Privacy policy

PRIVACY POLICY

Last updated: 20 August 2026

1. ABOUT THIS PRIVACY POLICY

This Privacy Policy explains how PRINSLOO UNLIMITED ENTERPRISES LTD trading as PrinsNova After Dark collects, uses, stores and shares personal information when you:

• Visit our website
• Create or use a customer account
• View or purchase products
• Contact us
• Request a return or refund
• Subscribe to marketing
• Otherwise interact with our services

PrinsNova After Dark is a trading name of PRINSLOO UNLIMITED ENTERPRISES LTD, a private limited company registered in England and Wales under company number 17406743.

Our online store is hosted using Shopify, which provides the ecommerce platform that enables us to offer products and services to you.

Please read this Privacy Policy carefully. It should be read together with our Terms of Service, Returns and Refund Policy, Shipping Policy, Contact Information and Legal Notice.

1. WHO IS RESPONSIBLE FOR YOUR INFORMATION?

For the purposes of applicable UK data-protection law, the data controller is:

PRINSLOO UNLIMITED ENTERPRISES LTD
Trading as PrinsNova After Dark

Company number: 17406743
Registered in: England and Wales
Registered office: 124 City Road, London, EC1V 2NX
Email: afterdark@prinsnova.uk
Telephone: +44 7555 963062
Website: https://afterdark.prinsnova.uk

As data controller, we determine why and how personal information is processed in connection with operating PrinsNova After Dark, except where another organisation acts as an independent controller for its own purposes.

The registered office is not a retail shop, customer-service centre or returns address.

1. PERSONAL INFORMATION WE COLLECT

The information we collect depends on how you interact with us.

We may collect the following categories of personal information.

CONTACT AND IDENTITY INFORMATION

This may include:

• Your full name
• Billing address
• Delivery address
• Email address
• Telephone number
• Customer-account identifier
• Age-confirmation or age-assurance information, where applicable

We do not need or request a copy of an identity document unless it is reasonably required for verification, fraud prevention, age assurance, compliance with law or responding to a valid data-rights request.

ORDER AND TRANSACTION INFORMATION

This may include:

• Products viewed
• Products placed in your basket or wishlist
• Products purchased
• Order number
• Order value
• Discounts applied
• Delivery method
• Returns, cancellations and refunds
• Transaction status
• Previous transactions with us

Because we sell adult and intimate products, order history may be private and sensitive in context. We apply additional care to its use and disclosure.

PAYMENT INFORMATION

Payments are processed by Shopify Payments, PayPal or another available payment provider.

The payment provider may collect and process:

• Card or bank-account information
• Billing details
• Payment authentication information
• Transaction and fraud-prevention data

We do not normally receive or retain your complete payment-card number or card-security code.

We may receive limited payment information such as:

• Payment method
• Payment status
• Transaction reference
• Billing address
• Limited card details, such as the card type and final digits

Payment providers process personal information under their own terms and privacy notices.

CUSTOMER-ACCOUNT INFORMATION

This may include:

• Account username or email address
• Encrypted or securely managed credentials
• Saved addresses
• Preferences and settings
• Account activity

You are responsible for protecting your account credentials and access to shared devices.

COMMUNICATIONS

We may collect information contained in communications you send to us, including:

• Customer-service enquiries
• Product questions
• Complaints
• Return and refund requests
• Photographs or videos supplied to demonstrate damage or a fault
• Reviews, feedback and survey responses

Please do not send unnecessary intimate photographs, medical information, identification documents or other highly sensitive information.

Where evidence is needed for a faulty-product claim, provide only the minimum information necessary to demonstrate the issue.

TECHNICAL AND USAGE INFORMATION

We and our technology providers may collect:

• IP address
• Browser type and version
• Device type
• Operating system
• Device and advertising identifiers
• Website pages visited
• Time and date of visits
• Referring website
• Interactions with the website
• Basket, checkout and account activity
• Cookie and consent preferences
• Approximate location derived from an IP address
• Security, diagnostic and error information

MARKETING INFORMATION

This may include:

• Whether you have agreed to receive marketing
• Marketing channel preferences
• Messages sent or opened
• Links selected
• Consent and unsubscribe records
• General interaction with advertising campaigns

1. INTIMATE PURCHASES AND SENSITIVE INFORMATION

UK data-protection law gives additional protection to special-category information, including information concerning a person’s health, sex life or sexual orientation.

Purchasing an adult product does not necessarily establish a person’s health, sex life or sexual orientation.

We do not intentionally use a customer’s specific intimate purchases to:

• Infer their sexual orientation
• Infer details about their sex life
• Infer a medical condition
• Create sensitive customer profiles
• Make significant decisions about them
• Create advertising audiences based on inferred sexual behaviour or orientation

We do not sell personal information or customer order histories.

We do not require customers to disclose their sexual orientation, relationship status, medical history or details of their sex life to purchase ordinary products.

If you voluntarily provide health information or other special-category information in a product enquiry, complaint or support request, we will:

• Use only the minimum information reasonably necessary
• Restrict access to those who need it
• Avoid retaining it longer than necessary
• Obtain explicit consent where this is the appropriate legal condition
• Otherwise process it only where another lawful condition applies, such as establishing, exercising or defending legal claims

Please avoid including unnecessary sensitive information in customer-service communications.

1. HOW WE COLLECT INFORMATION

We may collect personal information from the following sources.

DIRECTLY FROM YOU

This includes information provided when you:

• Place an order
• Create an account
• Contact customer service
• Request a return or refund
• Submit a review
• Enter a promotion
• Subscribe to marketing
• Complete a form or survey

AUTOMATICALLY

We may collect technical and usage information automatically when you use the website through:

• Cookies
• Pixels
• Tags
• Log files
• Local storage
• Similar technologies

FROM SERVICE PROVIDERS

We may receive information from organisations that help us operate the store, including:

• Shopify
• Payment providers
• AppScenic
• Product suppliers
• Fulfilment partners
• Couriers
• Fraud-prevention providers
• Analytics providers
• Customer-service systems
• Marketing platforms, where enabled

FROM OTHER PARTIES

We may receive relevant information from:

• A person placing an order for you
• A recipient nominated by a customer
• A courier investigating a delivery
• A payment provider investigating a transaction
• Law-enforcement or regulatory authorities
• Publicly available sources where necessary for fraud prevention or legal compliance

1. WHY WE USE PERSONAL INFORMATION

We use personal information for the purposes described below.

PROCESSING AND FULFILLING ORDERS

We use personal information to:

• Accept and administer orders
• Process payments
• Confirm transactions
• Arrange packing and delivery
• Send order and delivery updates
• Process cancellations, returns and refunds
• Respond to delivery problems
• Provide customer service

Our lawful basis is normally that processing is necessary to perform a contract with you or to take steps at your request before entering into a contract.

CUSTOMER ACCOUNTS

We use personal information to:

• Create and manage accounts
• Save permitted preferences
• Display order history
• Authenticate account access
• Help recover account access
• Protect account security

Our lawful basis is normally performance of our contract and our legitimate interest in providing and securing customer accounts.

CUSTOMER SERVICE

We use personal information to:

• Respond to enquiries
• Investigate complaints
• Assess faulty or damaged-product reports
• Resolve delivery problems
• Provide appropriate remedies
• Maintain records of our response

Our lawful basis may be performance of a contract, compliance with a legal obligation or our legitimate interest in providing customer service and resolving disputes.

SAFETY, SECURITY AND FRAUD PREVENTION

We use personal information to:

• Authenticate transactions
• Detect and prevent fraud
• Protect customer accounts
• Identify malicious activity
• Secure the website
• Investigate suspected policy breaches
• Protect our legal rights and those of others

Our lawful basis may be our legitimate interests in protecting customers and the business, compliance with a legal obligation or, where relevant, establishing, exercising or defending legal claims.

LEGAL AND REGULATORY COMPLIANCE

We use personal information where necessary to:

• Keep accounting and transaction records
• Comply with tax requirements
• Respond to lawful requests from authorities
• Manage product-safety incidents and recalls
• Exercise or defend legal claims
• Enforce our Terms and policies

Our lawful basis is normally compliance with a legal obligation or our legitimate interests in protecting and enforcing our legal rights.

IMPROVING THE WEBSITE

We may use appropriately limited technical and usage information to:

• Understand how the website is used
• Diagnose technical problems
• Improve navigation and performance
• Measure general store performance
• Prevent errors and abuse

Where non-essential cookies or similar technologies are involved, we will request consent where required.

We do not need to analyse customers’ specific intimate purchases to perform general website analytics.

MARKETING

Where permitted, we may use contact and marketing-preference information to:

• Send newsletters
• Provide offers and promotions
• Inform you about products or services
• Measure general campaign effectiveness

We will rely on consent where consent is required.

Where the law permits marketing without prior consent, we may rely on our legitimate interests, subject to your right to object and the requirements of applicable electronic-marketing law.

You can unsubscribe from marketing at any time by:

• Selecting the unsubscribe link in an email
• Adjusting available customer preferences
• Contacting afterdark@prinsnova.uk

Unsubscribing from marketing does not prevent us from sending necessary messages about your account, orders, delivery, safety notices, returns or refunds.

We do not intentionally send personalised marketing based on inferences about a customer’s sex life, sexual orientation or health.

1. COOKIES AND SIMILAR TECHNOLOGIES

We and our service providers may use cookies and similar technologies.

These may include:

STRICTLY NECESSARY COOKIES

These are used to:

• Operate the website
• Maintain your basket
• Process checkout
• Remember privacy choices
• Secure accounts and transactions
• Prevent fraud

These cookies are necessary for the website to function and generally cannot be disabled through our cookie controls.

PREFERENCE COOKIES

These may remember settings such as language, region or display preferences.

ANALYTICS COOKIES

These help us understand general website use, performance and errors.

ADVERTISING COOKIES

Where enabled and consented to, these may measure advertising effectiveness or help deliver advertising.

We will not place non-essential cookies before obtaining consent where consent is legally required.

You can use the cookie banner or available privacy settings to accept, reject or adjust non-essential cookies.

You may also control cookies using your browser settings. Blocking certain necessary cookies may prevent parts of the store from working correctly.

1. HOW WE SHARE PERSONAL INFORMATION

We share personal information only where reasonably necessary for the purposes explained in this Privacy Policy.

SHOPIFY

Shopify hosts the store and processes information needed to provide its ecommerce, checkout, security, analytics and related services.

Information submitted through the store is transmitted to Shopify and may be processed by Shopify and its service providers.

Shopify may also act as an independent controller for certain processing undertaken for its own purposes.

Further information is available in the Shopify Consumer Privacy Policy:

https://www.shopify.com/legal/privacy/app-users

Shopify privacy requests may also be submitted through:

https://privacy.shopify.com/en

PAYMENT PROVIDERS

Payment and fraud-prevention information may be shared with Shopify Payments, PayPal or another payment provider selected during checkout.

These providers use information to process payments, authenticate customers, prevent fraud and meet their legal obligations.

APPSCENIC, SUPPLIERS AND FULFILMENT PARTNERS

We may share the minimum information reasonably required to fulfil an order with AppScenic and the supplier or fulfilment partner responsible for the product.

This will normally include:

• Recipient name
• Delivery address
• Contact information required by the courier
• Product and quantity ordered
• Order or fulfilment reference
• Delivery instructions

We do not authorise suppliers to use this information for their own marketing.

COURIERS AND DELIVERY PROVIDERS

We share information required to deliver and track parcels, investigate missing deliveries and manage delivery problems.

SERVICE PROVIDERS

We may use providers supplying:

• Website hosting and technical support
• Email delivery
• Customer service
• Cloud storage
• Security and fraud prevention
• Analytics
• Accounting
• Professional advice
• Marketing services, where lawfully enabled

Service providers should process information only for the agreed purpose and under appropriate contractual and security requirements.

LEGAL AND REGULATORY DISCLOSURES

We may disclose personal information where reasonably necessary to:

• Comply with a legal obligation
• Respond to a valid court order or lawful authority request
• Report or investigate fraud or crime
• Manage a product-safety incident
• Establish, exercise or defend legal claims
• Protect customers, the public, our business or another person’s rights

BUSINESS TRANSACTIONS

If the company or part of its business is reorganised, sold, merged or transferred, relevant personal information may be disclosed to professional advisers and prospective or actual parties to the transaction.

Information will remain subject to applicable data-protection requirements.

1. THIRD-PARTY WEBSITES AND SERVICES

Our website may contain links to websites or services operated independently by third parties.

If you follow a third-party link, that organisation’s privacy notice and terms will apply.

We are not responsible for the privacy, security, accuracy or availability of an independent third-party website that we do not own or control.

The inclusion of a link does not necessarily mean that we endorse the third party or all of its content.

1. CHILDREN’S INFORMATION

Our website and products are intended only for adults aged 18 or over.

We do not knowingly collect personal information from children through the store or knowingly permit children to create accounts or place orders.

If you believe that a person under 18 has provided personal information to us, please contact afterdark@prinsnova.uk.

We will investigate and delete the information where appropriate, subject to any legal requirement to retain it.

1. DATA SECURITY

We use reasonable administrative, organisational and technical measures designed to protect personal information against:

• Unauthorised access
• Accidental loss
• Misuse
• Unlawful disclosure
• Alteration
• Destruction

These measures may include:

• Restricted access
• Account authentication
• Encryption provided by our platforms and payment providers
• Secure payment processing
• Service-provider controls
• Staff access limited according to business need
• Security monitoring and updates

No method of electronic transmission or storage is completely secure. We cannot guarantee absolute security.

Please:

• Use a strong and unique password
• Protect access to shared devices and email accounts
• Do not share customer-account credentials
• Avoid sending unnecessary sensitive information by ordinary email
• Contact us promptly if you suspect unauthorised account access

1. HOW LONG WE KEEP INFORMATION

We retain personal information only for as long as reasonably necessary for the purpose for which it was collected, including legal, accounting, tax, fraud-prevention, product-safety and dispute-resolution requirements.

Retention periods depend on the type of information and why it is processed.

Generally:

• Order, payment, accounting and tax records may be retained for up to six years after the relevant transaction or accounting period, or longer where required by law
• Customer-account information may be retained while the account remains active and for a reasonable period afterwards
• Customer-service and complaint records may be retained while the matter is active and for a reasonable period needed to establish or defend legal claims
• Product-safety and recall records may be retained for as long as necessary to meet safety and legal obligations
• Marketing information is retained until consent is withdrawn, you object or it is no longer reasonably required
• Cookie and consent records are retained for an appropriate period to demonstrate and respect your choices
• Unnecessary photographs, videos and sensitive information supplied for support purposes will be deleted when no longer reasonably required

We may retain information for longer where:

• A complaint, dispute or legal claim is ongoing
• Fraud or security concerns exist
• A legal or regulatory obligation requires it
• A product-safety investigation or recall remains active

When information is no longer required, it will be deleted, anonymised or securely restricted as appropriate.

1. INTERNATIONAL TRANSFERS

Some service providers, including Shopify and certain technology, payment or fulfilment providers, may process personal information outside the United Kingdom.

Where personal information is transferred to a country that has not been recognised as providing an adequate level of protection, we will rely on an appropriate safeguard where required.

Safeguards may include:

• The UK International Data Transfer Agreement
• The UK Addendum to approved Standard Contractual Clauses
• Another legally recognised transfer mechanism

Further information about Shopify’s international processing is available through Shopify’s privacy information.

You may contact us if you require further information about safeguards relevant to your personal information.

1. AUTOMATED DECISION-MAKING

Payment providers and fraud-prevention services may use automated systems to assess transactions for fraud, security and payment risk.

This may result in a payment being delayed, declined or referred for additional verification.

We do not intentionally use intimate purchase history to make decisions that produce legal or similarly significant effects about customers.

Where applicable law provides rights concerning a qualifying solely automated decision, you may contact us to request information, express your point of view or ask for appropriate human review.

A payment provider may need to handle a request relating to its own automated systems.

1. YOUR DATA-PROTECTION RIGHTS

Depending on the circumstances, UK data-protection law may give you the right to:

ACCESS

You may request confirmation that we process your personal information and ask for a copy of it.

CORRECTION

You may ask us to correct inaccurate or incomplete information.

DELETION

You may ask us to delete personal information in certain circumstances.

Deletion rights are not absolute. We may retain information where necessary to comply with law, complete an order, resolve a dispute or establish, exercise or defend legal claims.

RESTRICTION

You may ask us to restrict how personal information is used in certain circumstances.

OBJECTION

You may object to processing based on legitimate interests.

You have an absolute right to object to the use of your personal information for direct marketing.

PORTABILITY

Where applicable, you may request certain personal information in a structured, commonly used and machine-readable format or ask for it to be transferred to another controller.

WITHDRAWAL OF CONSENT

Where processing is based on consent, you may withdraw that consent at any time.

Withdrawal does not affect processing that occurred lawfully before consent was withdrawn.

RIGHTS RELATING TO AUTOMATED DECISIONS

You may have rights where a decision producing legal or similarly significant effects is based solely on automated processing.

COMPLAINT

You may complain to us or to the Information Commissioner’s Office about how your information has been handled.

1. HOW TO EXERCISE YOUR RIGHTS

To exercise a data-protection right, contact:

Email: afterdark@prinsnova.uk

Please state that your request concerns personal information and describe the right you wish to exercise.

We may ask for information reasonably necessary to:

• Confirm your identity
• Locate the relevant records
• Protect information from unauthorised disclosure
• Clarify the scope of the request

We will not normally charge a fee.

A reasonable fee may be charged, or a request may be refused, where permitted by law because it is manifestly unfounded or excessive.

We will respond within the period required by applicable law. For most UK data-rights requests, this will normally be within one month, although the period may be extended where legally permitted for a complex request.

You may authorise another person to submit a request for you. We may require evidence that they are authorised to act on your behalf.

1. MARKETING PREFERENCES

You can stop receiving marketing emails at any time by:

• Selecting the unsubscribe link in the email
• Adjusting available customer-account preferences
• Contacting afterdark@prinsnova.uk

We may still send non-promotional communications concerning:

• An order
• Delivery
• Account security
• Returns or refunds
• Product-safety notices
• Changes necessary to provide a service

Withdrawing from marketing will not affect these essential communications.

1. COMPLAINTS

If you have concerns about how we collect or use personal information, please contact us first so that we can try to resolve the matter.

Email: afterdark@prinsnova.uk
Telephone: +44 7555 963062

You also have the right to complain to the UK Information Commissioner’s Office.

Information Commissioner’s Office
Website: https://ico.org.uk/make-a-complaint/
Telephone: 0303 123 1113

You may contact the data-protection authority in the country where you live or work where another authority has jurisdiction.

1. CHANGES TO THIS PRIVACY POLICY

We may update this Privacy Policy to reflect changes in:

• Our business or services
• Legal or regulatory requirements
• Technology
• Suppliers and fulfilment arrangements
• Payment methods
• Privacy and marketing practices

The updated version will be published on this page with a revised “Last updated” date.

Where required, we will provide additional notice or request renewed consent.

1. CONTACT US

Questions about this Privacy Policy, our privacy practices or your personal information should be sent to:

PrinsNova After Dark
A trading name of PRINSLOO UNLIMITED ENTERPRISES LTD

Company number: 17406743
Registered in: England and Wales
Email: afterdark@prinsnova.uk
Telephone: +44 7555 963062
Registered office: 124 City Road, London, EC1V 2NX

The registered office is not a retail shop, customer-service centre or returns address.