Privacy policy

PRIVACY POLICY

Last updated: August 7, 2026

This Privacy Policy describes how Nature-Gap (“Nature-Gap,” the “Site,” “we,” “us,” or “our”) collects, uses, stores, and discloses your personal information when you visit nature-gap.com, purchase a product, contact us, or otherwise use our website and related services (collectively, the “Services”).

For the purposes of this Privacy Policy, “you” and “your” refer to customers, website visitors and other individuals whose personal information we process in connection with the Services.

Please read this Privacy Policy carefully.

CONTACT AND DATA CONTROLLER

Nature-Gap is operated by:

Lukas Aaron Büdinger
Nature-Gap
Liebfrauenstr.89
Germany
Email: natruegap@gmail.com
Website: https://nature-gap.com/

For the purposes of applicable data-protection laws, Lukas Büdinger is the controller responsible for the processing of your personal information unless otherwise stated.

CHANGES TO THIS PRIVACY POLICY

We may update this Privacy Policy from time to time to reflect changes to our business practices, Services, technologies, service providers or legal obligations.

When we make changes, we will publish the revised Privacy Policy on the Site and update the “Last updated” date. We will take any additional steps required by applicable law.

HOW WE COLLECT AND USE PERSONAL INFORMATION

The personal information we collect depends on how you interact with the Site and Services. We may collect information directly from you, automatically through the Site or from service providers and other third parties.

We use personal information to operate and improve the Site, process orders, receive payments, arrange delivery, provide customer service, communicate with you, prevent fraud, comply with legal obligations and advertise our products where permitted.

PERSONAL INFORMATION WE COLLECT DIRECTLY FROM YOU

Information that you provide directly to us may include:

  • Contact information, including your name, email address, telephone number, billing address and shipping address.

  • Order information, including the products purchased, order value, payment confirmation, order status, returns, refunds and cancellations.

  • Payment-related information, including your selected payment method and transaction details. Complete payment information may be collected and processed directly by Shopify or the relevant payment provider.

  • Account information, including your username, password, preferences and account settings, if you create an account.

  • Shopping information, including products you view, place in your shopping cart or purchase.

  • Customer-support information, including messages, inquiries, complaints and other information you provide when contacting us.

  • Marketing preferences, including whether you have agreed to receive promotional emails.

You may choose not to provide certain information. However, this may prevent us from processing your order or providing particular features of the Services.

INFORMATION WE COLLECT AUTOMATICALLY

When you use the Site, we and our service providers may automatically collect information about your interaction with the Services.

This may include:

  • IP address.

  • Browser type and version.

  • Device type and operating system.

  • Network and connection information.

  • Cookie and advertising identifiers.

  • Pages and products viewed.

  • Shopping-cart activity.

  • Date, time and duration of visits.

  • Referring website or advertisement.

  • Interactions with our Site and advertisements.

  • Approximate location derived from your IP address.

We may collect this information using cookies, pixels, tags and similar technologies.

INFORMATION WE RECEIVE FROM THIRD PARTIES

We may receive personal information from third parties that help us provide the Services, including:

  • Shopify, which hosts and supports our online store.

  • Shopify Payments and other payment providers.

  • PayPal.

  • Apple Pay and Google Pay.

  • Klarna.

  • Credit- and debit-card providers.

  • Fulfillment partners, suppliers, shipping companies and tracking providers.

  • Meta Platforms through the Meta Pixel and Meta advertising services.

  • Kaching Bundles, which supports bundle offers and shopping-cart functionality.

  • Fraud-prevention, security and technical service providers.

Information received from third parties will be processed in accordance with this Privacy Policy and applicable law.

HOW WE USE PERSONAL INFORMATION

Providing Products and Services

We use personal information to:

  • Process and confirm orders.

  • Process payments.

  • Fulfill and ship purchases.

  • Provide order and tracking notifications.

  • Manage returns, replacements and refunds.

  • Provide customer support.

  • Maintain customer accounts.

  • Communicate with you about purchases and inquiries.

Where the GDPR applies, the legal basis for this processing is the performance of a contract or taking steps at your request before entering into a contract pursuant to Article 6(1)(b) GDPR.

Payments

We offer payment options that may include Shopify Payments, PayPal, credit and debit cards, Apple Pay, Google Pay and Klarna.

Payment providers may collect payment details, billing information, transaction information, device information and fraud-prevention information. Their handling of personal information is governed by their respective privacy policies.

We generally do not receive or store complete payment-card numbers.

The legal basis for payment processing is the performance of a contract pursuant to Article 6(1)(b) GDPR. Fraud prevention may additionally be based on our legitimate interest in protecting customers and our business pursuant to Article 6(1)(f) GDPR.

Customer Service and Communication

We use personal information to respond to inquiries, handle complaints, provide support and maintain our business relationship with you.

The legal basis is the performance of a contract pursuant to Article 6(1)(b) GDPR or our legitimate interest in providing effective customer service pursuant to Article 6(1)(f) GDPR.

Marketing and Advertising

Where permitted by law, we may use personal information to:

  • Send promotional emails.

  • Measure the effectiveness of advertising.

  • Create or measure advertising audiences.

  • Display advertisements on Meta platforms and other websites.

  • Personalize advertising based on interactions with our Site.

Where consent is required, the legal basis is your consent pursuant to Article 6(1)(a) GDPR. You may withdraw consent at any time without affecting the lawfulness of processing that occurred before withdrawal.

Where legally permitted without consent, processing may be based on our legitimate interest in promoting and improving our business pursuant to Article 6(1)(f) GDPR.

Security and Fraud Prevention

We use information to authenticate users, secure transactions, detect suspicious activity, prevent fraud and protect the Site, our customers and our rights.

The legal basis is our legitimate interest in maintaining a secure online store pursuant to Article 6(1)(f) GDPR and, where applicable, compliance with legal obligations pursuant to Article 6(1)(c) GDPR.

Legal and Accounting Obligations

We may process and retain personal information to comply with tax, accounting, commercial, consumer-protection and other legal requirements.

The legal basis is compliance with legal obligations pursuant to Article 6(1)(c) GDPR.

SHOPIFY

Our online store is hosted by Shopify. Shopify processes personal information to provide the commerce platform, checkout, fraud-prevention, analytics and other services used by our store.

Information submitted through the Site may be transmitted to Shopify and its service providers in countries other than your country of residence.

You can learn more about Shopify’s privacy practices at:

https://privacy.shopify.com/en

You can access Shopify’s Privacy Portal at:

https://privacy.shopify.com/

META PIXEL AND META ADVERTISING

We use the Meta Pixel and Meta advertising services provided by Meta Platforms.

The Meta Pixel may collect information about visits and actions on our Site, including:

  • IP address and device information.

  • Browser information.

  • Pages and products viewed.

  • Shopping-cart activity.

  • Purchases and other conversion events.

  • Cookie and advertising identifiers.

We use this information to measure advertising performance, understand whether users interact with our advertisements and show more relevant advertisements.

Where required, Meta Pixel and advertising cookies will be activated only after you provide consent through our cookie banner. You may withdraw or change your consent through the available privacy settings.

Meta may process information independently in accordance with its own privacy policy:

https://www.facebook.com/privacy/policy/

KACHING BUNDLES

We use Kaching Bundles to display product bundles, quantity offers and related shopping-cart features.

Depending on its configuration, Kaching Bundles may process technical, cart, product and order-related information necessary to display and manage bundle offers.

The legal basis is the performance of a contract pursuant to Article 6(1)(b) GDPR or our legitimate interest in operating and improving the functionality of our store pursuant to Article 6(1)(f) GDPR.

COOKIES

Like many websites, we use cookies and similar technologies.

Cookies may be used to:

  • Operate essential Site and checkout functions.

  • Keep products in your shopping cart.

  • Remember preferences.

  • Secure transactions.

  • Analyze Site usage.

  • Measure advertising performance.

  • Personalize content and advertising where permitted.

  • Support Shopify, Meta Pixel and installed Shopify applications.

Essential cookies are necessary for the Site to function. Optional analytics, personalization and advertising cookies are used only where permitted by law and according to your choices.

You can manage available choices through our cookie banner, the “Your Privacy Choices” page or your browser settings.

Removing or blocking cookies may affect the functionality of the Site, shopping cart or checkout.

Information about cookies used by Shopify is available at:

https://www.shopify.com/legal/cookies

GLOBAL PRIVACY CONTROL

Our Site may recognize the Global Privacy Control signal. Where required by applicable law, we will treat a recognized Global Privacy Control signal as a request to opt out of certain sharing or targeted advertising activities for the associated browser or device.

More information is available at:

https://globalprivacycontrol.org/

Other than Global Privacy Control, we may not respond to “Do Not Track” signals because there is currently no universally accepted standard for these signals.

HOW WE DISCLOSE PERSONAL INFORMATION

We may disclose personal information:

  • To Shopify and providers that operate our online store.

  • To payment providers and financial institutions.

  • To suppliers, fulfillment partners, shipping carriers and tracking providers.

  • To Meta and other marketing or advertising partners, where permitted.

  • To Kaching Bundles and other service providers that support Site functionality.

  • To IT, hosting, security, cloud-storage and fraud-prevention providers.

  • To accountants, tax advisers, legal advisers and other professional advisers.

  • When you direct or authorize us to disclose information.

  • To comply with legal obligations, court orders or valid governmental requests.

  • To investigate fraud, security incidents or violations of our policies.

  • In connection with a merger, sale, restructuring, insolvency or transfer of our business.

Service providers receive only the information reasonably necessary to perform their services and are required to process information according to applicable agreements and laws.

SALE, SHARING AND TARGETED ADVERTISING

We do not sell personal information in exchange for money.

However, the use of Meta Pixel and similar advertising technologies may be considered “sharing,” “sale” or processing for targeted advertising under certain U.S. state privacy laws.

Depending on your state of residence and applicable law, you may have the right to opt out of these activities.

You can submit available opt-out choices through the “Your Privacy Choices” link displayed on our Site:

https://nature-gap.com/pages/data-sharing-opt-out

We do not knowingly sell or share the personal information of individuals under 16 years of age.

THIRD-PARTY WEBSITES AND LINKS

The Site may contain links to websites or platforms operated by third parties.

We are not responsible for the privacy, security, accuracy or content of third-party websites. If you follow a third-party link, you should review that provider’s privacy policy and terms.

CHILDREN’S DATA

Our Services are not intended for children under 13, and we do not knowingly collect personal information from children under 13.

If you are a parent or guardian and believe that a child has provided personal information to us, please contact us at natruegap@gmail.com so that we can review and, where required, delete the information.

SECURITY OF PERSONAL INFORMATION

We use reasonable administrative, organizational and technical safeguards designed to protect personal information from loss, misuse, unauthorized access, alteration and disclosure.

However, no security measure or internet transmission is completely secure. We cannot guarantee absolute security.

Please do not send passwords, complete payment details or other sensitive information through unsecured communication channels.

DATA RETENTION

We retain personal information only for as long as reasonably necessary to:

  • Provide the Services.

  • Fulfill orders.

  • Maintain customer accounts.

  • Provide customer support.

  • Comply with tax, accounting and other legal obligations.

  • Prevent fraud.

  • Resolve disputes.

  • Enforce agreements and protect our rights.

Retention periods depend on the type of information, the purpose of processing and applicable legal requirements. When information is no longer required, we delete or anonymize it where reasonably possible.

YOUR PRIVACY RIGHTS

Depending on where you live and applicable law, you may have some or all of the following rights:

  • Right to access or know what personal information we maintain about you.

  • Right to request deletion of personal information.

  • Right to request correction of inaccurate information.

  • Right to receive certain information in a portable format.

  • Right to restrict certain processing.

  • Right to object to processing based on legitimate interests.

  • Right to withdraw consent where processing is based on consent.

  • Right to opt out of sale, sharing or targeted advertising where applicable.

  • Right to appeal a decision concerning a privacy request where applicable.

  • Right not to receive discriminatory treatment for exercising applicable privacy rights.

These rights are not absolute and may be subject to legal exceptions. For example, we may retain order information where required by tax or accounting law.

We may need to verify your identity before completing a request. An authorized agent may submit a request on your behalf where permitted by law, but we may require proof of authorization and identity verification.

To exercise a privacy right, contact us at natruegap@gmail.com or use the privacy controls available on the Site.

COMMUNICATION PREFERENCES

If you subscribe to promotional emails, you may unsubscribe at any time by selecting the unsubscribe link in an email.

After unsubscribing, we may still send non-promotional communications relating to orders, transactions, security or customer-service inquiries.

COMPLAINTS

If you have a complaint about how we process personal information, please contact us first at natruegap@gmail.com.

Where the GDPR applies, you may also lodge a complaint with a competent data-protection supervisory authority.

The supervisory authority generally responsible for businesses established in Hessen is:

The Hessian Commissioner for Data Protection and Freedom of Information
Gustav-Stresemann-Ring 1
65189 Wiesbaden
Germany
https://datenschutz.hessen.de/

INTERNATIONAL DATA TRANSFERS

Nature-Gap operates from Germany and currently sells and ships products to customers in the United States.

Shopify, payment providers, Meta, suppliers, fulfillment partners and other service providers may process personal information in the United States, Canada, China or other countries.

Where European data-protection law applies and personal information is transferred outside the European Economic Area, we rely on recognized safeguards where required, including adequacy decisions, Standard Contractual Clauses or other legally permitted transfer mechanisms.

CONTACT

If you have questions about this Privacy Policy, our privacy practices or your privacy rights, please contact:

Lukas Aaron Büdinger
Nature-Gap
Liebfrauenstr.89
Germany
Email: natruegap@gmail.com
Website: https://nature-gap.com/