Privacy policy

Last updated: 19 August 2026

Nuti Grupp OÜ ("Nuti", "we", "us" or "our") operates the Nuti online store and website at [YOUR STORE DOMAIN], where we sell speedcubes, puzzles, accessories and related products.

We take the protection of your personal information seriously. This Privacy Policy explains what personal information we collect, why we collect it, how we use it, when we share it with other organisations, how long we retain it, and what rights you have under applicable data protection laws, including the General Data Protection Regulation (EU) 2016/679 ("GDPR").

By using our website or purchasing products from us, you acknowledge that you have read this Privacy Policy. Where applicable law requires consent for a particular type of processing, we will request your consent before carrying out that processing.

1. Who we are

The data controller responsible for your personal information is:

Nuti Grupp OÜ
Registry code: 14610400
Registered address: Rõue, Kanavere küla, Kose vald, Harju maakond, 75105, Estonia
Privacy contact: nuticubes@support.com

Nuti Grupp OÜ is the company responsible for operating the Nuti online store and determining how customer information is processed in connection with our business.

2. What personal information we collect

We collect information that is necessary to operate our online store, process orders, communicate with customers, comply with legal obligations and improve our services.

Depending on how you interact with Nuti, we may collect:

Information you provide

This may include:

  • your name and surname;

  • email address;

  • telephone number;

  • billing address;

  • delivery address;

  • company name and business details, where applicable;

  • information included in messages sent to us;

  • information provided when contacting customer support;

  • information provided when subscribing to our newsletter.

Order and transaction information

When you place an order, we may process:

  • products purchased;

  • order number;

  • order date;

  • order value and currency;

  • delivery information;

  • payment status;

  • refund, return or cancellation information;

  • information necessary to fulfil and deliver your order.

Payment card details are processed by the relevant payment provider. We do not intentionally store your full payment card number on our own systems.

Technical information

When you visit our website, certain information may be collected automatically, including:

  • IP address;

  • browser and device type;

  • operating system;

  • approximate location;

  • pages and products viewed;

  • referring website;

  • information about how you navigate and interact with the website;

  • cookies and similar technologies.

Some of this information may constitute personal information under applicable law.

3. How we collect information

We may collect personal information:

  • directly from you when you place an order or contact us;

  • when you subscribe to our newsletter;

  • automatically when you browse or use our website;

  • through Shopify and services that support the operation of our store;

  • through payment providers when you make a purchase;

  • through analytics and advertising technologies, where permitted and where the required consent has been obtained.

4. Why we use your information

We use personal information only for legitimate and defined purposes.

Processing and fulfilling orders

We use your information to:

  • process and confirm your order;

  • process payments;

  • prepare and dispatch your products;

  • provide delivery and tracking information;

  • communicate with you about your order;

  • process returns, refunds and cancellations;

  • provide customer support.

The primary legal basis for this processing is the performance of our contract with you.

Customer support

When you contact us, we use the information you provide to respond to your request, resolve issues and provide customer service.

Depending on the circumstances, the legal basis may be the performance of a contract, compliance with a legal obligation, or our legitimate interest in providing customer support and managing our customer relationships.

Legal and accounting obligations

We may process and retain personal information where necessary to comply with applicable laws and regulations, including tax, accounting, consumer protection and other legal obligations.

We may also process information where necessary to establish, exercise or defend legal claims.

Website operation and security

We use technical information to operate and secure our website, detect fraudulent or abusive activity, diagnose technical problems and maintain a reliable shopping experience.

Analytics

We may use Google Analytics to understand how visitors use our website, which pages and products are most useful, and how we can improve the Nuti shopping experience.

Where required by applicable law, analytics cookies and technologies will only be activated after obtaining the appropriate consent.

Advertising

We may use Meta advertising technologies, including the Meta Pixel, and Google advertising technologies, including Google Ads, to measure advertising performance, understand interactions with our website and show relevant Nuti advertising.

Where required by applicable law, these technologies will only be activated after obtaining the appropriate consent.

Depending on your choices and the services involved, information collected through these technologies may be shared with Meta or Google and may be used to measure or personalise advertising.

Newsletter and marketing communications

If you voluntarily subscribe to Nuti's newsletter, we may use your email address to send you information about:

  • new products;

  • promotions;

  • discounts;

  • competitions and events;

  • Nuti news;

  • other information relating to our products and services.

We use Shopify Email to manage and deliver these communications.

You can unsubscribe at any time using the unsubscribe link included in our marketing emails or by contacting us at nuticubes@support.com.

Unsubscribing from marketing communications does not prevent us from sending essential transactional communications, such as order confirmations, delivery information or information relating to an existing purchase.

5. Payment processing

We currently offer payment methods including Shopify Payments and PayPal.

When you choose a payment method, the relevant payment provider processes the information necessary to authorise and complete the transaction.

Payment providers may process information such as your name, payment information, billing information, transaction amount and other information required to prevent fraud and process the payment.

Payment providers operate under their own privacy policies and terms.

We do not intentionally store complete payment card details on our own systems.

6. Shopify

Our online store is hosted and operated using Shopify.

Shopify provides the ecommerce infrastructure that allows us to operate the store, provide checkout functionality, process orders and support various payment and customer-facing features.

Shopify may process personal information in connection with providing these services.

Shopify may also process information relating to interactions with our store for its own services and features, subject to Shopify's applicable policies and legal obligations.

For more information about Shopify's handling of personal information, please review:

Shopify Consumer Privacy Policy:
https://www.shopify.com/legal/privacy/app-users

Depending on your location and the type of data processing involved, Shopify may also provide mechanisms through which you can exercise rights concerning data processed by Shopify.

7. Third-party services

We use selected third-party services to operate and promote Nuti.

These currently include:

  • Shopify, for ecommerce infrastructure and store operation;

  • Shopify Payments, for payment processing;

  • PayPal, for payment processing;

  • Google Analytics, for website analytics;

  • Google Ads, for advertising and advertising measurement;

  • Meta Pixel and related Meta advertising technologies, for advertising and measurement;

  • Shopify Email, for newsletter and marketing communications.

These providers may process personal information according to their own privacy policies and applicable laws.

We do not permit third-party service providers to use customer information for purposes unrelated to the services they provide to us, except where the relevant provider independently determines its own processing purposes and responsibilities under applicable law.

8. Cookies and similar technologies

Our website uses cookies and similar technologies.

Some cookies are essential for the website, shopping cart, checkout and other basic functions to operate correctly.

Other cookies and technologies may be used for:

  • analytics;

  • advertising;

  • measuring marketing performance;

  • remembering preferences;

  • improving the website.

Where applicable law requires consent before non-essential cookies or tracking technologies are used, we will request that consent through our cookie-consent mechanism.

You can manage available cookie preferences through our cookie settings and, depending on your browser, through your browser settings.

Please note that disabling certain cookies may affect the functionality of parts of the website.

9. Who we share information with

We do not sell customer information as a business practice.

We may share personal information with third parties where necessary to provide our services, fulfil orders, process payments, operate the website, communicate with customers, comply with legal obligations or protect our legitimate interests.

These recipients may include:

  • Shopify;

  • Shopify Payments;

  • PayPal;

  • delivery and logistics providers;

  • Shopify Email;

  • Google;

  • Meta;

  • website and technology providers;

  • analytics and advertising providers;

  • professional advisers and service providers;

  • governmental authorities where legally required.

We only share information that is reasonably necessary for the relevant purpose.

10. International data transfers

Some of the companies and service providers we use may process personal information outside Estonia or the European Economic Area.

Where personal information is transferred outside the European Economic Area, we will use an appropriate legal mechanism for the transfer where required by applicable law. This may include an adequacy decision, Standard Contractual Clauses or another lawful transfer mechanism recognised under the GDPR.

11. How long we retain information

We retain personal information only for as long as reasonably necessary for the purpose for which it was collected, unless a longer retention period is required or permitted by law.

For example, information relating to purchases may need to be retained for accounting, tax, consumer protection and other legal requirements.

Information relating to newsletter subscriptions may be retained while you remain subscribed, unless there is another lawful reason to retain it.

When information is no longer required, we will delete it or anonymise it where reasonably possible.

12. Security

We take reasonable technical and organisational measures to protect personal information against unauthorised access, loss, alteration, disclosure or destruction.

However, no online service or method of electronic transmission can be guaranteed to be completely secure.

You should also take reasonable steps to protect your own information, including avoiding the transmission of sensitive information through unsecured communication channels.

13. Your rights

Under the GDPR and other applicable data protection laws, you may have the right to:

  • Access the personal information we hold about you;

  • Correct inaccurate or incomplete information;

  • Delete personal information where there is no lawful reason for us to retain it;

  • Restrict processing in certain circumstances;

  • Object to processing in certain circumstances;

  • Withdraw consent where processing is based on your consent;

  • Receive your personal information in a portable format where the right to data portability applies;

  • Object to direct marketing at any time.

Your rights are subject to applicable legal conditions and limitations.

To exercise your rights, contact:

nuticubes@support.com

We may need to verify your identity before fulfilling certain requests in order to protect your information from unauthorised disclosure.

We will respond to valid requests within the period required by applicable law.

14. Right to object to direct marketing

You can object to receiving direct marketing from Nuti at any time.

If you have subscribed to our newsletter, you can unsubscribe using the link provided in our marketing emails.

You may also contact us directly at nuticubes@support.com.

We will not continue sending marketing communications after a valid opt-out request, except where another lawful basis for communication applies.

15. Children's privacy

Our website is not specifically directed at children.

We do not knowingly collect personal information from children where doing so would be prohibited by applicable law.

If you believe that a child has provided personal information to us in circumstances where it should not have been collected, please contact us at nuticubes@support.com.

16. Third-party websites

Our website may contain links to websites, services or platforms operated by third parties.

Those websites are not controlled by Nuti and may have their own privacy policies and terms.

We are not responsible for the privacy or security practices of third-party websites, and we recommend reviewing their privacy policies before providing them with personal information.

17. Complaints

If you have concerns about how we process your personal information, please contact us first at:

nuticubes@support.com

You also have the right to lodge a complaint with the relevant data protection supervisory authority.

For Nuti Grupp OÜ, the relevant supervisory authority in Estonia is:

Andmekaitse Inspektsioon (Estonian Data Protection Inspectorate)

https://www.aki.ee/

If you live elsewhere in the European Economic Area, you may also have the right to contact the data protection authority in your country of residence.

18. Changes to this Privacy Policy

We may update this Privacy Policy when our services, data processing practices, technology or legal obligations change.

When we make changes, we will update the "Last updated" date at the beginning of this Privacy Policy.

Where required by law, we will provide additional notice or obtain consent for material changes.

19. Contact

If you have questions about this Privacy Policy, our privacy practices or your personal information, please contact:

Nuti Grupp OÜ
Registry code: 14610400
Rõue, Kanavere küla, Kose vald, Harju maakond, 75105, Estonia
Email: nuticubes@support.com

Nuti Grupp OÜ is the data controller responsible for personal information processed in connection with the Nuti online store, except where a third party acts as an independent controller for its own processing activities.