Privacy policy

1. Who we are

NEVEROVER SRL is the data controller for the personal data described in this policy. That means we decide why and how your data is processed, and we are accountable for it under the GDPR, the UK GDPR, and Romanian data-protection law.

We handle every privacy request in writing so there's a clear record. Please send data-protection questions and requests to privacy@neverover.com rather than our general support inbox, so they reach the right people quickly. We have not appointed a statutory Data Protection Officer, as our processing does not trigger that requirement, but the privacy team above is your single point of contact for everything in this policy.

2. Scope

This policy covers personal data we process when you:

• visit or browse neverover.com and our related storefronts;
• create an account or place an order;
• sign up for our newsletter, SMS, or other marketing;
• contact us for support or interact with us on social media;
• take part in a survey, review, promotion, or competition.

It applies to shoppers and visitors worldwide. Where the GDPR, UK GDPR, the California Consumer Privacy Act, or another regional law gives you extra rights, we call that out in a clearly labelled block. Our products and services are aimed at adults; see Section 18 on children.

Some services we link to — payment providers, social platforms, shipping carriers — have their own privacy policies. This policy covers our processing as controller, not theirs. Where one of these providers acts as an independent controller of your data (for example, a social platform using data it collects directly from you), that activity is governed by their policy, and we flag those relationships in Section 10.

3. How this policy works

We've written this in plain language. Each section ends with a short "Basically" recap in a grey box, and the full detail sits above it. Where a right or rule only applies to certain shoppers, you'll see a labelled block such as "If you're in the EU / UK" or "California residents."

This Privacy Policy sits alongside two related documents:

• Our Terms of Service, which govern your use of the store and your purchases.
• Our Cookie Policy, which explains the cookies, pixels, and similar technologies we use and how to control them.

If there's ever a conflict between this policy and a specific notice we give you at the point we collect data (for example, a notice on a competition form), that specific notice applies to that collection.

4. Personal data we collect

We collect only what we need to run the store, fulfil your orders, and improve what we do. Depending on how you use neverover.com, that includes:

• Identity and contact data — your name, email address, and the delivery and billing details you give us. If you add a phone number for delivery updates, we store it.
• Account credentials — your username, a securely hashed password, and the unique identifiers that secure your account.
• Orders and purchase history — what you bought, prices paid, order dates, and records of returns, exchanges, and refunds.
• Payment data — your payment is processed by our payment provider. Card numbers are tokenized and held by the processor, not by us; we never see or store your full card details. We keep limited records such as the payment method type, the last four digits, and the transaction result.
• Delivery and address data — shipping and billing addresses, delivery instructions, and carrier tracking information.
• Communications and support — the emails, contact-form messages, reviews, and survey responses you send us, and our replies.
• Marketing preferences and engagement — whether you've opted in to email or SMS, your preferences, and how you interact with our messages (for example, opens and clicks).
• Device, network, and online-activity data — IP address, device and browser type, operating system, approximate (coarse) location derived from your IP, and how you navigate and use our site, collected through cookies and similar technologies.
• Inferences and segments — preferences and audience segments we build from your browsing and purchase behaviour (for example, the product categories you favour) to make marketing more relevant.
• User content — reviews, photos, comments, or other content you choose to post on our store or tag us in.

We do not seek to collect special-category data (such as health, biometric, or political data) and ask that you don't send it to us. The only data California law treats as "sensitive" that we routinely handle is your account login in combination with your password, which we use solely to secure your account.

5. Where we get your data

We get personal data from three places:

• Directly from you — when you create an account, place an order, sign up for marketing, post a review, enter a promotion, or contact us.
• Automatically — from your device as you use our site, through cookies, pixels, and server logs (see our Cookie Policy).
• From third parties — our payment provider confirms whether a payment succeeded, shipping carriers send delivery updates, and advertising and analytics partners tell us how you interacted with our ads. We may also receive data if you engage with us through a social platform.

6. Why we process your data

We use your personal data to:

• Fulfil your orders — take payment, arrange delivery, and handle returns, exchanges, and refunds.
• Run your account — create and maintain your profile, and let you track orders and start returns.
• Provide support — answer your questions and resolve issues by email.
• Send marketing you've asked for — newsletters, SMS, and offers, and measure how they perform.
• Personalise and improve — tailor recommendations and content, and analyse how the store is used so we can make it better and faster.
• Keep things secure — detect and prevent fraud, abuse, and unauthorised access.
• Meet our legal duties — comply with Romanian fiscal, accounting, and consumer law, and respond to lawful requests from authorities.

The table in Section 7 maps each of these purposes to the legal basis we rely on, the data it uses, and how long we keep it, so you can see exactly how the pieces fit together.

7. Our legal bases

Whenever we process personal data, we rely on a lawful basis to do it. The basis depends on the purpose.

8. Marketing and consent

We only send you marketing email or SMS if you've opted in, or where the law otherwise allows us to contact an existing customer about similar products. Every message gives you a simple way out.

• Email — click "unsubscribe" in any marketing email, or email privacy@neverover.com.
• SMS — reply STOP to any marketing text to opt out.
• Withdraw consent — you can change your mind at any time. Withdrawing consent doesn't affect messages we already sent or the lawfulness of earlier processing.

Opting out of marketing won't stop essential service messages, such as order confirmations, shipping updates, and returns information, which we send to run your purchase.

9. Cookies and tracking

We use cookies, pixels, local storage, and similar technologies to keep the store working, remember your preferences, measure traffic, and (with your consent where required) show you relevant ads. You control non-essential cookies through our preference centre and your browser.

For the full detail — what each cookie does, who sets it, how long it lasts, and how to change your choices — see our Cookie Policy.

10. Who we share your data with

We never sell your personal data for money. We share it only with the service providers that help us run the store, and only as needed. Each processor acts under a written data processing agreement and may use your data only on our documented instructions. The table below names each provider, what it does for us, and where it hosts data.

Some of these partners — in particular Meta, Google, TikTok, and Pinterest — may act as independent controllers for some of the advertising and analytics data they collect through our pixels; in that case their own privacy policies also apply, and you control this through consent (see our Cookie Policy). We may also disclose data to professional advisers (such as accountants and lawyers), and to courts, regulators, or law-enforcement bodies where the law requires it or to protect our rights. If our business is restructured, sold, or merged, data may transfer to the new owner under this policy.

11. International transfers

Some of our providers are based outside Romania, including in the United States and Canada. When we transfer your data abroad, we make sure it stays protected by an approved safeguard.

12. How long we keep your data

We keep personal data only as long as we need it for the purpose we collected it, or as long as the law requires. After that we delete or anonymise it. The Section 7 table sets out retention per purpose; the headline periods are:

Where we're required to keep records for tax or legal reasons, we retain the minimum needed even after you close your account, and we restrict access to those records to the compliance purpose alone.

13. How we protect your data

We use technical and organisational measures to keep your data safe, including:

• Encryption in transit — SSL/TLS protects data moving between your browser and our store.
• Tokenized payments — card data is tokenized and handled by our payment processor; we never store full card numbers.
• Access controls — staff access is limited on a least-privilege basis, so only authorised people can see customer data, and provider access is governed by data processing agreements.
• Ongoing testing — we and our providers run security reviews and monitoring to guard against unauthorised access and breaches.

No system is completely secure, so we can't promise absolute security — but we work to protect your data. If a personal-data breach is likely to result in a risk to your rights and freedoms, we will notify the competent supervisory authority without undue delay and, where the law requires, within 72 hours, and we will tell you directly where the breach is likely to result in a high risk to you.

14. Your GDPR rights

Depending on where you live, you have rights over your personal data. To exercise any of them, email privacy@neverover.com. We'll respond within the time the law allows — generally one month under the GDPR — and may need to verify your identity first. Using your rights is free, unless a request is manifestly unfounded or excessive.

15. California privacy rights

If you live in California, the California Consumer Privacy Act, as amended by the CPRA, gives you specific rights, and the right to know which categories of personal information we collect and disclose.

16. Other US state privacy rights

If you live in a US state with a comprehensive privacy law, you have rights over your personal data too.

17. Automated decisions and profiling

We do not make decisions that produce legal or similarly significant effects about you based solely on automated processing.

We do use profiling for marketing — building segments from your browsing and purchase history to show you more relevant products and ads. Our fraud screening also uses automated signals, but a decision to cancel an order for suspected fraud involves human review. You can opt out of marketing profiling at any time by withdrawing marketing consent, using our preference centre, or emailing privacy@neverover.com.

18. Children

Our store is meant for adults and is not directed to children. We don't knowingly collect personal data from children under 16 in the EU/EEA, or under 13 in the United States.

If you believe a child has given us personal data without the consent of a parent or guardian, email privacy@neverover.com and we'll delete it.

19. Changes to this policy

We may update this policy as our business, technology, or the law changes. When we do, we'll change the "last updated" date at the top. If the changes are significant, we'll give you clearer notice — for example, by email or a notice on the site. Please check back from time to time.

20. Contact us

For any privacy or data-protection question or request, contact our privacy team:

• Email — privacy@neverover.com
• Post — NEVEROVER SRL, Șoseaua Mihai Bravu nr. 199, 021323 Bucharest, Romania

For general help with orders, returns, or products, email support@neverover.com.