Privacy Policy — No!Cap Granola (GDPR)
Last updated: January 2026
This Privacy Policy explains how NoCap d.o.o. ("No!Cap", "we", "us") collects, uses, and protects your personal data when you visit our website, purchase, or subscribe.
Who is the data controller?
What data we collect
- Identity & contact: name, email, shipping/billing address, phone (optional).
- Order & payment: order history, transaction IDs (payment card data is processed by our payment partner; we don't store full card details).
- Usage & device: cookies, IP, device/browser info, pages viewed, clicks.
- Marketing: your preferences, consents, email engagement, ad attribution.
Why we process your data (lawful bases)
- To fulfill your order & subscription (contract).
- Customer support & service emails (contract/legitimate interests).
- Marketing with your consent (newsletter, ads with consent where required).
- Fraud prevention & site security (legitimate interests).
- Legal obligations (tax, accounting).
Sharing your data
We share data with trusted processors to run our store:
- Shopify (store platform & hosting)
- Payment processors (e.g., Shopify Payments/Stripe/PayPal)
- Fulfillment & carriers (warehouse, couriers)
- Analytics/advertising tools (only as configured & with consent where required)
These providers process data under agreements consistent with GDPR (e.g., Standard Contractual Clauses for international transfers).
International transfers
Your data may be processed outside the EU/EEA (e.g., Shopify infrastructure). Where this happens, we rely on SCCs and other safeguards.
Retention
- Orders: kept as required for tax/accounting.
- Marketing: until you unsubscribe or request erasure.
- Cookies: see our Cookie Notice for lifetimes.
Your rights (EU/EEA)
- Access, rectification, erasure
- Restriction & objection (including objection to marketing)
- Data portability
- Withdraw consent at any time
- Lodge a complaint with your local DPA (in Croatia: AZOP)
To exercise your rights, email hello@eatnocap.com.
Cookies
We use necessary cookies to operate the site and optional cookies (analytics/ads) with consent where required. Manage cookies via our banner or browser settings. See Cookie Notice for details.
Updates
We may update this policy; the "Last updated" date will change. Significant changes will be communicated on-site.