Last updated: 28 September 2026

This policy explains how Nerylux processes personal data when you visit our website, buy products or contact us. It is written for customers and visitors in the United Kingdom. The data controller is, trading as Nerylux, established at, Belgium. Contact: contact@nerylux.com.

We process UK customers’ data under the UK General Data Protection Regulation (UK GDPR), the Data Protection Act 2018 and applicable electronic-marketing and cookie rules, as amended. EU GDPR and applicable Belgian law also apply to our activities where relevant.

1. Personal data and its sources

• Information you provide: name, email address, telephone number, billing and delivery addresses, order details, account information, enquiries, reviews and return requests.
• Payment information: transaction status and payment confirmations, together with payment details processed by the payment providers used at checkout.
• Technical and usage information: IP address, approximate location inferred from it, device and browser information, pages viewed, interactions, and cookie or similar identifiers, subject to the choices and legal requirements described below.
• Information from service providers: Shopify, payment processors, delivery partners and other providers may supply information needed for transactions, delivery, support or fraud prevention. Advertising and analytics partners may provide interaction information where the relevant tools are used lawfully.

We need relevant contact, delivery and payment information to fulfil an order. If you do not provide it, we may be unable to complete the purchase. Marketing consent is optional and is not a condition of buying.

2. Why we use data and our lawful bases

• Contract: processing orders and payments, arranging delivery, managing returns, maintaining requested account services and communicating about your purchase.
• Legal obligations: keeping tax and accounting records, meeting consumer-law duties and responding to lawful requests from authorities.
• Legitimate interests: protecting our store against fraud, keeping systems secure, responding to general enquiries, improving our services and establishing or defending legal claims, balanced against your rights and interests.
• Consent: sending promotional emails or messages where consent is required, and using optional advertising or tracking technologies requiring consent. You may withdraw consent at any time.

Security and payment tools may flag unusual transactions for review, using order, payment and technical signals. These checks can delay an order or lead to a request for clarification. Contact us if you wish to question a payment or order decision and request review by a person.

3. Cookies, analytics and advertising

Our Shopify store uses cookies and similar technologies to support functions such as the basket, checkout and security. Optional analytics, advertising and social-media technologies may process browsing activity, identifiers and approximate location. Advertising tools may use this information to tailor or measure advertisements.

Where consent is required, optional technologies must only be used with your consent. You can accept or reject optional categories and change your choice through the site’s cookie controls where available. You can also contact us about your preferences. Browser controls can block or delete cookies, but blocking essential cookies may affect checkout and other functions.

For Shopify’s cookie information, see Shopify’s Cookie Policy. For your choices with Nerylux, see Your Privacy Choices. Simply browsing the site is not consent to optional marketing or tracking.

4. Who receives personal data

We share the data needed to operate our shop with Shopify and providers of payment processing, hosting, IT support, order fulfilment, delivery, customer support and analytics. Advertising partners may receive relevant identifiers and interaction data where you have consented when required. Providers may act on our instructions or, for some activities such as their own payment, security or platform obligations, as independent controllers under their own privacy notices.

We may also disclose necessary information to professional advisers, competent authorities where legally required, or parties involved in a lawful business transfer, subject to appropriate safeguards. We do not sell your personal data for money. Sharing to fulfil orders or, with the required consent, to support advertising is explained here and is not a blanket permission to reuse your data.

5. International processing

We are based in Belgium, so UK customers’ information may be processed in Belgium. Shopify and other providers may process data in other countries, including Canada and the United States. Where a transfer is restricted by UK or EU data-protection law, the appropriate protection must be in place, such as an applicable adequacy decision or approved contractual safeguards. These may include the UK International Data Transfer Agreement, the UK Addendum to EU Standard Contractual Clauses, or EU Standard Contractual Clauses, as applicable. Contact us for information about the safeguards relevant to your data and how to obtain a copy.

6. Retention and security

We keep order and transaction records for the time needed to fulfil the order, deal with returns or disputes and meet applicable tax, accounting and limitation requirements. Account and support information is retained while needed for those services and related issues. Marketing preferences are kept while relevant, including a minimal suppression record where needed to respect an opt-out. Cookie retention varies by purpose and provider.

We use appropriate technical and organisational measures to protect personal data. No online service can guarantee absolute security. Please do not send full payment credentials or unnecessary sensitive information by email.

7. Your rights

Subject to the conditions in data-protection law, you may request access to your personal data, correction of inaccurate information, erasure, restriction of processing and a portable copy of data you supplied where processing is automated and based on consent or a contract. You may withdraw consent at any time without affecting the lawfulness of earlier processing.

You can object at any time to direct marketing, including related profiling. You may also object to processing based on legitimate interests on grounds relating to your situation. We will stop that processing unless we have a lawful reason to continue.

Email contact@nerylux.com or write to our Belgian business address to exercise your rights. We may request proportionate information to confirm your identity. Requests are normally free and answered without undue delay, usually within one month, subject to lawful extensions or pauses. If an extension is permitted because a request is complex or you have made several requests, we will explain it within the applicable initial period.

Where decisions are made solely by automated means with legal or similarly significant effects, you may have additional safeguards under applicable law, including the ability to make representations, contest a decision and request human intervention.

8. Marketing preferences

You can unsubscribe using the link in a marketing email or contact us to stop promotional communications. We may still send necessary, non-promotional messages about orders, refunds or account security. Withdrawing advertising consent does not prevent the processing needed to fulfil your purchase.

9. Children and external websites

Our shop is not directed at children and we do not knowingly collect children’s data for marketing. If you believe a child has supplied personal data, contact us so we can investigate. External sites linked from our store operate under their own privacy notices.

10. Complaints and updates

Please contact us if you have a concern about your data. UK residents can complain to the Information Commissioner’s Office (ICO). As our business is established in Belgium, you may also contact the Belgian Data Protection Authority. You do not have to give up either right by contacting us first.

We may update this policy to reflect changes in our services or legal requirements. We will show the revised date and provide any further notice required by law. A policy update does not replace any consent that the law requires us to obtain.

Contact us

Nerylux is the trading name of, a self-employed sole trader established in Belgium.

Email: contact@nerylux.com
Telephone: +32 460 22 66 73

Customer service: Monday to Friday, 7 am–5 pm UK time (8 am–6 pm Belgian time), excluding public holidays. We aim to reply within 24 hours. Statutory deadlines for formal requests are explained in the relevant policy.