Privacy policy
Last updated: 10 August 2026
Pointblank Promotions Ltd trading as NOLTY UK & Europe ("NOLTY UK & Europe", "we", "us" or "our") operates this online store and website, including all related information, content, features, tools, products and services (collectively, the "Services").
Our online store is powered by Shopify, which provides the e-commerce platform that enables us to offer the Services to you.
This Privacy Policy explains how we collect, use, disclose and otherwise process your personal information when you visit or use our website, make a purchase, create an account, contact us, subscribe to marketing communications or otherwise interact with the Services.
For the purposes of applicable data protection laws, including the UK General Data Protection Regulation ("UK GDPR") and the Data Protection Act 2018, Pointblank Promotions Ltd is the data controller of the personal information described in this Privacy Policy, except where another organisation acts as an independent controller.
Please read this Privacy Policy carefully.
1. Personal Information We Collect
"Personal information" means information that identifies you or can reasonably be linked to you.
Depending on how you interact with our Services, we may collect or process the following categories of personal information:
Contact Information
This may include:
- your name
- billing address
- shipping address
- email address;
- telephone number
Order and Transaction Information
This may include:
- products you view, purchase, return or exchange
- products added to your basket or wishlist
- order history
- delivery information
- transaction details
- payment confirmation
- Payment Information
Payments made through our website are processed by Shopify and/or our payment service providers.
Depending on the payment method you use, payment information may include payment card details, billing information and other information required to process your payment.
We do not necessarily receive or store your complete payment card details ourselves.
Account Information
If you create an account, we may process information including:
- your username or email address
- account preferences and settings
- saved addresses
- order history
Communications With Us
We collect information that you provide when you contact us, including customer service enquiries, wholesale enquiries, product questions, complaints and other communications.
Device and Technical Information
When you use our website, we and our service providers may automatically collect certain technical information, including:
- IP address
- browser type
- device type
- operating system
- network information
- unique device or browser identifiers
- information about how your device interacts with our Services
- Website Usage Information
We may collect information about how you use our website, including:
- pages viewed
- products viewed
- links clicked
- items added to your basket
- referring websites
- interactions with our website
- date and time of visits
This information may be collected using cookies and similar technologies.
2. How We Collect Personal Information
We may collect personal information:
Directly From You
For example, when you:
- place an order
- create an account
- contact us
- subscribe to marketing communications
- complete a form
- request customer support
- otherwise provide information to us
Automatically
We may collect certain information automatically when you visit or interact with our website through cookies and similar technologies.
From Service Providers
We may receive information from organisations that help us operate our business, including Shopify, payment processors, delivery companies, fulfilment providers, analytics providers and technology providers.
From Business Partners and Other Third Parties
Where permitted by law, we may receive personal information from business partners, marketing platforms or other third parties.
3. How We Use Your Personal Information
We may use personal information for the following purposes.
Providing Our Services and Fulfilling Orders
We use personal information to:
- process and fulfil orders
- process payments
- arrange delivery
- provide order confirmations and updates
- manage returns, refunds and exchanges
- maintain customer accounts
- provide customer support
- respond to enquiries
- otherwise perform our contract with you
Improving Our Website and Services
We may use information to:
- understand how customers use our website
- improve website functionality
- improve our products and customer experience
- troubleshoot technical issues
- analyse business performance
- develop and improve our Services
- Marketing and Advertising
Where permitted by applicable law, we may use personal information to send you information about NOLTY products, launches, promotions, events or other news that we think may be relevant to you.
Where consent is required by law, we will obtain your consent before sending electronic direct marketing.
You may unsubscribe from marketing emails at any time by using the unsubscribe link included in our emails or by contacting us.
We may also use cookies and similar technologies for advertising and marketing purposes where permitted by law and, where required, with your consent.
Security and Fraud Prevention
We may use personal information to:
- verify transactions
- protect customer accounts
- detect and prevent fraud
- investigate suspicious or unlawful activity
- maintain the security of our website
- protect our customers, business and systems
Legal and Regulatory Requirements
We may process personal information where necessary to:
- comply with applicable laws
- maintain tax and accounting records
- respond to lawful requests from regulators, courts or government authorities
- establish, exercise or defend legal claims
- enforce our Terms of Service and other policies
4. Legal Bases for Processing
Where UK GDPR or EU data protection law applies, we process your personal information only where we have a valid legal basis.
Depending on the circumstances, our legal bases may include:
Performance of a Contract
We process information where necessary to enter into or perform a contract with you, including processing and delivering your orders, processing payments and managing returns.
Legal Obligation
We may process information where necessary to comply with legal obligations, including tax, accounting and regulatory requirements.
Legitimate Interests
We may process information where necessary for our legitimate business interests, provided those interests are not overridden by your rights and interests.
These legitimate interests may include:
- operating and improving our business
- providing customer support
- protecting our website and systems
- preventing fraud
- understanding how customers use our Services
- managing and improving our products and customer experience
Consent
Where required, we rely on your consent, including for certain marketing activities and non-essential cookies.
Where we rely on consent, you may withdraw your consent at any time.
5. Cookies and Similar Technologies
We and our service providers, including Shopify, may use cookies and similar technologies to operate and improve our website.
Cookies may be used to:
- remember your preferences
- maintain your shopping basket
- enable checkout and account functionality
- keep the website secure
- understand website usage and performance
- provide analytics
- support advertising and marketing
Where required by applicable law, we will obtain your consent before placing non-essential cookies on your device.
You can manage your cookie preferences through the cookie consent tools available on our website and through your browser settings.
Some cookies are necessary for the website to function and cannot be disabled through our consent tools.
6. How We Share Personal Information
We may share personal information with third parties where necessary to operate our business and provide the Services.
These may include:
Shopify
Our store is hosted by Shopify.
Shopify processes personal information in connection with providing the e-commerce platform and related services used to operate our store.
Payment Providers
Payment information may be shared with payment processors, banks and other financial service providers as necessary to process transactions.
Delivery and Fulfilment Providers
We may share information such as your name, delivery address, email address and telephone number with delivery companies, warehouses and fulfilment partners where necessary to deliver your order.
Technology and Service Providers
We may use third-party providers for services including:
- website hosting and infrastructure
- email communications
- analytics
- IT support
- fraud prevention
- customer support
- business administration
- Marketing and Advertising Partners
Where permitted by law and, where required, with your consent, we may share or make information available to marketing and advertising platforms to measure campaigns or provide relevant advertising.
Professional Advisers and Authorities
We may disclose personal information to accountants, lawyers, insurers, regulators, courts, government authorities or law enforcement agencies where reasonably necessary or legally required.
Business Transactions
If our business or assets are sold, transferred, reorganised or merged, personal information may be disclosed to relevant parties as part of that transaction, subject to appropriate safeguards.
We do not sell personal information for money.
7. Relationship With Shopify
Our Services are hosted by Shopify.
Shopify collects and processes certain personal information relating to your access to and use of our Services in order to provide and improve its platform and related services.
Information you submit through our store may therefore be transmitted to and processed by Shopify and its service providers.
In some circumstances, Shopify may act as an independent data controller for certain processing activities.
For more information about how Shopify processes personal information and the rights available to you, please refer to Shopify's Consumer Privacy Policy and Privacy Portal.
8. International Transfers
Some of our service providers, including Shopify and other technology providers, may process personal information outside the United Kingdom or European Economic Area ("EEA").
Where personal information is transferred internationally, we take steps required by applicable data protection law to ensure an appropriate level of protection.
Depending on the destination and circumstances, these safeguards may include:
- transferring information to countries recognised as providing an adequate level of data protection
- the European Commission's Standard Contractual Clauses
- the UK International Data Transfer Agreement or UK Addendum to the European Commission's Standard Contractual Clauses
- another legally recognised transfer mechanism
9. Data Retention
We retain personal information only for as long as reasonably necessary for the purposes for which it was collected, including to:
- fulfil orders
- maintain customer accounts
- provide customer service
- comply with tax, accounting and legal requirements
- resolve disputes
- establish, exercise or defend legal claims
The appropriate retention period depends on the nature of the information, why we collected it and any legal or regulatory requirements that apply.
When personal information is no longer required, we will delete or anonymise it where appropriate.
10. Security
We take reasonable technical and organisational measures designed to protect personal information against unauthorised access, loss, misuse, alteration or disclosure.
However, no method of transmission over the internet or electronic storage system can be guaranteed to be completely secure.
You are responsible for keeping any account credentials confidential and should not share your password or account access details with others.
11. Your Data Protection Rights
If you are located in the United Kingdom or EEA, you may have rights under applicable data protection law, including the right to:
- access personal information we hold about you
- correct inaccurate or incomplete personal information
- request deletion of your personal information in certain circumstances
- restrict processing of your personal information in certain circumstances
- object to processing based on legitimate interests in certain circumstances
- object to direct marketing at any time
- receive certain personal information in a portable format and, where applicable, request its transfer to another organisation
- withdraw consent at any time where processing is based on consent
These rights are not absolute and may be subject to legal exceptions.
To exercise your rights, please contact us at:
We may need to verify your identity before responding to your request.
We will respond within the time period required by applicable data protection law.
You will not normally be charged for exercising your data protection rights, although applicable law may permit us to charge a reasonable fee or refuse a request in certain limited circumstances.
12. Marketing Preferences
You may opt out of receiving marketing communications from us at any time.
For email marketing, you can use the unsubscribe link included in our marketing emails.
You can also contact us at:
Opting out of marketing communications will not prevent us from sending transactional or service-related communications, such as order confirmations, delivery updates or important information relating to your account or purchases.
13. Children's Privacy
Our Services are not intended for children, and we do not knowingly collect personal information directly from children where doing so would be unlawful.
If you believe that a child has provided personal information to us without appropriate authorisation, please contact us at hello@nolty.co.uk so that we can review the situation and take appropriate action.
14. Third-Party Websites and Links
Our Services may contain links to websites, social media platforms or other online services operated by third parties.
We do not control the privacy practices of these third parties.
If you follow a link to another website or platform, we recommend reviewing that organisation's privacy policy before providing personal information.
15. Complaints
If you have concerns about how we collect or use your personal information, please contact us first so that we can investigate your concern.
You can contact us at:
If you are located in the United Kingdom, you also have the right to lodge a complaint with the Information Commissioner's Office (ICO), the UK's data protection supervisory authority.
If you are located in the EEA, you may have the right to lodge a complaint with the data protection supervisory authority in the country where you live or work, or where you believe an infringement of applicable data protection law has occurred.
16. Changes to This Privacy Policy
We may update this Privacy Policy from time to time to reflect changes to our business, Services, technology, legal requirements or privacy practices.
When we make changes, we will publish the updated Privacy Policy on this page and update the "Last updated" date.
Where required by law, we will provide additional notice of material changes.
17. Contact Us
If you have questions about this Privacy Policy, our privacy practices or how we handle your personal information, or if you would like to exercise your data protection rights, please contact us:
Pointblank Promotions Ltd trading as NOLTY UK & Europe
Email: hello@nolty.co.uk
Address:
Pointblank Promotions Ltd, 57–61 Mortimer Street, London, W1W 8HS, United Kingdom
For the purposes of applicable data protection laws, Pointblank Promotions Ltd is the data controller of your personal information, except where another organisation acts as an independent controller in relation to specific processing activities.