Last Updated: October 29, 2026
This Privacy Policy explains how Chili World ApS, operating the nomxa online store, collects, uses, stores, shares and protects personal information when you visit our online store, purchase products, create an account, contact customer service or otherwise interact with our Services.
For the purposes of this Privacy Policy, our website, online store and related services are collectively referred to as the “Services.”
1. Company Information
The company responsible for operating the Services and processing personal information is:
Chili World ApS
CVR Number: 38949373
Registered Address:
Bibliotekvej 53B, 1.
2650 Hvidovre
Denmark
Email: support@nomxa.shop
Chili World ApS acts as the data controller for personal information processed in connection with our online store, except where another organization acts as an independent controller under applicable law.
Our online store is operated using Shopify, which provides e-commerce infrastructure for the Services.
2. Scope of This Privacy Policy
This Privacy Policy may apply when you:
- Visit or browse our online store;
- Create or manage a customer account;
- Place an order;
- Purchase, return or exchange a product;
- Contact customer service;
- Subscribe to marketing communications;
- Interact with our website or advertisements; or
- Otherwise communicate or interact with us.
3. Personal Information We Collect
Depending on how you interact with our Services, we may collect or process different categories of personal information.
3.1 Contact Information
This may include:
- Name;
- Email address;
- Telephone number;
- Billing address;
- Shipping address;
- Postal code;
- City;
- Country; and
- Other contact information you provide.
3.2 Order and Transaction Information
When you place or manage an order, we may process information such as:
- Order number;
- Products purchased;
- Product quantities;
- Prices;
- Billing information;
- Shipping information;
- Payment status;
- Transaction references;
- Delivery information;
- Return information;
- Refund information; and
- Communications relating to the order.
3.3 Account Information
If customer account functionality is available and you create an account, we may process information such as:
- Name;
- Email address;
- Account information;
- Saved addresses;
- Order history; and
- Account preferences.
3.4 Customer Service Information
When you contact us, we may process information contained in:
- Emails;
- Customer service requests;
- Product inquiries;
- Return or refund requests;
- Complaints;
- Photographs;
- Videos;
- Attachments; and
- Other information you voluntarily provide.
3.5 Technical and Usage Information
When you access the Services, certain technical or usage information may be collected automatically.
Depending on the technologies and services in use, this may include:
- IP address;
- Browser type;
- Device type;
- Operating system;
- Pages viewed;
- Date and time of access;
- Referring website;
- Session and navigation information;
- Cookie or similar identifiers;
- Approximate location derived from an IP address; and
- Website performance or error information.
3.6 Marketing and Preference Information
Where applicable and permitted by law, we may process information concerning:
- Marketing preferences;
- Product interests;
- Advertising interactions;
- Promotional participation;
- Customer feedback; and
- Previously viewed or purchased products.
4. How We Collect Personal Information
We may collect personal information in several ways.
4.1 Information You Provide
You may provide personal information when you:
- Complete a website form;
- Create an account;
- Place an order;
- Enter billing or delivery information;
- Contact us;
- Request a return or refund; or
- Otherwise communicate with us.
4.2 Information Collected Automatically
Certain technical information may be collected automatically through technologies such as:
- Cookies;
- Server logs;
- Website analytics tools;
- Security technologies;
- Device identifiers; and
- Similar technologies.
4.3 Information Received From Service Providers
We may receive information from service providers involved in operating the Services, such as:
- Payment service providers;
- Delivery and logistics providers;
- E-commerce and website service providers;
- Hosting or cloud service providers;
- Fraud-prevention and security providers;
- Analytics providers;
- Advertising providers where applicable; and
- Customer-support providers.
5. How We Use Personal Information
Depending on the circumstances, we may use personal information to:
- Operate and maintain our online store;
- Create and manage customer accounts;
- Receive and process orders;
- Process or verify payments;
- Arrange shipping and delivery;
- Provide tracking information;
- Communicate regarding orders;
- Respond to customer inquiries;
- Process returns and refunds;
- Manage complaints;
- Detect or prevent fraudulent activity;
- Protect website and account security;
- Maintain transaction and accounting records;
- Improve our Services;
- Evaluate website performance;
- Understand how customers interact with our Services;
- Provide service-related communications;
- Send marketing communications where permitted by law;
- Support advertising activities where permitted by law;
- Comply with legal, accounting and tax obligations;
- Establish, exercise or defend legal claims; and
- Protect our rights and the rights of others.
6. Legal Bases for Processing
Where applicable data protection law requires a lawful basis, we may rely on one or more of the following grounds.
6.1 Performance of a Contract
We may process personal information where necessary to:
- Process an order;
- Process or verify payment;
- Arrange delivery;
- Provide customer service;
- Process returns or refunds; and
- Perform other obligations arising from a customer contract.
6.2 Compliance With Legal Obligations
We may process information where necessary to comply with applicable:
- Accounting requirements;
- Tax obligations;
- Consumer protection requirements;
- Legal or regulatory requirements;
- Court orders; or
- Other legal obligations.
6.3 Legitimate Interests
Where permitted by law, we may process information where reasonably necessary for legitimate interests such as:
- Preventing fraud;
- Securing our Services;
- Responding to customer inquiries;
- Improving our Services;
- Evaluating business or website performance;
- Protecting legal rights; and
- Maintaining appropriate business records.
Where required, we consider whether these interests are outweighed by the rights and freedoms of the individual concerned.
6.4 Consent
Where consent is required, we may request it before activities such as:
- Sending certain marketing communications;
- Using certain non-essential cookies; or
- Processing information for optional purposes.
Where processing is based on consent, you may withdraw your consent at any time.
Withdrawal does not affect processing lawfully carried out before consent was withdrawn.
7. Sharing Personal Information
We may disclose personal information where reasonably necessary to operate the Services, complete transactions or comply with applicable law.
Recipients may include, where applicable:
- Payment service providers;
- Banks or financial institutions;
- Courier and logistics providers;
- Fulfilment providers;
- E-commerce and website service providers;
- Hosting or cloud providers;
- Customer-support providers;
- Email service providers;
- Analytics providers;
- Advertising or marketing providers;
- Fraud-prevention and security providers;
- Professional advisers;
- Government authorities;
- Courts;
- Law enforcement authorities; and
- Regulators.
We may also disclose information where reasonably necessary:
- With your permission;
- To complete an order;
- To arrange delivery;
- To investigate suspected fraud;
- To protect legal rights;
- To comply with legal obligations; or
- In connection with a corporate transaction such as a merger, acquisition, restructuring or transfer of business assets.
Service providers may process personal information only as permitted by applicable contractual and legal requirements.
8. Shopify and E-Commerce Services
Our online store is powered by Shopify.
Shopify may process information relating to your access to and use of our store in order to provide, maintain, secure and improve its platform and related services.
Information submitted through our online store may also be transmitted to Shopify and other service providers involved in providing the Services.
Where Shopify independently determines the purposes and means of certain processing activities, Shopify may act as an independent controller in accordance with applicable law.
9. Delivery Information
Where necessary to fulfil and deliver an order, relevant information may be provided to delivery or logistics providers.
This may include:
- Recipient name;
- Delivery address;
- Postal code;
- Telephone number;
- Email address;
- Order reference;
- Package information; and
- Delivery instructions.
Delivery providers may use this information for purposes such as arranging delivery, providing tracking information and resolving delivery issues.
10. Payment Information
Online payments may be handled by independent payment service providers.
The payment methods and providers applicable to a particular order depend on the payment options available during checkout.
Payment service providers may process information in accordance with their own privacy notices, security practices and legal obligations.
Where complete payment-card information is processed directly by an authorized payment provider, we do not normally require access to complete payment-card details.
We may receive limited payment-related information necessary to:
- Confirm payment;
- Process orders;
- Reconcile transactions;
- Process refunds; and
- Prevent fraud.
11. Cookies and Similar Technologies
Our online store may use cookies and similar technologies.
Depending on the technologies in use, cookies may support:
- Website functionality;
- Shopping cart sessions;
- Customer preferences;
- Account functionality;
- Checkout;
- Website security;
- Fraud prevention;
- Website analytics;
- Performance measurement; and
- Marketing or advertising activities where permitted.
Essential Cookies
Certain cookies or similar technologies may be necessary for core website functions such as shopping carts, checkout, account functionality and security.
Analytics Cookies
Where used, analytics technologies may help us understand how visitors interact with our website and improve its performance.
Advertising Cookies
Where used and permitted, advertising technologies may help measure promotional activities or provide relevant advertising.
Where required by applicable law, non-essential cookies or similar technologies will be used only after the required consent has been obtained.
Cookie preferences may be managed through available website preference tools or browser settings.
Disabling certain technologies may affect some website functions.
12. Marketing Communications
We may send marketing communications where permitted by applicable law.
Where consent is required, marketing communications will be sent only after the appropriate consent has been obtained.
You may unsubscribe from marketing communications using the unsubscribe option included in the relevant message or by contacting:
Unsubscribing from marketing communications does not prevent us from sending necessary non-promotional communications concerning matters such as orders, payments, deliveries, returns, refunds or account security.
13. Third-Party Websites and Services
Our Services may contain links to websites or online services operated by third parties.
We do not control the privacy or security practices of independent third parties.
Information you provide directly to a third party may be governed by that third party's privacy policy and terms.
We recommend reviewing the relevant privacy information before providing personal information to an independent third-party service.
14. Children's Privacy
Our Services are intended for individuals legally able to enter into the applicable purchase transaction.
Where required by applicable law, minors should use the Services only with appropriate permission or supervision from a parent or legal guardian.
If we become aware that personal information relating to a minor has been processed in violation of applicable law, we may take appropriate steps to delete or restrict that information.
15. Data Security
We use reasonable administrative, organizational and technical measures designed to protect personal information against unauthorized access, loss, disclosure, misuse, alteration or destruction.
Depending on the circumstances, these measures may include:
- Access controls;
- Account authentication;
- Secure hosting environments;
- Encryption where appropriate;
- Fraud-prevention measures; and
- Other reasonable security practices.
However, no website, internet transmission or electronic storage system can be guaranteed to be completely secure.
Customers should avoid sending confidential authentication credentials or complete payment-card information through unsecured communication channels.
16. International Data Transfers
Some technology, payment, logistics or other service providers may process personal information outside the country in which you live.
As a result, personal information may be transferred to countries with data protection laws that differ from those in your country.
Where personal information is transferred outside the European Economic Area and applicable law requires safeguards, an appropriate lawful transfer mechanism will be used.
Depending on the circumstances, such mechanisms may include:
- An applicable adequacy decision;
- European Commission Standard Contractual Clauses; or
- Another transfer mechanism permitted by applicable law.
17. Data Retention
We retain personal information only for as long as reasonably necessary for the purposes for which it was collected or as otherwise required or permitted by applicable law.
Retention periods may depend on matters such as:
- Customer account duration;
- Completion of an order;
- Returns or refunds;
- Accounting and tax obligations;
- Product support obligations;
- Fraud-prevention requirements;
- Legal limitation periods;
- Dispute resolution; and
- Establishment or defence of legal claims.
When information is no longer required, it may be deleted, anonymized or otherwise handled in accordance with applicable law.
18. Your Data Protection Rights
Depending on your location and applicable law, you may have rights concerning your personal information.
These may include:
Right of Access
You may have the right to request confirmation of whether we process your personal information and to request access to relevant information.
Right to Correction
You may have the right to request correction of inaccurate information or completion of incomplete information.
Right to Deletion
You may have the right to request deletion of personal information in certain circumstances.
This right may be subject to exceptions where information must be retained for legal, tax, contractual, fraud-prevention or legal-claim purposes.
Right to Restrict Processing
You may have the right to request restriction of certain processing activities where applicable.
Right to Data Portability
You may have the right to receive certain personal information in a structured, commonly used and machine-readable format where applicable.
Right to Object
You may have the right to object to certain processing based on legitimate interests.
Where applicable, you may object to the use of personal information for direct marketing.
Right to Withdraw Consent
Where processing is based on consent, you may withdraw that consent at any time.
Rights Concerning Automated Decisions
Where applicable, you may have rights relating to certain decisions based solely on automated processing that produce legal or similarly significant effects.
Right to Lodge a Complaint
You may have the right to submit a complaint to the competent data protection authority.
These rights are subject to applicable legal requirements, limitations and exceptions.
19. How to Exercise Your Privacy Rights
To exercise an applicable privacy or data protection right, please contact:
Chili World ApS
Registered Address:
Bibliotekvej 53B, 1.
2650 Hvidovre
Denmark
Email: support@nomxa.shop
Please clearly describe the request and provide information reasonably necessary for us to identify the relevant account or information.
Where reasonably necessary and permitted by law, we may request information to verify your identity before completing the request.
We will respond within the period required by applicable law.
20. Complaints
If you have concerns regarding our processing of personal information, you may contact us:
Email: support@nomxa.shop
Depending on applicable law, you may also have the right to lodge a complaint with the competent data protection authority.
Contacting us does not prevent you from exercising other rights or remedies available under applicable law.
21. Changes to This Privacy Policy
We may update this Privacy Policy from time to time to reflect changes in:
- Our business operations;
- Our Services;
- Technology or service providers;
- Privacy practices;
- Applicable legal or regulatory requirements; or
- Other relevant operational circumstances.
The latest version will be published on our online store with an updated revision date.
Where required by applicable law, additional notice of material changes will be provided.
22. Contact Us
For questions about this Privacy Policy, our data practices or the exercise of applicable privacy rights, please contact:
Chili World ApS
CVR Number: 38949373
Registered Address:
Bibliotekvej 53B, 1.
2650 Hvidovre
Denmark
Email: support@nomxa.shop