---

1. Who We Are

The business responsible for the personal information described in this Privacy Policy is:

WS Trading Company Ltd.
Doing business as Nanalinen

Mailing Address:
6161 S Syracuse Way, Suite 320
Greenwood Village, CO 80111
United States

Email:
service@nanalinen.com

---

2. Personal Information We Collect

For purposes of this Privacy Policy, “personal information” generally means information that identifies, relates to, describes, is reasonably capable of being associated with, or could reasonably be linked to an individual or household.

The specific information we collect depends on how you interact with Nanalinen.

Information You Provide Directly to Us

When you place an order, create an account, contact customer service, subscribe to communications, or otherwise interact with us, we may collect information such as:

• First and last name;
• Email address;
• Telephone number;
• Billing address;
• Shipping address;
• Account information;
• Order number and order details;
• Product selections and preferences;
• Return, refund, and exchange information;
• Customer service communications;
• Reviews, comments, or other content you voluntarily submit;
• Marketing preferences; and
• Other information you choose to provide.

---

Payment Information

When you make a purchase, payment information may be processed by third-party payment processors and financial institutions.

Depending on the payment methods available at checkout, these providers may include:

• PayPal;
• Klarna;
• Credit and debit card networks;
• Apple Pay;
• Google Pay; and
• Other payment providers made available during checkout.

We may receive limited transaction-related information, such as:

• Payment status;
• Amount paid;
• Payment method;
• Transaction identifier; and
• Information necessary to process refunds or payment disputes.

When payment information is processed directly by a third-party payment provider, Nanalinen generally does not receive or store your complete payment card number or card security code (CVV/CVC).

Payment providers process your information according to their own privacy policies and legal obligations.

---

Information Collected Automatically

When you visit or interact with our Site, we and our authorized service providers may automatically collect information including:

• IP address;
• Browser type;
• Device type;
• Operating system;
• Device and online identifiers;
• Pages viewed;
• Products viewed;
• Products added to your cart;
• Site interactions;
• Date and time of visits;
• Referring websites or traffic sources;
• Approximate location derived from your IP address;
• Advertising interaction information;
• Cookie identifiers; and
• Other technical information related to Site performance and use.

We may use cookies, pixels, tags, software development tools, and similar technologies to collect some of this information.

---

3. Sources of Personal Information

We may obtain personal information from:

• You directly;
• Your browser or device;
• Cookies and similar technologies;
• Payment providers;
• Shipping carriers and logistics providers;
• E-commerce platforms;
• Hosting and cloud-service providers;
• Customer support providers;
• Fraud prevention and security providers;
• Analytics providers;
• Advertising and marketing partners;
• Social media platforms when you interact with us through those platforms; and
• Other service providers that assist us in operating our business.

---

4. How We Use Personal Information

We may use personal information for the following business and commercial purposes.

Processing Orders

We may use your information to:

• Receive and process orders;
• Process payments;
• Confirm purchases;
• Arrange shipping and delivery;
• Provide order status information;
• Process returns, refunds, and exchanges;
• Manage customer accounts; and
• Respond to order-related questions.

---

Providing Customer Service

We may use personal information to:

• Respond to questions;
• Provide product information;
• Assist with orders;
• Address delivery issues;
• Process return or refund requests;
• Resolve complaints; and
• Provide other customer support.

---

Operating and Improving Our Site

We may use information to:

• Operate and maintain our Site;
• Remember shopping-cart contents and preferences;
• Analyze how visitors use our Site;
• Improve navigation and user experience;
• Diagnose technical problems;
• Test and improve features;
• Understand product interest; and
• Evaluate Site and marketing performance.

---

Security and Fraud Prevention

We may process information when reasonably necessary to:

• Protect our Site and systems;
• Detect suspicious activity;
• Prevent fraud;
• Verify transactions;
• Prevent unauthorized access;
• Protect customers and our business;
• Enforce our Terms of Service; and
• Establish, exercise, or defend legal claims.

---

Legal and Compliance Purposes

We may use and retain information as reasonably necessary to:

• Comply with applicable laws and regulations;
• Maintain transaction and accounting records;
• Respond to valid legal requests;
• Cooperate with law enforcement or regulatory authorities where legally required;
• Protect legal rights and interests; and
• Resolve disputes.

---

5. Marketing Communications

We may use your contact information to send you marketing communications, including:

• Newsletters;
• New product announcements;
• Promotional offers;
• Seasonal promotions;
• Product recommendations; and
• Other information about Nanalinen.

You may opt out of promotional emails at any time by clicking the “Unsubscribe” link included in our marketing emails.

You may also contact us at:

service@nanalinen.com

Opting out of promotional communications will not prevent us from sending necessary transactional or service-related communications, such as:

• Order confirmations;
• Shipping notices;
• Account notifications;
• Customer service communications; and
• Important legal or security notices.

Promotional email communications are intended to be sent in accordance with applicable U.S. commercial email requirements.

---

6. Cookies and Similar Technologies

Nanalinen and our service providers may use technologies such as:

• Essential cookies;
• Functional cookies;
• Analytics cookies;
• Advertising cookies;
• Pixels;
• Tags;
• Web beacons; and
• Similar tracking technologies.

These technologies may help us:

• Operate the Site;
• Keep items in your shopping cart;
• Remember preferences;
• Maintain security;
• Understand Site usage;
• Measure Site performance;
• Evaluate advertising effectiveness;
• Understand product interest; and
• Personalize certain content or advertising.

Some cookies are necessary for the Site to function.

Other cookies or technologies may be optional depending on applicable law and your available privacy choices.

You may be able to manage cookies through:

• Our cookie or privacy settings;
• Your browser settings; and
• Other privacy controls available on your device.

Disabling certain cookies may affect some Site features.

---

7. Advertising and Targeted Advertising

We may work with advertising, analytics, and social media providers to:

• Measure advertising effectiveness;
• Understand how users interact with our Site;
• Build or measure audiences;
• Display advertisements;
• Provide advertisements that may be more relevant to your interests; and
• Evaluate marketing campaigns.

These activities may involve the disclosure of certain information such as:

• Online identifiers;
• IP address;
• Device information;
• Browser information;
• Site activity;
• Product-view information;
• Shopping activity; and
• Advertising interaction information.

Under certain U.S. state privacy laws, some advertising-related disclosures may be considered:

• A “sale” of personal information;
• “Sharing” of personal information;
• Targeted advertising; or
• Cross-context behavioral advertising,

even when no money is exchanged for the information.

Nanalinen does not represent that personal information is never “sold” or “shared” under every state-law definition solely because we do not exchange personal information directly for cash.

Where applicable law provides an opt-out right, eligible consumers may exercise that right through the privacy controls made available on our Site or by contacting us as described below.

---

8. How We Disclose Personal Information

We may disclose personal information to service providers and other parties when reasonably necessary for our business operations.

Categories of recipients may include:

• Payment processors;
• Banks and payment networks;
• Shipping carriers;
• Fulfillment and logistics partners;
• E-commerce platform providers;
• Hosting providers;
• Cloud infrastructure providers;
• Information technology providers;
• Customer service providers;
• Email and communication providers;
• Security and fraud-prevention providers;
• Analytics providers;
• Advertising and marketing providers;
• Social media platforms;
• Professional advisers, including legal, accounting, and tax advisers; and
• Government authorities when disclosure is legally required.

Service providers processing information on our behalf may be contractually required, where applicable, to use information only for permitted purposes and maintain appropriate safeguards.

---

9. Sale and Sharing of Personal Information

We do not sell personal information in the ordinary sense of exchanging customer information directly for monetary payment.

However, as explained above, some U.S. state privacy laws define “sale,” “sharing,” or targeted advertising more broadly.

For example, the use of certain advertising cookies, pixels, or similar technologies may constitute “sharing,” targeted advertising, or a “sale” under applicable state law.

Depending on the technologies used on our Site, categories of personal information that may be disclosed for advertising purposes may include:

• Identifiers;
• Device and browser information;
• Internet or electronic activity;
• Commercial information, such as products viewed or purchased;
• Approximate location; and
• Inferences about product or shopping interests.

We do not knowingly sell or share personal information of children under 13.

Additional rights may apply to minors under certain state laws.

---

10. Data Retention

We retain personal information only for as long as reasonably necessary for the purposes described in this Privacy Policy, unless a longer retention period is required or permitted by law.

Retention periods may depend on:

• The duration of our customer relationship;
• Order fulfillment requirements;
• Return and refund periods;
• Accounting and tax obligations;
• Fraud-prevention needs;
• Security requirements;
• Applicable limitation periods;
• Legal disputes;
• Regulatory requirements; and
• The purpose for which information was collected.

Order and Transaction Information

Order information may be retained for the time reasonably necessary to complete the transaction and thereafter for applicable tax, accounting, fraud-prevention, recordkeeping, and legal purposes.

Customer Account Information

Account information may generally be retained while your account remains active and for a reasonable period afterward when necessary for legal, security, fraud-prevention, or recordkeeping purposes.

Marketing Information

Marketing information may be retained until you unsubscribe, withdraw your marketing preference, or until we determine that the information is no longer reasonably necessary.

Cookies

Cookie retention periods vary depending on the type and purpose of the cookie.

Additional information may be available through our cookie-management tools or Cookie Policy.

---

11. Data Security

We use reasonable administrative, technical, and organizational safeguards designed to protect personal information against:

• Unauthorized access;
• Accidental loss;
• Improper use;
• Unauthorized modification;
• Unauthorized disclosure; and
• Destruction.

These measures may include, where appropriate:

• Access controls;
• Encryption technologies;
• Security monitoring;
• Internal procedures;
• Fraud-prevention measures; and
• Access restrictions.

However, no internet transmission, electronic storage system, or security measure can guarantee absolute security.

You are also responsible for maintaining the confidentiality of passwords and other account credentials associated with your account.

---

12. Your Privacy Rights

Depending on where you live and whether a particular state privacy law applies to Nanalinen, you may have some or all of the following rights:

Right to Know or Access

You may have the right to request information regarding personal information we collect, use, disclose, sell, or share.

Right to Delete

You may have the right to request deletion of certain personal information, subject to legal exceptions.

Right to Correct

You may have the right to request correction of inaccurate personal information.

Right to Data Portability

You may have the right to receive certain personal information in a portable and, where technically feasible, readily usable format.

Right to Opt Out of Sale

You may have the right to opt out of certain disclosures considered a “sale” under applicable law.

Right to Opt Out of Sharing or Targeted Advertising

You may have the right to opt out of certain uses or disclosures for:

• Targeted advertising;
• Cross-context behavioral advertising; or
• Sharing of personal information.

Right to Limit Certain Uses of Sensitive Personal Information

Where applicable, you may have the right to limit certain uses and disclosures of sensitive personal information.

Right to Opt Out of Certain Profiling

Residents of certain states may have the right to opt out of profiling in furtherance of decisions that produce legal or similarly significant effects.

Right to Non-Discrimination

We will not unlawfully discriminate against you because you exercise an applicable privacy right.

---

13. California Privacy Rights

If you are a California resident and the California Consumer Privacy Act, as amended by the California Privacy Rights Act (“CCPA”), applies to Nanalinen, you may have additional rights.

These may include the right to:

• Know the categories of personal information collected about you;
• Know the sources of that personal information;
• Know the business or commercial purposes for collecting, using, selling, or sharing that information;
• Know the categories of third parties to whom information is disclosed;
• Request access to certain personal information;
• Request deletion;
• Request correction;
• Opt out of the sale or sharing of personal information;
• Limit certain uses or disclosures of sensitive personal information when applicable; and
• Exercise applicable CCPA rights without unlawful discrimination.

Categories of Information We May Collect

During the preceding 12 months, depending on your interactions with us, we may have collected categories such as:

• Identifiers;
• Customer records information;
• Commercial information;
• Internet or electronic network activity;
• Approximate geolocation information;
• Customer-service communications;
• Inferences regarding shopping or product preferences; and
• Other personal information you voluntarily provide.

We collect these categories for the purposes described in this Privacy Policy.

California Notice at Collection

At or before the point of collection, we may provide additional notices regarding:

• The categories of personal information collected;
• The purposes for collection or use;
• Applicable retention information; and
• Available privacy choices.

Sale or Sharing

We do not sell personal information directly in exchange for money.

However, advertising-related disclosures may constitute “sale” or “sharing” under the CCPA.

Where required, California residents may opt out through the privacy-choice mechanisms made available on our Site.

Authorized Agents

Where permitted by California law, you may designate an authorized agent to submit certain requests on your behalf.

We may require reasonable verification of:

• Your identity;
• The agent's identity; and
• The agent's authority to act for you.

---

14. Colorado Privacy Rights

If you are a Colorado resident and the Colorado Privacy Act (“CPA”) applies to Nanalinen, you may have rights including:

• Confirming whether we process your personal data;
• Accessing your personal data;
• Correcting inaccuracies;
• Requesting deletion;
• Obtaining certain personal data in a portable format;
• Opting out of the sale of personal data;
• Opting out of targeted advertising; and
• Opting out of certain profiling activities.

If we deny an eligible Colorado privacy request, you may have a right to appeal our decision.

Instructions regarding an appeal will be provided where required by applicable law.

---

15. Privacy Preference Signals

Certain states require covered businesses to recognize qualifying universal opt-out preference mechanisms.

Where required by applicable law, we will process recognized opt-out preference signals, such as a valid Global Privacy Control (GPC) signal, as required for the browser or device from which the signal is sent.

Because privacy technologies and legal requirements continue to evolve, the availability and operation of these controls may change over time.

Legacy browser “Do Not Track” signals may operate differently from legally recognized universal opt-out mechanisms.

---

16. How to Exercise Your Privacy Rights

To submit a privacy-related request, you may contact us at:

service@nanalinen.com

Please include enough information for us to reasonably understand and process your request.

We may need to verify your identity before completing certain requests.

Verification may involve confirming information already associated with your account or transactions.

We will use information submitted for verification only as reasonably necessary to process and verify your request.

Some privacy rights are subject to exceptions and limitations under applicable law.

We will respond within the period required by the law that applies to your request.

If your state provides a right to appeal a privacy-request decision, we will provide information regarding the applicable appeal process where required.

---

17. Marketing Opt-Out Rights

You may unsubscribe from marketing emails at any time by:

• Clicking the “Unsubscribe” link in a promotional email; or
• Contacting us at:

service@nanalinen.com

After you unsubscribe, we may continue sending non-promotional communications reasonably necessary to manage your relationship with us, including order, shipping, account, security, and customer-service messages.

---

18. Promotions and Discounts

From time to time, Nanalinen may offer:

• Promotional discounts;
• Newsletter sign-up offers;
• Loyalty benefits;
• Coupon codes; or
• Other promotional programs.

Such promotions may be subject to separate terms and conditions.

Where a promotion constitutes a financial incentive or price or service difference under applicable privacy law, we will provide any additional notice required by law.

Participation in optional promotional programs is voluntary.

---

19. Children's Privacy

Nanalinen is a general-audience clothing website and is not directed to children under 13 years of age.

We do not knowingly collect personal information online from children under 13 in circumstances where parental consent would be required under the Children's Online Privacy Protection Act (“COPPA”).

If we learn that we have collected personal information from a child under 13 in violation of applicable law, we will take reasonable steps to delete the information.

If you believe a child under 13 has provided personal information to us, please contact:

service@nanalinen.com

Certain states may provide additional privacy protections for teenagers or minors.

Where applicable, we will process information relating to minors in accordance with those requirements.

---

20. Third-Party Websites and Services

Our Site may contain links to third-party websites or integrate services operated by third parties.

Examples may include:

• Payment providers;
• Social media platforms;
• Shipping providers;
• Advertising providers; and
• Other online services.

When you interact directly with an independent third-party service, that provider may process your personal information according to its own privacy policy and terms.

Nanalinen does not control the privacy practices of independent third parties.

We encourage you to review their privacy policies before providing personal information.

---

21. Business Transfers

If Nanalinen or WS Trading Company Ltd. is involved in a:

• Merger;
• Acquisition;
• Reorganization;
• Financing;
• Sale of assets;
• Bankruptcy;
• Corporate restructuring; or
• Similar business transaction,

personal information may be disclosed or transferred as part of that transaction, subject to applicable law.

---

22. Legal Disclosures

We may disclose personal information when we reasonably believe disclosure is necessary to:

• Comply with applicable law;
• Respond to subpoenas, court orders, or lawful government requests;
• Protect our legal rights;
• Protect the rights or safety of customers or others;
• Investigate fraud or security issues;
• Enforce agreements; or
• Establish, exercise, or defend legal claims.

---

23. Processing and Storage Locations

Nanalinen is operated by a company located in the United States.

Our service providers may process or store information in the United States or other countries.

Privacy and data-protection laws may differ between jurisdictions.

When legally required, we take reasonable steps designed to ensure that personal information is handled in accordance with applicable privacy requirements.

If you access our Site from outside the United States, additional regional privacy notices or legal requirements may apply.

---

24. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect:

• Changes in applicable law;
• Changes to our services;
• Changes in the technologies we use;
• Changes in service providers;
• Changes in our business operations; or
• Changes in our privacy practices.

When we update this Privacy Policy, we will revise the “Last Updated” date at the top of this page.

If required by applicable law, we may provide additional notice regarding material changes.

We encourage you to review this Privacy Policy periodically.

---

25. Contact Us

If you have questions about this Privacy Policy, our privacy practices, or a privacy-rights request, please contact:

---

Important Information About Returns

The mailing or administrative address listed in this Privacy Policy is not automatically a product return address.

Before returning any product, please contact our customer service team for the applicable return instructions.

Packages sent to an incorrect address or returned without following the applicable return procedure may not be processed properly.

For questions regarding returns or refunds, please contact:

service@nanalinen.com