Effective Date: July 20, 2026
Last Updated: July 20, 2026
1. Introduction
This Privacy Policy explains how NativaFiber collects, uses, discloses, stores, and protects personal information when you:
- visit nativafiber.com or a United States version of our website;
- create or use a customer account;
- place an order;
- purchase or redeem a gift card;
- subscribe to marketing communications;
- contact customer support;
- submit a review, inquiry, or other content;
- interact with our advertisements; or
- otherwise use our products, services, and website features.
NativaFiber is a trade name operated by:
Legal operator: Svitlana Bodanova
Legal form: Austrian sole proprietorship
Business address: Längdorfer Straße, 30, St.Jakob im Rosental, 9184, AUSTRIA
In this Privacy Policy, “NativaFiber,” “we,” “us,” and “our” refer to the legal operator identified above.
NativaFiber sells blankets, throws, and related home textile products made primarily from wool and other natural fibers.
2. Scope of This Privacy Policy
This Privacy Policy applies to personal information processed through our United States website, online store, customer accounts, checkout, customer service, marketing, analytics, and advertising activities.
- websites or services operated independently by third parties;
- a payment provider’s independent processing activities;
- shipping carriers’ independent processing activities;
- information relating exclusively to a business or legal entity where it does not identify an individual; or
- employment or contractor information governed by a separate notice.
Links to third-party websites are provided for convenience. Their privacy practices are governed by their own privacy policies.
3. Personal Information We Collect
The information we collect depends on how you interact with NativaFiber.
3.1 Contact and identity information
- first and last name;
- billing address;
- shipping address;
- email address;
- telephone number;
- account identifier;
- customer number;
- country, state, region, city, and postal code; and
- information identifying an authorized recipient of an order.
3.2 Account information
If you create an account, we may collect:
- email address;
- account credentials;
- saved addresses;
- order history;
- wish lists or saved products;
- communication preferences; and
- account activity.
Passwords are processed through our account system. We do not display your password to our staff.
3.3 Order and transaction information
When you make a purchase or request a refund, we may collect:
- products ordered;
- product variants, quantities, and prices;
- discounts and promotional codes;
- gift card information;
- order number;
- billing and shipping information;
- delivery method;
- shipment tracking information;
- payment status;
- refund and return information;
- customs-related information where required; and
- communications concerning the transaction.
3.4 Payment information
Payments may be processed by third-party payment providers such as Stripe or another provider displayed during checkout.
The payment provider may collect:
- payment card number;
- expiration date;
- card security code;
- billing details;
- bank or wallet information;
- transaction authentication information; and
- fraud-prevention data.
NativaFiber generally does not receive or store the complete payment card number or card security code. We may receive limited payment information, such as:
- payment method type;
- last four digits of a card;
- card brand;
- payment status;
- transaction identifier; and
- fraud or authentication results.
The payment provider processes payment information under its own privacy policy and contractual obligations.
3.5 Customer service and communications
When you contact us, we may collect:
- the contents of your message;
- your contact information;
- order or account information;
- attachments or photographs you provide;
- records of customer support conversations;
- information about a damaged, lost, or returned product; and
- any other information you voluntarily provide.
Please do not send government identification numbers, complete payment card numbers, passwords, health information, or other unnecessary sensitive information through ordinary email or chat.
3.6 Reviews and user-submitted content
If reviews or similar features are available, we may collect:
- display name;
- review text;
- rating;
- photographs or videos;
- product information; and
- information about whether the reviewer purchased the product.
Content submitted for public display may be visible to other website visitors.
3.7 Device, browser, and network information
When you visit our website, our systems and service providers may automatically collect:
- IP address;
- browser type and version;
- device type;
- operating system;
- language;
- time zone;
- approximate location derived from the IP address;
- device identifiers;
- referring page or advertising source;
- pages viewed;
- links and buttons used;
- date and time of access;
- session duration;
- shopping cart activity;
- checkout activity;
- error logs; and
- security and fraud signals.
3.8 Marketing and advertising information
Where applicable, we may collect:
- newsletter subscription status;
- marketing consent records;
- email engagement information;
- advertising identifiers;
- campaign source;
- interactions with advertisements;
- products viewed or added to a cart; and
- inferred interests or product preferences.
Advertising and analytics data is collected through non-essential cookies or similar technologies only where permitted and, where required, after you provide consent.
3.9 Business and wholesale inquiries
If you contact us regarding wholesale orders, manufacturing, partnerships, or another business relationship, we may collect:
- your name;
- professional contact details;
- company name;
- job title;
- business address;
- tax or registration information;
- anticipated order volume;
- product requirements; and
- the contents of your inquiry.
4. Sources of Personal Information
We may obtain personal information:
- Directly from you, including through checkout, accounts, forms, email, chat, reviews, and privacy requests.
- Automatically from your device, including through cookies, server logs, security systems, analytics technologies, and advertising technologies.
- From service providers, such as payment providers, shipping carriers, fraud-prevention providers, customer support platforms, and technical service providers.
- From advertising and analytics partners, where you have permitted the applicable technologies.
- From another person, such as when someone purchases a gift, places an order for you, or names you as the recipient.
5. How We Use Personal Information
We may use personal information for the following purposes.
5.1 Processing and delivering orders
- accept and process orders;
- confirm payment;
- issue invoices and receipts;
- prepare and ship products;
- provide shipment tracking;
- process customs documentation;
- communicate about an order;
- handle returns, refunds, replacements, and complaints; and
- provide gift cards or other purchased services.
5.2 Managing accounts
- create and maintain accounts;
- authenticate users;
- save addresses and preferences;
- display order history;
- prevent unauthorized access; and
- respond to account requests.
5.3 Customer support
- answer questions;
- investigate delivery or product issues;
- resolve complaints;
- process warranty, refund, or return requests; and
- maintain a record of the resolution.
5.4 Website operation and improvement
- display website content;
- maintain shopping cart and checkout functions;
- remember preferences;
- detect technical errors;
- understand website usage;
- improve navigation and content;
- test website features; and
- measure website performance.
5.5 Security and fraud prevention
- protect accounts and transactions;
- prevent fraudulent payments;
- detect abusive or unauthorized activity;
- enforce website terms;
- investigate security incidents; and
- protect NativaFiber, customers, service providers, and other persons.
5.6 Marketing
Subject to applicable law and your choices, we may use information to:
- send newsletters;
- announce products or collections;
- send abandoned-cart reminders;
- provide promotional offers;
- measure campaign performance;
- personalize marketing content; and
- display advertising on third-party services.
You may unsubscribe from marketing emails at any time. Transactional messages relating to an order, account, security matter, or privacy request are not marketing messages.
5.7 Legal and administrative purposes
We may use information to:
- comply with tax, accounting, customs, consumer protection, and other legal obligations;
- maintain legally required business records;
- establish, exercise, or defend legal claims;
- respond to lawful government requests;
- complete audits;
- enforce contracts; and
- manage a merger, sale, restructuring, financing, or transfer of the business.
6. Legal Bases Under European Data Protection Law
Because NativaFiber is operated from Austria, we also process personal data under the General Data Protection Regulation.
Depending on the processing activity, our legal basis may be:
Performance of a contract
We rely on contractual necessity to:
- process orders and payments;
- deliver products;
- maintain customer accounts;
- process returns and refunds; and
- provide requested customer support.
Legal obligation
We rely on legal obligations to:
- issue and retain invoices;
- maintain tax and accounting records;
- comply with customs requirements;
- respond to legally binding requests; and
- comply with product, consumer, and financial regulations.
Legitimate interests
We may rely on legitimate interests to:
- secure the website;
- prevent fraud;
- maintain technical logs;
- improve basic website functionality;
- manage customer relationships;
- establish or defend legal claims; and
- operate and protect our business.
We balance these interests against the impact on your rights.
Consent
We rely on consent where required for:
- non-essential cookies;
- analytics technologies;
- advertising technologies;
- certain marketing communications; and
- other optional processing identified when consent is requested.
You may withdraw consent at any time without affecting processing that occurred before withdrawal.
7. Cookies and Similar Technologies
Our website may use cookies, local storage, pixels, tags, and similar technologies.
7.1 Essential technologies
Essential technologies may be used for:
- website security;
- session management;
- shopping cart functions;
- checkout;
- account authentication;
- language, market, and currency selection;
- fraud prevention; and
- storage of privacy choices.
These technologies are necessary for the website to function and generally cannot be disabled through our consent tool.
7.2 Preference technologies
Preference technologies may remember choices such as:
- language;
- market;
- currency;
- display preferences; and
- previously selected settings.
7.3 Analytics technologies
With your consent where required, analytics technologies may help us understand:
- page views;
- navigation paths;
- device categories;
- approximate location;
- traffic sources;
- website errors; and
- aggregate website performance.
7.4 Advertising technologies
With your consent where required, advertising technologies may be used to:
- measure advertisements;
- limit repeated advertisements;
- create advertising audiences;
- show advertisements based on website activity; and
- understand whether an advertisement resulted in a visit or purchase.
You can change your choices through:
You can change your choices at any time by selecting “Cookie Settings” in the footer. This option opens the cookie management panel.
Disabling non-essential cookies does not prevent you from placing an order, but some optional features may not work.
8. How We Disclose Personal Information
We may disclose personal information to the following categories of recipients.
8.1 Commerce and infrastructure providers
- website hosting;
- content delivery;
- e-commerce functionality;
- databases;
- accounts;
- checkout;
- backups;
- cybersecurity; and
- technical monitoring.
These may include providers such as Saleor, Cloudflare, hosting providers, and related infrastructure providers.
8.2 Payment providers
Payment information may be disclosed to payment providers such as Stripe and to banks, card networks, wallet providers, or authentication services involved in processing the transaction.
8.3 Shipping and fulfillment providers
We disclose delivery information to:
- postal operators;
- couriers;
- freight providers;
- fulfillment partners;
- customs brokers; and
- customs or import authorities.
8.4 Communications and customer service providers
We may use providers that support:
- email delivery;
- transactional messages;
- customer support;
- live chat;
- contact forms; and
- customer relationship management.
8.5 Analytics and advertising providers
Where permitted by your privacy choices, we may disclose online identifiers, device information, website activity, and inferred interests to analytics and advertising providers.
8.6 Professional advisers
We may disclose information to:
- accountants;
- tax advisers;
- lawyers;
- insurers;
- auditors; and
- other professional advisers.
8.7 Authorities and legal recipients
We may disclose information when reasonably necessary to:
- comply with law;
- respond to a court order or lawful government request;
- protect legal rights;
- investigate fraud or security incidents;
- protect the safety of a person; or
- enforce our agreements.
8.8 Business transfers
Information may be disclosed as part of a proposed or completed:
- sale;
- merger;
- reorganization;
- financing;
- transfer of assets; or
- succession of the business.
The recipient must process the information subject to applicable legal protections.
9. Sale, Sharing, and Targeted Advertising
NativaFiber does not sell personal information to third parties in exchange for direct monetary payment.
However, certain disclosures through advertising cookies, pixels, or similar technologies may be considered:
- a “sale” of personal information;
- “sharing” for cross-context behavioral advertising; or
- processing for targeted advertising
under certain United States state privacy laws.
When advertising technologies are enabled, the categories of information involved may include:
- online identifiers;
- IP address;
- device and browser information;
- website activity;
- products viewed;
- cart activity;
- advertising interactions;
- approximate location; and
- inferred product interests.
The recipients may include advertising networks, measurement providers, and social media or search advertising platforms.
You can change your cookie preferences at any time by selecting “Cookie Settings” in the footer. This option opens the cookie management panel, where you can enable or disable optional analytics and marketing technologies.
10. Browser Privacy Signals
Legacy “Do Not Track” browser signals do not have a single uniform legal standard. Our website may not respond to a legacy Do Not Track setting.
Where required by applicable law, we process legally recognized opt-out preference signals, such as Global Privacy Control, as a request to opt out of sale, sharing, or targeted advertising for the browser or device that sends the signal.
You may still need to submit a separate request if you want the opt-out associated with your customer account or email address.
11. Data Retention
We retain personal information only for as long as reasonably necessary for the purposes described in this Privacy Policy, including legal, accounting, security, and dispute-resolution requirements.
Our typical retention criteria are:
When information is no longer required, we delete it, anonymize it, or securely isolate it until deletion is technically completed.
Backup copies may remain for a limited period and are protected from ordinary use.
12. Data Security
We use reasonable technical and organizational safeguards appropriate to the nature of the information and the risks involved.
These measures may include:
- restricted administrative access;
- authentication controls;
- encryption in transit;
- provider access controls;
- logging and monitoring;
- backups;
- software updates;
- fraud-prevention tools;
- data minimization; and
- contractual confidentiality and data protection obligations.
No website, transmission method, or storage system can be guaranteed to be completely secure. You are responsible for maintaining the confidentiality of your account credentials and for notifying us if you suspect unauthorized access.
13. International Data Transfers
NativaFiber is operated from Austria. Personal information collected from United States customers may therefore be transferred to and processed in:
- Austria;
- other countries in the European Economic Area;
- the United States;
- Canada; and
- other countries where our service providers operate.
Privacy and government-access laws may differ between countries.
Where required under European data protection law, we use appropriate safeguards for international transfers, such as:
- an adequacy decision;
- Standard Contractual Clauses;
- contractual and technical safeguards; or
- another legally recognized transfer mechanism.
14. United States State Privacy Rights
Depending on your state of residence and whether the relevant law applies to NativaFiber, you may have the right to:
- confirm whether we process your personal information;
- access personal information;
- obtain a copy of personal information;
- correct inaccurate personal information;
- delete personal information;
- obtain portable data;
- opt out of the sale of personal information;
- opt out of sharing for cross-context behavioral advertising;
- opt out of targeted advertising;
- opt out of certain profiling producing legal or similarly significant effects;
- limit certain uses of sensitive personal information;
- withdraw consent where processing is based on consent;
- appeal a refusal of a privacy request; and
- receive equal service without unlawful discrimination for exercising privacy rights.
These rights are subject to legal definitions, applicability thresholds, verification requirements, and exceptions.
For example, we may retain information needed to:
- complete a transaction;
- provide a requested product;
- detect fraud;
- secure our systems;
- maintain tax and accounting records;
- comply with law; or
- establish or defend legal claims.
15. California Privacy Notice
This section supplements the rest of the Privacy Policy for California residents.
15.1 Categories of personal information
Depending on how you interact with NativaFiber, we may collect the following California categories:
We collect these categories for the purposes described in Sections 5 and 6.
15.2 Categories disclosed for business purposes
We may disclose the categories above to:
- hosting and infrastructure providers;
- payment providers;
- shipping providers;
- customer service providers;
- fraud-prevention and security providers;
- analytics providers;
- advertising providers;
- professional advisers; and
- government or legal recipients.
15.3 Categories sold or shared
We do not sell personal information for direct monetary payment.
If advertising technologies are enabled, identifiers, commercial information, internet activity, approximate geolocation, and inferences may be disclosed in a manner considered “selling” or “sharing” under California law.
You may opt out through the Your Privacy Choices link.
15.4 Sensitive personal information
We use sensitive personal information only for purposes reasonably necessary to:
- authenticate users;
- process transactions;
- prevent fraud;
- secure accounts;
- provide requested services; and
- comply with law.
We do not use sensitive personal information to infer characteristics about you beyond what is reasonably necessary for these purposes.
15.5 California rights
Subject to applicable law, California residents may request:
- disclosure of categories and specific pieces of personal information;
- disclosure of sources, purposes, and recipients;
- correction;
- deletion;
- opt-out of sale or sharing;
- limitation of certain uses of sensitive personal information; and
- freedom from unlawful discrimination.
15.6 Authorized agents
A California resident may use an authorized agent to submit a request.
- proof that the agent is authorized;
- verification of the consumer’s identity; or
- direct confirmation that the consumer authorized the request.
We will not require you to create an account solely to submit an opt-out request.
16. How to Exercise United States Privacy Rights
Submit a request through:
- your name;
- your email address;
- your state of residence;
- the right you want to exercise; and
- sufficient information to identify the relevant account or transaction.
We may request additional information to reasonably verify your identity. We will use verification information only to process the request.
Where applicable, you may appeal our decision by replying to our response or submitting an appeal through the privacy request form and writing “Privacy Appeal.”
17. Additional GDPR Rights
Because NativaFiber is established in Austria, you may also have the following rights under the GDPR:
- access to your personal data;
- correction of inaccurate data;
- erasure;
- restriction of processing;
- data portability;
- objection to processing based on legitimate interests;
- objection to direct marketing;
- withdrawal of consent; and
- the right to lodge a complaint with a competent data protection authority.
The competent supervisory authority for the Austrian operator is generally:
Austrian Data Protection AuthorityÖsterreichische Datenschutzbehörde
You may also contact a data protection authority in the country where you live, work, or believe an infringement occurred where GDPR jurisdiction applies.
18. Marketing Communications
You can unsubscribe from marketing emails by:
- selecting the unsubscribe link in the message;
- changing account preferences, where available; or
- contacting [email protected].
We may retain your email address on a suppression list to ensure that we respect your request.
Unsubscribing from marketing does not stop:
- order confirmations;
- delivery updates;
- account security messages;
- refund communications;
- responses to customer support requests; or
- legally required notices.
19. Children’s Privacy
Our website and products are intended for a general adult audience and are not directed to children under 13.
We do not knowingly collect personal information directly from children under 13. If we learn that we collected such information without legally valid parental consent, we will take reasonable steps to delete it.
Persons under 18 should use the website only with the involvement of a parent or legal guardian.
If you believe a child has provided personal information to us, contact [email protected].
20. Automated Decision-Making and Profiling
We do not use personal information to make solely automated decisions that produce legal or similarly significant effects concerning customers.
Analytics or advertising tools may infer general product interests from website activity. Such processing is used for website measurement, personalization, or advertising and is subject to your cookie and opt-out choices.
21. Changes to This Privacy Policy
We may update this Privacy Policy when:
- our services change;
- our providers change;
- we introduce new data uses;
- applicable law changes; or
- we improve our privacy practices.
The current version will be posted on this page with an updated “Last Updated” date.
Where a change materially affects how we use previously collected personal information, we will provide additional notice or request consent where required.
22. Contact Us
Questions, complaints, and privacy requests may be directed to:
NativaFiberOperated by: Svitlana Bodanova, Längdorfer Straße, 30, St.Jakob im Rosental, 9184, Austria
Please write “Privacy Request” in the subject line.
Effective Date: July 20, 2026
1. Introduction
This Privacy Policy explains how NativaFiber collects, uses, discloses, stores, and protects personal information when you:
- visit nativafiber.com or a United States version of our website;
- create or use a customer account;
- place an order;
- purchase or redeem a gift card;
- subscribe to marketing communications;
- contact customer support;
- submit a review, inquiry, or other content;
- interact with our advertisements; or
- otherwise use our products, services, and website features.
NativaFiber is a trade name operated by:
Legal operator: Svitlana Bodanova
Legal form: Austrian sole proprietorship
Business address: Längdorfer Straße, 30, St.Jakob im Rosental, 9184, AUSTRIA
In this Privacy Policy, “NativaFiber,” “we,” “us,” and “our” refer to the legal operator identified above.
NativaFiber sells blankets, throws, and related home textile products made primarily from wool and other natural fibers.
2. Scope of This Privacy Policy
This Privacy Policy applies to personal information processed through our United States website, online store, customer accounts, checkout, customer service, marketing, analytics, and advertising activities.
- websites or services operated independently by third parties;
- a payment provider’s independent processing activities;
- shipping carriers’ independent processing activities;
- information relating exclusively to a business or legal entity where it does not identify an individual; or
- employment or contractor information governed by a separate notice.
Links to third-party websites are provided for convenience. Their privacy practices are governed by their own privacy policies.
3. Personal Information We Collect
The information we collect depends on how you interact with NativaFiber.
3.1 Contact and identity information
- first and last name;
- billing address;
- shipping address;
- email address;
- telephone number;
- account identifier;
- customer number;
- country, state, region, city, and postal code; and
- information identifying an authorized recipient of an order.
3.2 Account information
If you create an account, we may collect:
- email address;
- account credentials;
- saved addresses;
- order history;
- wish lists or saved products;
- communication preferences; and
- account activity.
Passwords are processed through our account system. We do not display your password to our staff.
3.3 Order and transaction information
When you make a purchase or request a refund, we may collect:
- products ordered;
- product variants, quantities, and prices;
- discounts and promotional codes;
- gift card information;
- order number;
- billing and shipping information;
- delivery method;
- shipment tracking information;
- payment status;
- refund and return information;
- customs-related information where required; and
- communications concerning the transaction.
3.4 Payment information
Payments may be processed by third-party payment providers such as Stripe or another provider displayed during checkout.
The payment provider may collect:
- payment card number;
- expiration date;
- card security code;
- billing details;
- bank or wallet information;
- transaction authentication information; and
- fraud-prevention data.
NativaFiber generally does not receive or store the complete payment card number or card security code. We may receive limited payment information, such as:
- payment method type;
- last four digits of a card;
- card brand;
- payment status;
- transaction identifier; and
- fraud or authentication results.
The payment provider processes payment information under its own privacy policy and contractual obligations.
3.5 Customer service and communications
When you contact us, we may collect:
- the contents of your message;
- your contact information;
- order or account information;
- attachments or photographs you provide;
- records of customer support conversations;
- information about a damaged, lost, or returned product; and
- any other information you voluntarily provide.
Please do not send government identification numbers, complete payment card numbers, passwords, health information, or other unnecessary sensitive information through ordinary email or chat.
3.6 Reviews and user-submitted content
If reviews or similar features are available, we may collect:
- display name;
- review text;
- rating;
- photographs or videos;
- product information; and
- information about whether the reviewer purchased the product.
Content submitted for public display may be visible to other website visitors.
3.7 Device, browser, and network information
When you visit our website, our systems and service providers may automatically collect:
- IP address;
- browser type and version;
- device type;
- operating system;
- language;
- time zone;
- approximate location derived from the IP address;
- device identifiers;
- referring page or advertising source;
- pages viewed;
- links and buttons used;
- date and time of access;
- session duration;
- shopping cart activity;
- checkout activity;
- error logs; and
- security and fraud signals.
3.8 Marketing and advertising information
Where applicable, we may collect:
- newsletter subscription status;
- marketing consent records;
- email engagement information;
- advertising identifiers;
- campaign source;
- interactions with advertisements;
- products viewed or added to a cart; and
- inferred interests or product preferences.
Advertising and analytics data is collected through non-essential cookies or similar technologies only where permitted and, where required, after you provide consent.
3.9 Business and wholesale inquiries
If you contact us regarding wholesale orders, manufacturing, partnerships, or another business relationship, we may collect:
- your name;
- professional contact details;
- company name;
- job title;
- business address;
- tax or registration information;
- anticipated order volume;
- product requirements; and
- the contents of your inquiry.
4. Sources of Personal Information
We may obtain personal information:
- Directly from you, including through checkout, accounts, forms, email, chat, reviews, and privacy requests.
- Automatically from your device, including through cookies, server logs, security systems, analytics technologies, and advertising technologies.
- From service providers, such as payment providers, shipping carriers, fraud-prevention providers, customer support platforms, and technical service providers.
- From advertising and analytics partners, where you have permitted the applicable technologies.
- From another person, such as when someone purchases a gift, places an order for you, or names you as the recipient.
5. How We Use Personal Information
We may use personal information for the following purposes.
5.1 Processing and delivering orders
- accept and process orders;
- confirm payment;
- issue invoices and receipts;
- prepare and ship products;
- provide shipment tracking;
- process customs documentation;
- communicate about an order;
- handle returns, refunds, replacements, and complaints; and
- provide gift cards or other purchased services.
5.2 Managing accounts
- create and maintain accounts;
- authenticate users;
- save addresses and preferences;
- display order history;
- prevent unauthorized access; and
- respond to account requests.
5.3 Customer support
- answer questions;
- investigate delivery or product issues;
- resolve complaints;
- process warranty, refund, or return requests; and
- maintain a record of the resolution.
5.4 Website operation and improvement
- display website content;
- maintain shopping cart and checkout functions;
- remember preferences;
- detect technical errors;
- understand website usage;
- improve navigation and content;
- test website features; and
- measure website performance.
5.5 Security and fraud prevention
- protect accounts and transactions;
- prevent fraudulent payments;
- detect abusive or unauthorized activity;
- enforce website terms;
- investigate security incidents; and
- protect NativaFiber, customers, service providers, and other persons.
5.6 Marketing
Subject to applicable law and your choices, we may use information to:
- send newsletters;
- announce products or collections;
- send abandoned-cart reminders;
- provide promotional offers;
- measure campaign performance;
- personalize marketing content; and
- display advertising on third-party services.
You may unsubscribe from marketing emails at any time. Transactional messages relating to an order, account, security matter, or privacy request are not marketing messages.
5.7 Legal and administrative purposes
We may use information to:
- comply with tax, accounting, customs, consumer protection, and other legal obligations;
- maintain legally required business records;
- establish, exercise, or defend legal claims;
- respond to lawful government requests;
- complete audits;
- enforce contracts; and
- manage a merger, sale, restructuring, financing, or transfer of the business.
6. Legal Bases Under European Data Protection Law
Because NativaFiber is operated from Austria, we also process personal data under the General Data Protection Regulation.
Depending on the processing activity, our legal basis may be:
Performance of a contract
We rely on contractual necessity to:
- process orders and payments;
- deliver products;
- maintain customer accounts;
- process returns and refunds; and
- provide requested customer support.
Legal obligation
We rely on legal obligations to:
- issue and retain invoices;
- maintain tax and accounting records;
- comply with customs requirements;
- respond to legally binding requests; and
- comply with product, consumer, and financial regulations.
Legitimate interests
We may rely on legitimate interests to:
- secure the website;
- prevent fraud;
- maintain technical logs;
- improve basic website functionality;
- manage customer relationships;
- establish or defend legal claims; and
- operate and protect our business.
We balance these interests against the impact on your rights.
Consent
We rely on consent where required for:
- non-essential cookies;
- analytics technologies;
- advertising technologies;
- certain marketing communications; and
- other optional processing identified when consent is requested.
You may withdraw consent at any time without affecting processing that occurred before withdrawal.
7. Cookies and Similar Technologies
Our website may use cookies, local storage, pixels, tags, and similar technologies.
7.1 Essential technologies
Essential technologies may be used for:
- website security;
- session management;
- shopping cart functions;
- checkout;
- account authentication;
- language, market, and currency selection;
- fraud prevention; and
- storage of privacy choices.
These technologies are necessary for the website to function and generally cannot be disabled through our consent tool.
7.2 Preference technologies
Preference technologies may remember choices such as:
- language;
- market;
- currency;
- display preferences; and
- previously selected settings.
7.3 Analytics technologies
With your consent where required, analytics technologies may help us understand:
- page views;
- navigation paths;
- device categories;
- approximate location;
- traffic sources;
- website errors; and
- aggregate website performance.
7.4 Advertising technologies
With your consent where required, advertising technologies may be used to:
- measure advertisements;
- limit repeated advertisements;
- create advertising audiences;
- show advertisements based on website activity; and
- understand whether an advertisement resulted in a visit or purchase.
You can change your choices through:
You can change your choices at any time by selecting “Cookie Settings” in the footer. This option opens the cookie management panel.
Disabling non-essential cookies does not prevent you from placing an order, but some optional features may not work.
8. How We Disclose Personal Information
We may disclose personal information to the following categories of recipients.
8.1 Commerce and infrastructure providers
- website hosting;
- content delivery;
- e-commerce functionality;
- databases;
- accounts;
- checkout;
- backups;
- cybersecurity; and
- technical monitoring.
These may include providers such as Saleor, Cloudflare, hosting providers, and related infrastructure providers.
8.2 Payment providers
Payment information may be disclosed to payment providers such as Stripe and to banks, card networks, wallet providers, or authentication services involved in processing the transaction.
8.3 Shipping and fulfillment providers
We disclose delivery information to:
- postal operators;
- couriers;
- freight providers;
- fulfillment partners;
- customs brokers; and
- customs or import authorities.
8.4 Communications and customer service providers
We may use providers that support:
- email delivery;
- transactional messages;
- customer support;
- live chat;
- contact forms; and
- customer relationship management.
8.5 Analytics and advertising providers
Where permitted by your privacy choices, we may disclose online identifiers, device information, website activity, and inferred interests to analytics and advertising providers.
8.6 Professional advisers
We may disclose information to:
- accountants;
- tax advisers;
- lawyers;
- insurers;
- auditors; and
- other professional advisers.
8.7 Authorities and legal recipients
We may disclose information when reasonably necessary to:
- comply with law;
- respond to a court order or lawful government request;
- protect legal rights;
- investigate fraud or security incidents;
- protect the safety of a person; or
- enforce our agreements.
8.8 Business transfers
Information may be disclosed as part of a proposed or completed:
- sale;
- merger;
- reorganization;
- financing;
- transfer of assets; or
- succession of the business.
The recipient must process the information subject to applicable legal protections.
9. Sale, Sharing, and Targeted Advertising
NativaFiber does not sell personal information to third parties in exchange for direct monetary payment.
However, certain disclosures through advertising cookies, pixels, or similar technologies may be considered:
- a “sale” of personal information;
- “sharing” for cross-context behavioral advertising; or
- processing for targeted advertising
under certain United States state privacy laws.
When advertising technologies are enabled, the categories of information involved may include:
- online identifiers;
- IP address;
- device and browser information;
- website activity;
- products viewed;
- cart activity;
- advertising interactions;
- approximate location; and
- inferred product interests.
The recipients may include advertising networks, measurement providers, and social media or search advertising platforms.
You can change your cookie preferences at any time by selecting “Cookie Settings” in the footer. This option opens the cookie management panel, where you can enable or disable optional analytics and marketing technologies.
10. Browser Privacy Signals
Legacy “Do Not Track” browser signals do not have a single uniform legal standard. Our website may not respond to a legacy Do Not Track setting.
Where required by applicable law, we process legally recognized opt-out preference signals, such as Global Privacy Control, as a request to opt out of sale, sharing, or targeted advertising for the browser or device that sends the signal.
You may still need to submit a separate request if you want the opt-out associated with your customer account or email address.
11. Data Retention
We retain personal information only for as long as reasonably necessary for the purposes described in this Privacy Policy, including legal, accounting, security, and dispute-resolution requirements.
Our typical retention criteria are:
When information is no longer required, we delete it, anonymize it, or securely isolate it until deletion is technically completed.
Backup copies may remain for a limited period and are protected from ordinary use.
12. Data Security
We use reasonable technical and organizational safeguards appropriate to the nature of the information and the risks involved.
These measures may include:
- restricted administrative access;
- authentication controls;
- encryption in transit;
- provider access controls;
- logging and monitoring;
- backups;
- software updates;
- fraud-prevention tools;
- data minimization; and
- contractual confidentiality and data protection obligations.
No website, transmission method, or storage system can be guaranteed to be completely secure. You are responsible for maintaining the confidentiality of your account credentials and for notifying us if you suspect unauthorized access.
13. International Data Transfers
NativaFiber is operated from Austria. Personal information collected from United States customers may therefore be transferred to and processed in:
- Austria;
- other countries in the European Economic Area;
- the United States;
- Canada; and
- other countries where our service providers operate.
Privacy and government-access laws may differ between countries.
Where required under European data protection law, we use appropriate safeguards for international transfers, such as:
- an adequacy decision;
- Standard Contractual Clauses;
- contractual and technical safeguards; or
- another legally recognized transfer mechanism.
14. United States State Privacy Rights
Depending on your state of residence and whether the relevant law applies to NativaFiber, you may have the right to:
- confirm whether we process your personal information;
- access personal information;
- obtain a copy of personal information;
- correct inaccurate personal information;
- delete personal information;
- obtain portable data;
- opt out of the sale of personal information;
- opt out of sharing for cross-context behavioral advertising;
- opt out of targeted advertising;
- opt out of certain profiling producing legal or similarly significant effects;
- limit certain uses of sensitive personal information;
- withdraw consent where processing is based on consent;
- appeal a refusal of a privacy request; and
- receive equal service without unlawful discrimination for exercising privacy rights.
These rights are subject to legal definitions, applicability thresholds, verification requirements, and exceptions.
For example, we may retain information needed to:
- complete a transaction;
- provide a requested product;
- detect fraud;
- secure our systems;
- maintain tax and accounting records;
- comply with law; or
- establish or defend legal claims.
15. California Privacy Notice
This section supplements the rest of the Privacy Policy for California residents.
15.1 Categories of personal information
Depending on how you interact with NativaFiber, we may collect the following California categories:
We collect these categories for the purposes described in Sections 5 and 6.
15.2 Categories disclosed for business purposes
We may disclose the categories above to:
- hosting and infrastructure providers;
- payment providers;
- shipping providers;
- customer service providers;
- fraud-prevention and security providers;
- analytics providers;
- advertising providers;
- professional advisers; and
- government or legal recipients.
15.3 Categories sold or shared
We do not sell personal information for direct monetary payment.
If advertising technologies are enabled, identifiers, commercial information, internet activity, approximate geolocation, and inferences may be disclosed in a manner considered “selling” or “sharing” under California law.
You may opt out through the Your Privacy Choices link.
15.4 Sensitive personal information
We use sensitive personal information only for purposes reasonably necessary to:
- authenticate users;
- process transactions;
- prevent fraud;
- secure accounts;
- provide requested services; and
- comply with law.
We do not use sensitive personal information to infer characteristics about you beyond what is reasonably necessary for these purposes.
15.5 California rights
Subject to applicable law, California residents may request:
- disclosure of categories and specific pieces of personal information;
- disclosure of sources, purposes, and recipients;
- correction;
- deletion;
- opt-out of sale or sharing;
- limitation of certain uses of sensitive personal information; and
- freedom from unlawful discrimination.
15.6 Authorized agents
A California resident may use an authorized agent to submit a request.
- proof that the agent is authorized;
- verification of the consumer’s identity; or
- direct confirmation that the consumer authorized the request.
We will not require you to create an account solely to submit an opt-out request.
16. How to Exercise United States Privacy Rights
Submit a request through:
- your name;
- your email address;
- your state of residence;
- the right you want to exercise; and
- sufficient information to identify the relevant account or transaction.
We may request additional information to reasonably verify your identity. We will use verification information only to process the request.
Where applicable, you may appeal our decision by replying to our response or submitting an appeal through the privacy request form and writing “Privacy Appeal.”
17. Additional GDPR Rights
Because NativaFiber is established in Austria, you may also have the following rights under the GDPR:
- access to your personal data;
- correction of inaccurate data;
- erasure;
- restriction of processing;
- data portability;
- objection to processing based on legitimate interests;
- objection to direct marketing;
- withdrawal of consent; and
- the right to lodge a complaint with a competent data protection authority.
The competent supervisory authority for the Austrian operator is generally:
Austrian Data Protection AuthorityÖsterreichische Datenschutzbehörde
You may also contact a data protection authority in the country where you live, work, or believe an infringement occurred where GDPR jurisdiction applies.
18. Marketing Communications
You can unsubscribe from marketing emails by:
- selecting the unsubscribe link in the message;
- changing account preferences, where available; or
- contacting [email protected].
We may retain your email address on a suppression list to ensure that we respect your request.
Unsubscribing from marketing does not stop:
- order confirmations;
- delivery updates;
- account security messages;
- refund communications;
- responses to customer support requests; or
- legally required notices.
19. Children’s Privacy
Our website and products are intended for a general adult audience and are not directed to children under 13.
We do not knowingly collect personal information directly from children under 13. If we learn that we collected such information without legally valid parental consent, we will take reasonable steps to delete it.
Persons under 18 should use the website only with the involvement of a parent or legal guardian.
If you believe a child has provided personal information to us, contact [email protected].
20. Automated Decision-Making and Profiling
We do not use personal information to make solely automated decisions that produce legal or similarly significant effects concerning customers.
Analytics or advertising tools may infer general product interests from website activity. Such processing is used for website measurement, personalization, or advertising and is subject to your cookie and opt-out choices.
21. Changes to This Privacy Policy
We may update this Privacy Policy when:
- our services change;
- our providers change;
- we introduce new data uses;
- applicable law changes; or
- we improve our privacy practices.
The current version will be posted on this page with an updated “Last Updated” date.
Where a change materially affects how we use previously collected personal information, we will provide additional notice or request consent where required.
22. Contact Us
Questions, complaints, and privacy requests may be directed to:
NativaFiberOperated by: Svitlana Bodanova, Längdorfer Straße, 30, St.Jakob im Rosental, 9184, Austria
Please write “Privacy Request” in the subject line.
