Last updated: October 19, 2026

1. General Information

At NONObags, we respect your privacy and are committed to protecting your personal data.

This Privacy Policy explains how we collect, use, store, share, and protect your personal information when you visit our website, purchase our products, subscribe to our communications, or interact with our services.

We process personal data in accordance with the European Union General Data Protection Regulation (GDPR) and applicable Estonian data protection legislation.

Data Controller

NONObags
Operated by: Kommstuudio OÜ
Registration number: 16677213
Registered address: Erminurme tee 12-8, Tartu, Estonia
Email: info@nonobags.com

Throughout this Privacy Policy, references to “NONObags”, “we”, “us”, or “our” refer to Kommstuudio OÜ, operating under the NONObags brand.

2. Personal Data We Collect

Depending on how you interact with our website, we may collect the following personal information:

Personal and Contact Information

  • First and last name
  • Email address
  • Telephone number
  • Billing and shipping addresses
  • Company details, where applicable

Order and Transaction Information

  • Products purchased
  • Order history
  • Payment status and transaction references
  • Shipping and delivery information
  • Returns and refund requests

Payments are processed through third-party payment service providers. We do not store complete payment card details on our own servers.

Website and Technical Information

  • IP address
  • Browser type and version
  • Device information
  • Operating system
  • Website interactions
  • Pages visited
  • Referral sources
  • Cookie identifiers and other online identifiers

Marketing and Analytics Information

Where you have provided the necessary consent, we may collect information about your interactions with our website and advertisements through Google Analytics 4, Google Ads, and Meta Pixel.

This may include product views, shopping cart activity, purchases, and interactions with advertising campaigns.

3. How We Use Your Personal Data

We process personal information for the following purposes.

3.1 Order Processing

We use your personal information to:

  • Process and fulfill orders
  • Arrange payments and deliveries
  • Send order confirmations and shipping updates
  • Handle returns, exchanges, and refunds
  • Provide customer support

Legal basis: Performance of a contract (GDPR Article 6(1)(b)).

3.2 Customer Communication

We use your contact details to respond to inquiries, provide assistance, and resolve customer service issues.

Legal basis: Performance of a contract or legitimate interests (GDPR Article 6(1)(b) and 6(1)(f)), depending on the circumstances.

3.3 Marketing Communications

Where required by law, we use your personal information for marketing purposes only with your consent.

Marketing communications may include:

  • New product launches
  • Special offers and discounts
  • Seasonal collections
  • NONObags news and promotions

You may unsubscribe from marketing emails at any time using the unsubscribe link provided in our communications.

Legal basis: Consent (GDPR Article 6(1)(a)), or another applicable legal basis where permitted by law.

3.4 Website Analytics

We use Google Analytics 4 to understand how visitors interact with our website.

This helps us:

  • Analyze website traffic
  • Understand visitor behavior
  • Identify popular products
  • Improve website functionality
  • Measure the effectiveness of marketing campaigns

Where required, analytics technologies are activated only after obtaining your consent.

Legal basis: Consent (GDPR Article 6(1)(a)).

3.5 Advertising and Remarketing

We use Google Ads and Meta Pixel to measure advertising performance and, where permitted, deliver relevant advertisements.

These technologies may help us:

  • Measure advertising conversions
  • Understand interactions with advertisements
  • Analyze campaign performance
  • Create remarketing audiences
  • Display advertisements to people who have previously visited our website
  • Improve advertising relevance

Where required by law, advertising cookies and tracking technologies are activated only after you provide consent.

Legal basis: Consent (GDPR Article 6(1)(a)).

3.6 Legal Obligations

We may process and retain personal information to comply with applicable accounting, tax, consumer protection, and other legal requirements.

Legal basis: Compliance with a legal obligation (GDPR Article 6(1)(c)).

4. Google Analytics 4

Our website uses Google Analytics 4, a web analytics service provided by Google.

Google Analytics helps us understand how visitors use our website and how we can improve their shopping experience.

Depending on your consent and the configuration of our website, Google Analytics may collect information such as:

  • Pages visited
  • Session duration
  • Device and browser information
  • Approximate geographic location
  • Traffic sources
  • Website interactions
  • E-commerce events, including product views, cart additions, and purchases

Google Analytics uses cookies and similar technologies to collect information about website activity.

We use this information to improve website performance, analyze customer behavior, and optimize our marketing activities.

Google may process certain information on servers located outside the European Economic Area.

Where required, Google Analytics tracking is activated only after you have provided your consent.

You can withdraw your consent through our website’s cookie preferences.

For more information about Google’s privacy practices, please visit:

⁠Google Privacy Policy

5. Google Ads and Conversion Tracking

NONObags uses Google Ads to advertise our products and measure the effectiveness of our advertising campaigns.

Google Ads may use cookies and other tracking technologies to collect information about your interactions with our advertisements and website.

This information may be used to:

  • Measure purchases and other conversions
  • Evaluate advertising campaign performance
  • Create remarketing audiences
  • Improve advertising targeting
  • Avoid showing irrelevant advertisements

Where required by law, Google Ads tracking and advertising cookies are used only after you provide consent.

We may use Google Consent Mode to communicate your consent preferences to Google services.

Depending on the consent configuration, Google technologies may process limited information without advertising cookies even when consent has not been granted.

You can manage personalized advertising preferences through:

⁠Google My Ad Center

6. Meta Pixel (Facebook and Instagram Advertising)

NONObags uses Meta Pixel, a tracking technology provided by Meta Platforms, to measure the performance of advertisements on Facebook and Instagram.

Meta Pixel may collect information about website activity, including:

  • Page views
  • Product views
  • Products added to shopping carts
  • Checkout activity
  • Purchases
  • Browser and device information
  • Online identifiers

This information helps us measure advertising conversions, understand campaign performance, and create relevant advertising audiences.

Meta may combine information collected through Meta Pixel with other information associated with its services, subject to Meta’s own privacy practices.

Where required by law, Meta Pixel is activated only after you provide consent.

You can manage advertising preferences through your Facebook and Instagram account settings.

For more information, please visit:

⁠Meta Privacy Policy

7. Cookies and Tracking Technologies

Our website uses cookies and similar technologies to ensure proper functionality, analyze website performance, and support marketing activities.

Cookies are small text files stored on your device when you visit a website.

We may use the following categories of cookies:

7.1 Essential Cookies

These cookies are necessary for the website to function properly.

They support:

  • Shopping cart functionality
  • Checkout processes
  • Account login
  • Website security
  • Basic website functionality

Essential cookies do not require consent where they are strictly necessary to provide a service requested by the user.

7.2 Analytics Cookies

Analytics cookies help us understand how visitors interact with our website.

We use Google Analytics 4 for this purpose.

Analytics cookies are used only with your consent where required by applicable law.

7.3 Marketing Cookies

Marketing cookies may be used by Google Ads and Meta Pixel to measure advertising effectiveness and display relevant advertisements.

These cookies may track interactions with our website and advertising campaigns.

Marketing cookies are activated only after obtaining your consent where required by law.

7.4 Preference Cookies

Preference cookies remember your choices, such as language preferences and website settings.

Non-essential preference cookies are used with consent where required.

7.5 Managing Cookie Preferences

When you first visit our website, you may be presented with a cookie consent banner.

You can accept or reject non-essential cookies and, where available, customize your preferences.

You may withdraw or change your consent at any time through our website’s cookie settings.

You can also manage cookies through your browser settings.

Please note that disabling certain cookies may affect website functionality.

8. Sharing Personal Data with Third Parties

NONObags does not sell personal data.

However, we may share personal information with trusted third-party service providers when necessary to operate our online store.

These may include:

Payment Service Providers

To securely process payments and transactions.

Shipping and Logistics Companies

To deliver purchased products.

Website Hosting and IT Service Providers

To maintain website functionality, security, and technical infrastructure.

Analytics Providers

Including Google Analytics 4, where permitted by your consent.

Advertising Platforms

Including Google Ads and Meta, where permitted by your consent.

Accounting and Legal Service Providers

To fulfill legal, financial, and regulatory obligations.

Third-party providers are required to process personal information in accordance with applicable data protection laws and their respective contractual obligations.

Where required, we enter into appropriate data processing agreements.

Some advertising providers may also process personal data as independent controllers for purposes described in their own privacy policies.

9. International Data Transfers

Some of our service providers, including Google and Meta, may process personal data outside the European Economic Area (EEA).

Where personal data is transferred internationally, we rely on appropriate safeguards required by GDPR.

These may include:

  • European Commission adequacy decisions
  • Standard Contractual Clauses
  • The EU-US Data Privacy Framework, where applicable
  • Other legally recognized safeguards

You may contact us for additional information about international data transfers and applicable safeguards.

10. Data Retention

We retain personal information only for as long as necessary to fulfill the purposes described in this Privacy Policy.

Retention periods depend on the type of information and applicable legal requirements.

For example:

  • Order and transaction records may be retained to comply with accounting and tax obligations.
  • Customer service correspondence may be retained for as long as necessary to resolve inquiries and disputes.
  • Marketing information is retained until consent is withdrawn or the information is no longer needed, unless another lawful basis applies.
  • Analytics and advertising data is retained according to the relevant service settings and applicable legal requirements.

Once personal information is no longer necessary, it will be securely deleted or anonymized.

11. Your Rights Under GDPR

Under the General Data Protection Regulation, you have the following rights:

Right of Access

You may request access to the personal information we hold about you.

Right to Rectification

You may request correction of inaccurate or incomplete personal information.

Right to Erasure

You may request deletion of your personal information where the applicable legal requirements are met.

Right to Restrict Processing

You may request restrictions on how your personal information is processed in certain circumstances.

Right to Data Portability

Where applicable, you may request your personal information in a structured, commonly used, machine-readable format.

Right to Object

You may object to certain processing activities, including processing based on legitimate interests.

You have the right to object at any time to processing for direct marketing purposes.

Right to Withdraw Consent

You may withdraw your consent at any time.

Withdrawal of consent does not affect the lawfulness of processing carried out before withdrawal.

Right to Lodge a Complaint

If you believe your personal information has been processed unlawfully, you may lodge a complaint with the Estonian Data Protection Inspectorate.

⁠Estonian Data Protection Inspectorate

You may also contact another competent supervisory authority where applicable.

To exercise your rights, please contact:

info@nonobags.com

We will respond to requests within the time limits established by applicable data protection legislation.

12. Data Security

We implement appropriate technical and organizational security measures to protect personal information against unauthorized access, loss, misuse, alteration, and disclosure.

These measures may include:

  • Secure website connections
  • Access restrictions
  • Website security monitoring
  • Appropriate technical safeguards
  • Secure payment processing through trusted providers

Although we take reasonable steps to protect personal information, no method of electronic transmission or storage can guarantee complete security.

13. Changes to This Privacy Policy

We may update this Privacy Policy to reflect changes in our services, data processing practices, or legal requirements.

Any updates will be published on this page with a revised “Last updated” date.

We encourage visitors to review this Privacy Policy periodically.

14. Contact Information

If you have any questions about this Privacy Policy or how your personal information is processed, please contact us.

NONObags
Operated by Kommstuudio OÜ
Registration number: 16677213
Erminurme tee 12-8
Tartu, Estonia

Email: info@nonobags.com