PRIVACY POLICY
Effective Date: November 13, 2026 · Last updated: November 13, 2026
NexUS Quads ("NEXUS," "we," "us," or "our") operates https://nexusquad.store. This Privacy Policy explains what personal data we collect, why, and what rights you have over it.
1. Who We Are (Data Controller)
NexUS Quads ("NEXUS") is the controller of personal data collected through https://nexusquad.store (the "Site"). We sell digital products only: downloadable CAD files, fabrication drawings, bills of materials and build manuals for mini quads. Contact for all privacy matters: nexus-support@nexusquad.store.
2. Data We Collect
Order data: name, email address, billing address, country, IP address at purchase, products purchased, order number, amount and timestamps. Payment data: card details are entered directly into the checkout of our e-commerce and payment provider, Shopify Inc. and Shopify Payments (and any wallet you choose, e.g. PayPal, Apple Pay, Google Pay). We never see or store your full card number. Delivery data: download links issued, download timestamps and IP addresses — kept as proof of delivery of the digital product. Support data: anything you send us by email. Technical data: browser, device type, operating system, referring page and pages visited, collected automatically when you browse the Site. We do not collect sensitive data (health, biometric, etc.) and we do not knowingly collect data from children.
3. How and Why We Use Your Data
• To process your payment and deliver your digital product (contract). • To send order confirmations, download links and important product updates such as new revisions (contract). • To answer support requests (contract / legitimate interest). • To prevent fraud, abuse and unauthorized sharing of files, and to handle chargebacks and disputes (legitimate interest). • To keep tax and accounting records (legal obligation). • To understand how the Site is used and improve it (legitimate interest). • To send marketing emails only if you opted in — you can unsubscribe at any time via the link in every email (consent).
4. Legal Bases (EU / EEA / UK)
Under the GDPR and UK GDPR we rely on: performance of a contract (Art. 6(1)(b)); legal obligation (Art. 6(1)(c)); legitimate interests (Art. 6(1)(f)) — fraud prevention, dispute defense and service improvement; and consent (Art. 6(1)(a)) for marketing and non-essential cookies, which you can withdraw at any time.
5. Who We Share Data With
• Shopify Inc. — store, checkout, payment processing and order emails (privacy policy: https://www.shopify.com/legal/privacy). • Payment providers and banks you choose at checkout, for authorization, fraud screening and dispute handling. • Hosting and website infrastructure providers that run the Site. • Email service providers that deliver order and support emails. • Authorities, courts or professional advisors where required by law or to establish or defend legal claims. All providers process data only on our instructions or under their own privacy policies as independent controllers. We do not sell or rent your personal data, and we do not share it for cross-context behavioral advertising.
6. International Transfers
We sell worldwide and our providers (including Shopify) may process data outside your country, including in the United States and Canada. Where required, transfers are protected by appropriate safeguards such as the European Commission's Standard Contractual Clauses or adequacy decisions.
7. Cookies
Strictly necessary cookies keep the cart and checkout working and protect against fraud; they cannot be turned off. Shopify checkout sets its own cookies as described in Shopify's cookie policy. Where we use analytics or marketing cookies that require consent in your region, we only set them after you agree, and you can withdraw consent at any time. You can also block or delete cookies in your browser settings, but some parts of the Site may then stop working.
8. Data Retention
Order, payment and delivery records: kept for as long as required by tax and accounting laws (usually up to 10 years) and to defend against chargebacks. Support emails: up to 3 years after the last contact. Marketing data: until you unsubscribe or withdraw consent. After these periods data is deleted or anonymized.
9. Security
The Site and checkout use HTTPS/TLS encryption. Payments are handled by PCI-DSS Level 1 certified providers. Access to personal data is limited to people who need it to run the shop. No method of transmission is 100% secure, but we take reasonable measures to protect your data and will notify you and the authorities of any breach where the law requires.
10. Your Rights
Depending on where you live, you may have the right to: access your data; correct it; delete it; restrict or object to processing; receive it in a portable format; withdraw consent; and not be subject to decisions based solely on automated processing. EU/EEA/UK residents may also complain to their local data protection authority. California residents (CCPA/CPRA): you have the right to know, delete, correct and opt out of the sale or sharing of personal information. We do not sell or share personal information, and we will not discriminate against you for exercising your rights. To exercise any right, email nexus-support@nexusquad.store. We reply within 30 days and may need to verify your identity.
11. Children
The Site is not intended for anyone under 18. We do not knowingly collect data from children under 16. If you believe a child has given us data, contact nexus-support@nexusquad.store and we will delete it.
12. Changes to This Policy
We may update this Privacy Policy. The new version will be posted on this page with an updated date. Material changes will be highlighted on the Site or sent by email where appropriate.
13. Contact
NexUS Quads — Privacy Email: nexus-support@nexusquad.store Website: https://nexusquad.store