PRIVACY POLICY

Last updated: November 11, 2026

At NitePed, we respect your privacy and are committed to protecting the personal information of our customers and website visitors.

This Privacy Policy explains how we collect, use, disclose, store and protect personal information when you visit niped.com, make a purchase, contact us or otherwise interact with NitePed.

1. DATA CONTROLLER

The person responsible for the processing of personal data through this website is:

Trading name: NitePed
Owner / Data Controller: Sergio Almarcha Bernabeu
Tax Identification Number (NIF): 24512857D
Registered address: Calle Doctor Fleming 1D, 03610 Petrer, Alicante, Comunidad Valenciana, Spain
Email: infoniteped@use.startmail.com
Website: niped.com

For privacy-related questions or requests, please contact:

infoniteped@use.startmail.com

2. PERSONAL INFORMATION WE MAY COLLECT

Depending on how you interact with NitePed, we may collect and process the following categories of personal information.

Identity and contact information

This may include:

• Full name.

• Billing address.

• Shipping address.

• Email address.

• Telephone number where required for delivery or order management.

Order and transaction information

This may include:

• Products purchased.

• Product variants.

• Order number.

• Order date.

• Amount paid.

• Shipping method.

• Order status.

• Returns.

• Refunds.

• Customer service history.

Payment information

Payments are processed through authorized payment service providers.

Depending on availability, payment methods may include:

• Visa.

• Mastercard.

• American Express.

• PayPal.

• Apple Pay.

• Google Pay.

• Shop Pay.

NitePed does not generally need to receive or store complete payment card details where these are processed directly by the relevant payment provider.

We may receive limited payment-related information such as payment status, transaction references or the payment method used.

Communications

If you contact us, we may process:

• Your email address.

• Name.

• Order information.

• Messages sent to us.

• Photographs or documents you voluntarily provide in relation to an order, return, damaged product or customer service request.

Device and website information

When you access our website, certain technical information may be collected, including:

• IP address.

• Browser type.

• Device type.

• Operating system.

• Website activity.

• Pages viewed.

• Referral information.

• Cookie and similar technology identifiers.

The exact information collected depends on the technologies and privacy settings used on the website.

Marketing and consent information

Where applicable, we may process:

• Marketing preferences.

• Newsletter subscription status.

• Cookie preferences.

• Advertising consent.

• Interactions with marketing communications.

3. HOW WE COLLECT PERSONAL INFORMATION

We may collect personal information:

• Directly from you when you place an order.

• When you contact customer support.

• When you submit a form.

• When you subscribe to marketing communications.

• When you request a return or refund.

• Automatically through cookies and similar technologies.

• From Shopify and other service providers involved in operating our store.

• From payment providers, shipping providers and fraud-prevention services where necessary.

4. WHY WE USE YOUR PERSONAL INFORMATION

We process personal information for the purposes described below.

Processing and fulfilling orders

We use personal information to:

• Accept and process orders.

• Process payments.

• Prepare products for shipment.

• Arrange delivery.

• Provide order updates.

• Handle returns and refunds.

• Resolve order-related issues.

For customers protected by EU or UK data protection law, the primary legal basis is generally the performance of a contract or taking steps at your request before entering into a contract.

Customer service

We use personal information to:

• Respond to questions.

• Manage complaints.

• Resolve delivery issues.

• Handle damaged, defective or incorrect products.

• Process returns and refunds.

The legal basis may be performance of a contract, compliance with a legal obligation or our legitimate interest in providing customer support, depending on the circumstances.

Legal and regulatory obligations

We may process and retain information where necessary to comply with:

• Tax obligations.

• Accounting requirements.

• Consumer protection law.

• Product safety requirements.

• Fraud prevention obligations.

• Court orders.

• Requests from competent authorities.

• Other applicable legal requirements.

The legal basis is compliance with a legal obligation where EU or UK data protection law applies.

Fraud prevention and security

We may process information to:

• Detect suspicious transactions.

• Prevent fraud.

• Protect customer accounts.

• Protect our website.

• Investigate security incidents.

• Protect NitePed and its customers.

Where applicable, this processing may be based on our legitimate interests in protecting our business, customers and systems, provided those interests do not override your fundamental rights.

Marketing

Where legally permitted, we may send promotional communications about NitePed products, offers or news.

Where consent is required, we will only send these communications after obtaining valid consent.

You may unsubscribe at any time using the unsubscribe function included in the communication or by contacting:

infoniteped@use.startmail.com

Withdrawing consent does not affect the lawfulness of processing carried out before consent was withdrawn.

Analytics and advertising

We may use analytics, advertising or similar technologies where legally permitted.

Where consent is required under applicable law, non-essential analytics or advertising technologies will only be used after consent has been obtained.

Further information will be provided in our Cookie Policy.

5. LEGAL BASES FOR PROCESSING

Where the GDPR or UK GDPR applies, we rely on one or more of the following legal bases:

• Contract: where processing is necessary to process and fulfil your purchase.

• Legal obligation: where processing is required by applicable law.

• Legitimate interests: where reasonably necessary to operate, secure and protect our business and provide customer service, provided your rights do not override those interests.

• Consent: where we ask for your permission, including certain marketing activities and non-essential cookies.

We do not rely on consent where another legal basis is more appropriate.

6. SHOPIFY

Our online store is hosted and operated using Shopify.

Shopify provides infrastructure and services used to operate our website, checkout, orders and other e-commerce functions.

As a result, Shopify may process personal information relating to customers and visitors in connection with providing its services to NitePed.

Depending on the Shopify services used, Shopify may process information such as:

• Contact details.

• Shipping and billing details.

• Order information.

• Transaction information.

• Website activity.

• Device information.

• Payment-related information.

Shopify may also process certain information independently for its own permitted purposes in accordance with its applicable privacy terms.

7. WHO WE MAY SHARE PERSONAL INFORMATION WITH

We do not disclose personal information indiscriminately.

We may disclose information to service providers where reasonably necessary to operate our business.

These may include:

Shopify

For hosting, checkout, order management and e-commerce infrastructure.

Payment providers

For processing, authorizing and protecting payments.

Shipping and logistics providers

We may provide information such as your:

• Name.

• Shipping address.

• Telephone number where necessary.

• Email address where necessary.

• Delivery information.

This information is provided only to the extent reasonably necessary to deliver your order.

Technology and hosting providers

These may provide website infrastructure, cybersecurity, technical support or related services.

Customer communication providers

Where used, providers may help us send transactional messages, order notifications or customer service communications.

Analytics and advertising providers

Where these services are used, data may be disclosed or collected through cookies and similar technologies.

Where consent is required, such processing will only occur after the appropriate consent has been obtained.

Professional advisers

Information may be disclosed where reasonably necessary to accountants, legal advisers, tax advisers, insurers or similar professional service providers.

Public authorities

We may disclose information where legally required to courts, law enforcement agencies, tax authorities, consumer protection authorities, data protection authorities or other competent public bodies.

8. INTERNATIONAL DATA TRANSFERS

Some service providers used to operate NitePed may process information outside Spain, the European Economic Area or the United Kingdom.

Where personal information protected by the GDPR is transferred internationally, we will rely, where required, on an appropriate lawful transfer mechanism, such as:

• An adequacy decision.

• Standard Contractual Clauses approved by the European Commission.

• Another legally recognized safeguard or exception.

Where UK data protection law applies, transfers will be handled using mechanisms recognized under UK law, such as:

• UK adequacy regulations.

• The International Data Transfer Agreement.

• The UK Addendum to appropriate standard contractual clauses.

• Another legally permitted safeguard or exception.

Where applicable, you may contact us to request additional information regarding the safeguards used.

9. HOW LONG WE KEEP PERSONAL INFORMATION

We retain personal information only for as long as reasonably necessary for the purposes for which it was collected and for any subsequent period required to comply with legal obligations or establish, exercise or defend legal claims.

For example:

Order and transaction information may be retained for the periods required by applicable tax, accounting and commercial laws.

Customer service and complaint records may be retained for as long as necessary to resolve the matter and subsequently during applicable limitation periods.

Return and refund information may be retained as required to manage the transaction and comply with our legal obligations.

Marketing information based on consent may be processed until you unsubscribe or withdraw consent, subject to retaining limited records where necessary to demonstrate that your request was respected.

Cookie preferences may be retained for the period reasonably necessary to record and respect your privacy choices.

When information is no longer required, it may be deleted, anonymized or securely restricted where retention is legally required.

10. YOUR RIGHTS UNDER THE GDPR

If the GDPR applies to your personal information, you may have the right to:

• Access your personal information.

• Rectify inaccurate or incomplete information.

• Request deletion of personal information where legally applicable.

• Restrict processing in certain circumstances.

• Object to certain processing.

• Receive data portability where applicable.

• Withdraw consent where processing is based on consent.

• Lodge a complaint with a competent data protection authority.

Some rights depend on the legal basis and circumstances of the processing and are therefore not absolute.

11. RIGHT TO OBJECT

Where personal information is processed on the basis of legitimate interests, you may have the right to object to that processing based on your particular circumstances.

Where personal information is processed for direct marketing purposes, you may object to that processing at any time.

If you object to direct marketing, we will stop using your personal information for that purpose.

12. SPAIN AND EUROPEAN UNION

Because NitePed is operated from Spain, the processing of personal information is subject to applicable Spanish and European data protection law, including the GDPR and applicable Spanish legislation.

If you believe that your personal information has been processed in breach of applicable data protection law, you may lodge a complaint with:

Agencia Española de Protección de Datos (AEPD)

You are not required to contact NitePed before exercising your right to lodge a complaint with the competent supervisory authority.

13. UNITED KINGDOM PRIVACY RIGHTS

Where UK data protection law applies, customers in the United Kingdom may have rights including:

• Access.

• Rectification.

• Erasure.

• Restriction.

• Objection.

• Data portability.

• Withdrawal of consent where applicable.

Customers may also have the right to lodge a complaint with the Information Commissioner's Office (ICO).

Nothing in this Privacy Policy limits rights provided by the UK GDPR or applicable UK data protection legislation.

14. UNITED STATES PRIVACY RIGHTS

Residents of certain U.S. states may have additional privacy rights where the relevant state privacy law applies to NitePed.

Depending on the applicable law, these rights may include:

• The right to know or access personal information.

• The right to request deletion.

• The right to correct inaccurate personal information.

• The right to obtain a portable copy of certain information.

• The right to opt out of certain uses of personal information for targeted advertising.

• The right to opt out of certain sales or sharing of personal information.

• The right not to be unlawfully discriminated against for exercising privacy rights.

These rights apply only where the relevant law covers NitePed and the particular processing activity.

Where legally required, we will also recognize valid browser-based opt-out preference signals, such as Global Privacy Control, in accordance with applicable law.

Requests may be submitted to:

infoniteped@use.startmail.com

We may need to verify your identity before completing certain requests where permitted by law.

15. CALIFORNIA RESIDENTS

Where the California Consumer Privacy Act, as amended, applies to NitePed, California residents may have rights including:

• The right to know what personal information is collected, used and disclosed.

• The right to request deletion, subject to legal exceptions.

• The right to correct inaccurate personal information.

• The right to opt out of the sale or sharing of personal information where applicable.

• The right to limit certain uses of sensitive personal information where applicable.

• The right not to receive discriminatory treatment for exercising applicable privacy rights.

If NitePed engages in activities considered “selling” or “sharing” personal information under California law and the law applies to our business, we will provide the legally required opt-out mechanisms.

16. CHILDREN'S PRIVACY

NitePed sells LED heel lights and related running visibility accessories.

niped.com is intended to be used by adults purchasing products, and we do not knowingly request children to provide personal information directly to us.

We do not knowingly use personal information collected directly from children for behavioral advertising or marketing.

If you are a parent or legal guardian and believe that a child has provided personal information directly to NitePed without appropriate authorization, please contact:

infoniteped@use.startmail.com

We will investigate the request and take appropriate action where required by law.

17. AUTOMATED DECISION-MAKING

NitePed does not generally make decisions based solely on automated processing that produce legal effects or similarly significant effects on customers.

Payment, security or fraud-prevention providers may use automated systems to assess transactions or suspicious activity according to their own legal obligations and privacy practices.

Where applicable law grants specific rights concerning automated decision-making, those rights will be respected.

18. COOKIES AND SIMILAR TECHNOLOGIES

Our website may use cookies and similar technologies for purposes such as:

• Essential website functionality.

• Shopping cart functionality.

• Checkout.

• Security.

• Remembering user preferences.

• Analytics.

• Advertising.

Essential technologies may operate where necessary to provide the website or requested service.

Where applicable law requires consent for analytics, advertising or other non-essential technologies, these technologies will only be activated after valid consent has been obtained.

For more information, please see our Cookie Policy.

19. DATA SECURITY

We take reasonable technical and organizational measures designed to protect personal information against:

• Unauthorized access.

• Accidental loss.

• Unauthorized alteration.

• Destruction.

• Improper disclosure.

However, no internet-based system can guarantee absolute security.

Where a personal data breach occurs, we will take any notification, investigation or mitigation measures required by applicable law.

20. EXERCISING YOUR PRIVACY RIGHTS

Privacy requests may be submitted to:

infoniteped@use.startmail.com

Please clearly describe the right you wish to exercise.

We may request additional information where reasonably necessary to verify your identity and protect personal information from unauthorized access.

We will not routinely require a copy of an identity document where your identity can reasonably be verified by less intrusive means.

Requests will be handled within the timeframes required by the law applicable to the request.

21. AUTHORIZED AGENTS

Where applicable law permits an authorized agent to submit a privacy request on your behalf, we may request reasonable evidence that the agent has authority to act for you and may request direct verification where legally permitted.

22. MARKETING COMMUNICATIONS

You may unsubscribe from marketing emails at any time by:

• Using the unsubscribe link contained in the communication; or

• Contacting infoniteped@use.startmail.com.

Unsubscribing from marketing does not prevent us from sending necessary transactional messages relating to purchases, shipping, returns, refunds, safety notices or other service-related matters.

23. CHANGES TO THIS PRIVACY POLICY

We may update this Privacy Policy where necessary due to:

• Changes in applicable law.

• Changes to our services.

• Changes to our technology providers.

• New privacy or security requirements.

• Changes to the way personal information is processed.

The latest version will be published on niped.com with an updated date.

Where legally required, we will provide additional notice or request consent before materially changing a processing activity.

24. CONTACT

For privacy questions or to exercise your privacy rights:

NitePed
Owner / Data Controller: Sergio Almarcha Bernabeu
Email: infoniteped@use.startmail.com
Website: niped.com
Registered address: Calle Doctor Fleming 1D, 03610 Petrer, Alicante, Comunidad Valenciana, Spain