Privacy Policy

Last updated: 25 October 2026 · Version v1-2026-10

1. Who we are
2. The data we collect
3. Why we use your data
4. Email marketing rules
5. Who receives your data
6. How long we keep it
7. Cookies and tracking
8. Security
9. Your rights
10. Complaints
11. Minors
12. Third-party sites
13. Changes
14. Contact

1. Who we are

NobsLabs.Store ("we", "us") brings together products across different categories, guided by thoughtful design, quality and innovation with a practical purpose. By browsing our campaigns, visiting the store or following our product updates, you agree to this policy governing the use of the website.

We are the controller of your personal data. We promise to keep your data safe, not to sell your data, to make it easy for you to manage and review your marketing choices at any time, and to delete your data if it is no longer required. If you do not accept this policy, you must not use our website.

If you have previously shared your data with us and agreed to us using your personal information for direct marketing purposes, you may change your mind at any time and ask us to delete your data by emailing privacy@nobslabs.store, or by writing to us at our parent company address: Le Bon Bamboo Limited, 65 London Wall, London EC2M 5TU.

2. The data we collect

We do not ask for your name, postal address, date of birth or payment details on this website. We collect:

• your email address and the product whose form you used, which you give us when you click Reserve;
• proof of consent: the date, the exact wording you accepted and its version number;
• a scrambled form (hash) of your IP address, kept briefly to limit repeated or automated submissions;
• technical connection data (IP address, browser type, date, time, pages requested) in the server logs of our hosting provider.

We do not collect special-category data (such as health or political opinions) or children's data. Giving us your email is voluntary. You can browse the whole website without doing so.

3. Why we use your data

• To tell you about product launches, store updates and delivery-related information. This is based on your consent. You can withdraw it at any time without affecting what we did before.
• Keeping proof of your consent: our legal obligation to be able to demonstrate consent.
• Keeping the website secure and preventing abuse such as bot submissions: our legitimate interests in safety. We have weighed these against your rights and the impact is minimal. You can object at any time.

We do not sell or rent your data. We do not profile you, and we do not make decisions about you by automated means.

4. Email marketing rules

We email you only if you ticked the consent box. Every message we send identifies us, includes our postal address and has a simple way to unsubscribe. We act on unsubscribe requests promptly and in line with privacy rules. We do not buy or sell any customer data, and we never pass your email to another company for its own marketing.

5. Who receives your data

• Our hosting provider stores the website and its database for us, acting only on our instructions.
• Authorities, courts or professional advisers, only where the law requires or a legal claim needs it.

When you click Reserve, we send you to our online store (powered by Big Cartel, a US company). We do not send your email address to the store. If you register or order there, the store acts as a separate controller and handles your data under its own terms and privacy policy, including any transfer to the USA.

6. How long we keep it

• Email and product choice: up to 3 years from the date you gave it, or from your last contact with us if later. We chose 3 years because launches and delivery can take a long time. If you withdraw consent or ask for deletion, we delete it without delay.
• Proof of consent: deleted with your email. If you ask for deletion, we may keep the minimum proof the law allows, only as long as needed to defend legal claims.
• Anti-abuse hash: kept for a short time only, then deleted automatically.
• Server logs: kept by the hosting provider for its standard period.
• Backups: copies are overwritten within the provider's normal cycle. We do not restore deleted data into live use.

7. Cookies and tracking

This website does not set cookies and does not use analytics, advertising pixels, social-media plug-ins or embedded third-party content. For that reason there is no cookie banner. We do not track you across websites, so browser "Do Not Track" and Global Privacy Control signals need no action. If this changes, we will ask for your consent first and update this page.

8. Security

The website uses an encrypted HTTPS connection. Emails are stored in a password-protected database that only we can open. The sign-up form accepts submissions only from this website, limits repeated submissions and blocks simple bots. Access to the hosting account is limited to the people who need it.

No system is perfectly secure. If a breach puts your rights at risk, we will tell you and the regulator within the time the law requires.

9. Your rights

Wherever you live, you can ask us to:

• tell you what data we hold and give you a copy (access);
• correct data that is wrong or incomplete;
• delete your data;
• restrict how we use it, or stop using it for a purpose you object to;
• give you your data in a portable format;
• withdraw your consent.

To use a right, write to privacy@nobslabs.store. We may ask you to confirm your identity by replying from the email address you used on the website, so we do not give your data to someone else. There is no charge. We reply within one month, and for complex requests we may extend this by up to two further months, telling you why.

Visitors in the EEA. You have the rights listed above under the EU GDPR. You may also complain to the data protection authority in the EU country where you live, work or where the issue occurred. Our EU representative, if we appoint one, can be reached at privacy@nobslabs.store.

Visitors in the USA. US privacy laws (California and other states) give residents rights to know, delete, correct and opt out of the sale or sharing of personal information. We do not sell or share personal information for advertising, and we have not done so in the last 12 months. We do not use sensitive personal information. We will not treat you unfairly for exercising a right.

You can ask us to apply any US right by writing to privacy@nobslabs.store, and you may use an authorised agent. If we refuse, you can appeal by replying to that email, and you may contact your state attorney general. We are not currently subject to the California Consumer Privacy Act thresholds, but we apply these rights anyway.

10. Complaints

If you are unhappy about how we use your data, write to privacy@nobslabs.store first. We will acknowledge your complaint within 30 days, investigate it, keep you informed and tell you the outcome.

You may also contact the data protection authority in the UK or in the EU country where you live. In the UK, this is the Information Commissioner's Office (ico.org.uk/make-a-complaint).

11. Minors

This website is not intended for anyone under 16, or a minor as defined by the law of their country of residence, and we do not knowingly collect their data. If a child has given us an email address, write to us and we will delete it promptly.

12. Third-party sites

We link to Kickstarter, Instagram, Facebook, YouTube and our online store. They have their own privacy policies and cookies. We do not control them, so please read their policies.

13. Changes

We may update this policy as our practices or the law change. The date and version at the top show the latest update. If a change affects how we use your email, we will tell you and ask for consent again where the law requires. Earlier versions are available on request. If this policy is translated, the English version prevails.

14. Contact

Questions or requests: contact@nobslabs.store
Privacy requests: privacy@nobslabs.store
Parent company: Le Bon Bamboo Limited, 65 London Wall, London EC2M 5TU.