1. Who we are

NDEStore (ndestore.com) operates www.ndestore.com from Pakistan and is responsible for the personal information described here. For privacy questions or requests, contact info@ndestore.com.

Some laws use terms such as “controller,” “business,” or “organisation” for the party responsible for personal information. Those terms apply to NDEStore where the relevant law covers our activities.

2. Information we collect

The information we collect depends on how you use the store. It may include:

• Contact and account details: name, email address, phone number, account login details, and billing or delivery address.
• Orders and payments: products viewed or ordered, order history, delivery details, payment status, and transaction references. Payment providers handle payment credentials; NDEStore generally receives the information needed to confirm and record a payment.
• Product and vehicle enquiries: vehicle make, model, year, chassis or VIN details, requested parts, and other information you choose to provide.
• Messages and preferences: enquiries and support communications sent by email, phone, WhatsApp, website forms, or social platforms, as well as marketing and cookie preferences.
• Device and usage information: browser and device details, IP address, pages visited, approximate location based on IP, and information collected through cookies or similar technologies.

We receive information directly from you, automatically from your browser or device, and from providers that help us operate the store, take payments, communicate with you, or deliver orders.

3. How we use information

We use personal information to:

• provide the website, manage accounts, process orders and payments, arrange delivery, and respond to product enquiries;
• source requested parts, send order or delivery updates, and provide customer support;
• maintain, troubleshoot, secure, and improve the website and our services;
• prevent fraud, misuse, and security incidents, and resolve complaints or disputes;
• keep business, tax, and accounting records and meet legal obligations; and
• send promotional messages or measure advertising where permitted and, when required, with your consent.

UK and European Economic Area: where the UK GDPR or EU GDPR applies, we process information when needed to take steps at your request or perform a contract, to meet a legal obligation, for our legitimate interests (such as keeping the store secure and improving it) where those interests do not override your rights, or on the basis of consent where required. You may withdraw consent at any time; this does not affect processing that took place before withdrawal.

4. When information is shared

We share only the information reasonably needed for the relevant purpose. Recipients may include:

• Shopify and store technology providers that host the storefront, checkout, account, and order systems;
• payment providers that process payments and help prevent fraud;
• couriers and fulfilment providers that deliver orders and provide tracking;
• parts suppliers or sourcing partners when needed to locate or fulfil a requested part;
• communications, analytics, and advertising providers that support customer service, website measurement, or advertising, subject to applicable cookie and privacy choices; and
• authorities, advisers, or other parties where disclosure is required by law or reasonably necessary to protect rights, safety, or the store.

These providers may process information under their own privacy notices and, where applicable, our instructions or service agreements. When you choose to contact us through WhatsApp or a social platform, that platform also processes information under its own terms.

5. Cookies and advertising choices

Cookies and similar technologies help the website work, remember preferences, understand site use, and, where enabled, measure or personalise advertising. Cookie options may depend on your location. Use the website’s Cookie preferences control to review or change optional cookie choices. You can also adjust browser settings, although blocking essential cookies may affect store functions.

NDEStore does not offer customer information for sale in exchange for money. If optional advertising or analytics technologies are enabled, they may allow those providers to receive online identifiers and browsing activity. Some privacy laws define certain advertising-related disclosures as “sharing,” “sale,” or targeted advertising even when no money changes hands. You can turn off optional technologies through Cookie preferences or contact info@ndestore.com to exercise an opt-out right where applicable.

6. International transfers

NDEStore operates from Pakistan, and Shopify and other service providers may process information in Pakistan or other countries where they or their providers operate. Those countries may have privacy laws different from the laws where you live. Where a law requires safeguards for an international transfer, we will use an applicable transfer safeguard for that transfer.

7. How long we keep information

We keep personal information for as long as needed to complete orders, provide support, maintain business and tax records, address disputes, and meet legal requirements. Retention depends on the type of information, why it was collected, and applicable legal requirements. When information is no longer needed, we take reasonable steps to delete it or remove identifying details, subject to lawful retention requirements.

8. Your privacy rights

Privacy rights vary by location and may be subject to exceptions. Depending on the law that applies, you may be able to ask us to:

• confirm whether we hold information about you and provide a copy;
• correct information that is inaccurate or incomplete;
• delete information, restrict or object to certain uses, or withdraw consent;
• provide information in a portable format; or
• stop certain marketing, targeted advertising, sale, or sharing activities.

UK and EEA: where applicable, rights can include access, correction, deletion, restriction, objection, and data portability. You may also complain to your local data protection authority. If we rely on legitimate interests, you may object to that processing.

United States: privacy rights depend on the state and whether its law applies to you and our business. Rights may include access, correction, deletion, a copy of information, and opting out of targeted advertising, sale or sharing, or certain profiling. If we deny a request, you may have a right to appeal; where that right applies, we will explain how in our response.

Canada: where applicable, you may request access to or correction of your personal information, ask questions about its handling, or withdraw consent subject to legal and contractual limits. You may complain to the Office of the Privacy Commissioner of Canada or the relevant provincial privacy regulator.

Australia: where applicable, you may request access to or correction of personal information and complain to us or the Office of the Australian Information Commissioner if concerned about its handling.

To make a request, email info@ndestore.com with “Privacy Request” in the subject line and tell us your country or state and how we can identify the information involved. We may ask for reasonable information to verify your identity and protect your account. We will respond within the time required by applicable law. You may use an authorised agent where local law allows.

9. Automated tools and AI

Some website and service providers use automated tools, which may include AI-enabled features, to operate the store, help detect fraud or security issues, analyse service performance, or support communications. NDEStore does not currently make decisions about customers solely by automated means (including AI) that produce legal or similarly significant effects. If this changes, we will provide the information and choices required by applicable law.

10. Security and children

We use reasonable administrative and technical safeguards designed to protect personal information. No website or electronic transmission can be guaranteed completely secure. If a security incident occurs, we will take steps and provide notices required by applicable law.

This store is intended for general customers and is not designed for children to make purchases independently. If you believe a child has provided personal information to us, contact us so we can review the request.

11. Contact, complaints, and changes

For privacy questions, access or correction requests, or complaints, contact NDEStore at info@ndestore.com. Please include a way for us to reply. If you are not satisfied with our response, you may contact the privacy regulator responsible for your location, where one is available.

We may update this policy when our practices, services, or legal requirements change. We will post the current version here and update the date above. If a change needs to be brought to your attention under applicable law, we will take the required steps.