PRIVACY
POLICY.
What information Nerdy 9000 collects, why we use it, who receives it, and the choices available to you.
Nerdy 9000, United States, is the controller for the personal data described in this Policy unless a service provider acts as an independent controller. Privacy requests may be submitted through our Contact page or by emailing privacy@nerdy9000.com.
Overview and Scope
This Privacy Policy applies to Nerdy9000.com, the Nerdy 9000 online store, customer accounts, newsletters, and support communications. It explains our practices for personal data—information relating to an identified or identifiable person.
We currently ship products only within the United States. Where the EU or UK GDPR or another privacy law applies to a person or processing activity, we process personal data under the applicable legal requirements and provide the rights described below.
Personal Data We Collect
Information you provide
- Contact details such as name and email address.
- Billing and U.S. shipping addresses.
- Order details, selected products, transaction status, and order history.
- Account credentials in protected form and account preferences.
- Newsletter choices and marketing preferences.
- Support messages, order numbers, and any photos or details you choose to send.
Information collected automatically
- IP address, browser and device information, approximate location derived from IP, timestamps, and security logs.
- Pages viewed, referring pages, cart and checkout activity, and interactions with the site.
- Cookies and similar technologies needed for accounts, carts, checkout, security, preferences, and—where enabled—analytics or marketing.
Information from service providers
Payment, fulfillment, shipping, email, fraud-prevention, and hosting providers may return transaction confirmations, delivery status, marketing status, or technical and security information needed to operate the store.
Purposes and Legal Bases
Where GDPR applies, we rely on the following legal bases:
| Purpose | Typical data | Legal basis |
|---|---|---|
| Process and deliver orders | Contact, address, order, and transaction data | Performance of a contract |
| Manage accounts and provide support | Account, contact, order, and message data | Contract and legitimate interests in customer service |
| Prevent fraud and protect the site | Transaction, device, IP, and log data | Legitimate interests and legal obligations |
| Keep tax and business records | Order, payment-status, and billing records | Legal obligations |
| Send requested newsletters | Name, email, and marketing preferences | Consent or another basis permitted by applicable law |
| Use non-essential analytics or advertising technologies | Cookie, device, and interaction data | Consent where required |
Where we rely on legitimate interests, we consider the impact on individuals and do not use that basis when privacy interests or fundamental rights override our interests.
International Data Transfers
Nerdy 9000 operates from the United States, and providers may process data in the United States or other countries. Those countries may have privacy laws different from the laws where you live.
When GDPR requires safeguards for a transfer outside the European Economic Area, we rely on an approved transfer mechanism where applicable, such as an adequacy decision, Standard Contractual Clauses, or another lawful safeguard. You may contact us for information about safeguards relevant to your data.
How Long We Keep Data
We keep personal data only for as long as reasonably necessary for the purpose collected, including:
- Order and transaction records for the period required by tax, accounting, chargeback, fraud-prevention, and consumer-protection rules.
- Account data while the account remains active and for a limited period afterward when needed for records, disputes, or security.
- Support messages for as long as needed to resolve the request and maintain reasonable service records.
- Newsletter data until you unsubscribe, withdraw consent, or the list is cleaned, subject to a minimal suppression record where necessary to honor the opt-out.
- Technical and security logs for a limited period based on security, troubleshooting, and legal needs.
We delete or anonymise data when it is no longer needed, unless law requires or permits continued retention.
Cookies and Similar Technologies
Necessary cookies support core features such as the cart, checkout, account login, security, and preferences. The site may also use analytics, advertising, or embedded-content technologies where enabled.
Where consent is legally required, non-essential cookies should not be used until consent is provided. You can also control cookies through browser settings, although blocking necessary cookies may prevent parts of the store from functioning.
Newsletter marketing includes an unsubscribe link. Withdrawing marketing consent does not affect the lawfulness of earlier processing.
Your Privacy Rights
Depending on the law that applies, you may have the right to:
- Be informed about how personal data is used.
- Request access to personal data.
- Correct inaccurate or incomplete data.
- Request deletion of data in qualifying circumstances.
- Restrict or object to certain processing.
- Receive certain data in a portable format.
- Withdraw consent at any time where processing relies on consent.
- Opt out of marketing communications.
- Complain to the data-protection authority where you live, work, or believe an infringement occurred.
We may need to verify your identity before completing a request. Rights are not absolute and may be limited by legal exceptions. We will not discriminate against you for exercising an applicable privacy right.
We do not intend to make decisions based solely on automated processing that produce legal or similarly significant effects about customers.
Security, Children, Updates, and Contact
Security
We use reasonable technical and organisational measures designed to protect personal data. No internet transmission or storage system can be guaranteed completely secure.
Children
The Services are not directed to children under 16, and we do not knowingly collect personal data from a child where parental consent is required. Contact us if you believe a child provided personal data improperly.
Policy updates
We may update this Policy when practices, providers, or legal requirements change. The revised version will be posted here with a new effective date, and additional notice will be provided where legally required.
Privacy requests
Submit requests through the Contact page or email privacy@nerdy9000.com. Do not send passwords, full payment details, or unnecessary identity documents in the initial message.