Last updated: 5 August 2026

Nanostore Ltd (“Nanostore”, “we”, “us”) operates nanostoreltd.com. This notice explains how we use personal data when you browse the site, create an account, request a quotation, place an order, or contact us.

1. Who we are

Nanostore Ltd is the data controller. Our contact address is 128 City Road, London EC1V 2NX, United Kingdom. For privacy questions or requests, email sales@nanostoreltd.com.

2. Data we collect

  • Account and order data: name, organisation, username, hashed password, email, telephone number, billing and delivery addresses, order history, delivery status, and any purchase-order, end-use, customs, or importer details you provide.
  • Quotation and support data: products, specifications, quantities, notes, files, and correspondence associated with a request.
  • Payment data: the payment provider receives card details directly. We receive status, amount, transaction reference, card brand, and last four digits; we do not receive or store the full card number or security code.
  • Technical data: IP address, browser and device information, requested pages, timestamps, referring page, cookies needed for cart/login/checkout, and security signals used to prevent abuse.
  • Marketing data: your email address and subscription status if you choose to join the newsletter.

3. Why we use data and our lawful bases

  • Contract: to create an account, answer a quotation request, process payment, supply and deliver an order, and handle returns or support.
  • Legal obligation: to keep accounting and transaction records and respond to lawful requests from tax, customs, sanctions, or other authorities.
  • Legitimate interests: to secure the site, prevent fraud, maintain business correspondence, improve the service using limited first-party statistics, and protect our legal rights. We balance these interests against your rights.
  • Consent: for newsletter messages and any non-essential cookies. You can withdraw consent at any time.

Required checkout and quotation fields are needed to supply the requested product or service. If you do not provide them, we may be unable to accept the order or prepare the quotation. We do not make solely automated decisions that have legal or similarly significant effects.

4. Payments

Payment fields are provided by the payment method shown at checkout. Where Stripe processes a card payment, Stripe receives the card data directly and uses it for payment, fraud prevention, and legal compliance under its own privacy terms. Nanostore never stores your full card number.

5. Who receives data

We share only what is necessary with service providers and recipients involved in operating the store: Hostinger for website and email hosting; Cloudflare for DNS, delivery, and security; Stripe or the payment provider shown at checkout; delivery carriers, customs brokers, and customs authorities; and professional advisers or public authorities where required. Providers acting for us must use the data only for the agreed service. We do not sell personal data or provide it to advertising networks.

6. Cookies and site statistics

Necessary cookies keep your cart, account, checkout, security controls, and preferences working. Payment and security providers may set cookies needed for fraud prevention and authentication. We use self-hosted, aggregate site statistics and do not use cross-site advertising trackers. Blocking necessary cookies may prevent login, cart, or checkout functions.

7. International transfers

Some providers, carriers, or customers may be outside the United Kingdom. Where personal data is transferred internationally, we use the lawful transfer mechanism applicable to the provider or transaction, such as an adequacy regulation, approved contractual safeguards, or a transfer necessary to perform your order. Email us if you want information about the safeguard used for a particular transfer.

8. How long we keep data

  • Order, payment, invoice, delivery, and accounting records: normally six years from the end of the relevant company financial year, or longer where law or an open enquiry requires it.
  • Account profiles: while the account remains open, except information linked to records we must retain.
  • Quotation and support correspondence: normally three years after the last activity, unless needed for an order, dispute, or legal obligation.
  • Newsletter data: until you unsubscribe, after which we may keep a minimal suppression record.
  • Security and server logs: for the limited periods set for security, troubleshooting, and abuse prevention.

We delete or anonymise data when it is no longer needed.

9. Your rights

Depending on the circumstances, you may have rights to access, correct, erase, restrict, or object to our use of your personal data; receive data you supplied in a portable format; and withdraw consent. The right to object to direct marketing applies at any time. Some rights are limited where we must keep records or need data to establish or defend legal claims.

Send requests to sales@nanostoreltd.com. We may ask for information needed to verify your identity. You can also complain to the UK Information Commissioner’s Office at ico.org.uk.

10. Security and children

We use access controls, password hashing, encrypted connections, backups, and security monitoring appropriate to the service. No internet service is completely risk-free. The store is intended for professional and research purchasing and is not directed to children.

11. Changes

We may update this notice when our services, providers, or legal obligations change. The date above identifies the current version.