalty program, “NUJOOM” or marketing events such as (but not limited to) name, email address, mailing address, telephone number, date of birth, gender and nationality. NUJOOM has been developed to provide rewards for you. NUJOOM also provides you a summary of the transactions you complete with us.
2. Purchase information and transaction details such as items, bill amounts, mode of payments, or payment card details. This may include when, where, what and how you purchased that product or service. It will also include delivery details and the benefits accrued by you from the transaction.
3. Data is generated every time you interact with us through our stores, websites, or mobile apps. Interaction data is collected from you as and when you access or use our services. Interaction data is information about how you interact with our products and services, namely what you click on and interact with on our sites and app, or products in-store.
4. We may collect marketing data based on your marketing preferences and your interaction with our marketing conducted online and offline.
5. We may collect your location information to provide you better information about our local stores or to facilitate deliveries of the orders made by you with us. We may collect technical data about the device you use to access our website and mobile application such as device name, operating system, Advertising ID, IP address, sign-in data, plugins, and frequency of access or use.

USE OF INFORMATION

To serve you better as a customer, personal information submitted to us will be used for the purposes specified in this policy.

• to fulfill the services or products as requested by you
• to carry out market research and internal research for product improvement and enhancement of our information technology systems
• to provide further information to you about other services or products which we consider may be of interest to you;
• for future marketing, promotional and publicity purposes, including to carry out direct marketing, market research and surveys;
• for ensuring that you are shown the information that is most relevant to you and your interests
• to analyze traffic in our online platforms and footfall in our physical outlets
• to understand individual preferences, shopping habits, product popularity and market trends
• to combine and compare with other similar data to derive patterns and conclusions.
• to prevent fraud or misuse of services.
• for any other use that you authorize.

AGGREGATED DATA

We try and remove personal data to make the data anonymous making you unidentifiable. At times, you identifiable information may be replaced with non-identifying information such as an ID number or a reference number. Such modified data is combined with other data form aggregated data which enables us to deduct patterns or customer behaviors.

DISCLOSURE OF YOUR PERSONAL DATA

We may share your personal information for the following purposes:

1. any information that we gather about you (other than financial data which will be disclosed to the payment gateway service providers) to third parties for the purposes of providing you with additional services;
2. to facilitate a service or delivery of a product that has been ordered by you.
3. With specialist third parties for data analysis and to deduce business intelligence.
4. aggregate tracking information and other information that does not personally identify you to third parties;
5. your personal information to third parties, when we believe in good faith that it is required to do so by law;
6. your personal information to third parties, provided we have your prior consent, which may be obtained at the time of collecting the information from you.

We shall not share your Personal Information with any third party (other than our affiliates) unless you have provided your express consent. We maintain strict security standards and procedures with a view to preventing unauthorized access to your data by anyone, including our staff.

• We will seek your consent if we wish to use your personal information for purposes other than those you have agreed to previously.
• We will retain the personal information provided by you for as long as is reasonably necessary for the purposes listed in this Privacy Policy.

SOCIAL MEDIA

We maintain an active presence in social media to interact with our customers and inform them of our new services, products, and promotions. We may record your interaction with our social media accounts such as likes and comments to improve our services.

Your caution is requested while sharing personal information in social media or in the internet. Do not hesitate to contact us if you suspect that a party is misrepresenting or obtaining your information on our behalf. Always ensure that that the social media accounts, websites, or mobile applications that you engage with are our “verified” or “official” accounts/handles.

The social media platforms maintain their own privacy policies and data retention policies which you may be subject to. Such data may be used for profiling or targeted advertising.

DATA RETENTION

We will only retain your personal data for as long as reasonably necessary to fulfil the purposes we collected it for, including for the purposes of satisfying any legal, regulatory, tax, accounting or reporting requirements. We may retain your personal data for a longer period in the event of a complaint or if we reasonably believe there is a prospect of litigation in respect to our relationship with you. To determine the appropriate retention period for personal data, we consider the amount, nature and sensitivity of the personal data, the potential risk of harm from unauthorized use or disclosure of your personal data, the purposes for which we process your personal data and whether we can achieve those purposes through other means, and the applicable legal, regulatory, tax, accounting or other requirements.

DATA SECURITY

We have put in place physical security measures and digital/electronic safeguards to prevent your personal data from being accidentally lost, used or accessed in an unauthorized way, altered or disclosed. We audit the security measures in place periodically to ensure that your data is protected at all times. In addition, we limit access to your personal data to those employees, agents, contractors and other third parties who have a business need to know. They will only process your personal data on our instructions and they are subject to a duty of confidentiality. We have put in place procedures to deal with any suspected personal data breach and will notify you and any applicable regulator of a breach where we are legally required to do so.

DATA COLLECTED FROM AND BY THIRD PARTIES

We may gather personal data from other sources, such as specialist companies or media partners. Such specialist companies would have obtained your consent at the time when they collected data from you. We use this and our own data to better understand our customer.

Other than third parties that have been engaged by us contractually to process or analyze your data, we are not responsible for the data collection practices, the privacy policies or the content of links, advertisements, websites, or applications that have been hosted in our platforms by third parties or at the request of third parties. Such hosting has been done by us in good faith and your data will be collected and processed by such third parties in line with their privacy policy. You are requested to make yourselves aware with the privacy policy in place by such third parties.

COMMUNICATION PREFERENCE

If our intended collection, use or disclosure of your personal information is outside the collection, use or disclosure parameters in this Privacy Policy, we will give you the option to: opt out and not receive certain services or participate in certain interactive areas; or opt in to agree to be contacted by us in relation to certain matters such as notification of new features or services, beta testing of our technical platforms or promotional activities.

COOKIES

Our online platforms such as websites and mobile applications uses cookies. A cookie is a file containing an identifier (a string of letters and numbers) that is sent by a web server to a web browser and is stored by the browser. The identifier is then sent back to the server each time the browser requests a page from the server. If you wish to refuse to accept cookies, you may choose to disable it in your browser and/or delete cookies from your device storage. It is not mandatory to have cookies turned on to use the Website however, you may require cookies to access personalized or secure content on the Website. Some web pages may not function properly if the cookies are disabled.

RIGHTS TO YOUR DATA

You have the right to see the personal data we hold about you. If you would like to see the data we hold about you, you can email us at customercare@nesto.shop.

With regards to your personal information, you have the following rights subject to applicable local laws.

You have the right to:

• correct any inaccurate information
• delete any personal information
• restrict our use of personal information
• object to our use of your personal information.
• withdraw any consents you have provided for collection and use of your data.
• transfer your data to another third party
• lodge a complaint with your local data protection authority.

Last updated on: June 27, 2026