Privacy policy

PRIVACY POLICY

Nanokeratin System - nanokeratinsystem.com

Last updated: 22 September 2026.

This Privacy Policy explains how Nanokeratin System collects, uses, stores and shares personal information when you visit or use nanokeratinsystem.com, create an account, apply for professional access, purchase products, communicate with us, or otherwise interact with our services. It also explains the choices and rights that may be available to you under applicable privacy and data-protection laws.

This policy is designed as a global privacy notice. Additional rights or requirements may apply depending on where you live and where our services are offered. Where applicable law requires a separate consent, notice or choice - for example for direct marketing or non-essential cookies - we will provide it separately.

1. Who we are

This website, nanokeratinsystem.com, and its online store (together, the "Site") are operated by NKS Laboratories Ltd., an Israeli company, company registration number 514854793, with its registered office at Haplada 23, Ashdod 7752485, Israel ("NKS", "we", "us" or "our").

NKS is the data controller responsible for the personal information described in this Privacy Policy and, for the purposes of Israeli privacy law, is the controller of the relevant database(s) to the extent applicable.

Contact details for privacy matters:

EU and UK representatives. Where and for so long as applicable data-protection law requires NKS to appoint a representative in the European Economic Area and/or the United Kingdom, NKS will maintain the required representative and make the representative's contact details available in the manner required by applicable law.

The Site is hosted on the Shopify platform. Shopify and relevant Shopify affiliates process personal information in connection with the operation of the Site. For certain Shopify services and purposes, Shopify may also act as an independent controller, as described in Section 7.

2. Scope, transparency and your choices

This Privacy Policy applies to visitors, customers, account holders and applicants for NKS PRO professional access. By using the Site, you acknowledge that you have been provided with this Privacy Policy. This acknowledgement is not a substitute for consent where consent is legally required.

Unless we tell you otherwise at the point of collection, you are not legally required to provide personal information to us. However, some information is necessary to provide a requested service. For example, without contact, payment and delivery information we cannot process or deliver an order, and without the information required for professional verification we may be unable to approve NKS PRO access.

Where required, we may provide shorter privacy notices next to forms, account-registration fields, checkout, marketing sign-up forms or other collection points. Those notices should be read together with this Privacy Policy.

This Privacy Policy is written in English. Translations may be provided for convenience. Where legally permitted, the English version will be used to interpret this policy if there is an inconsistency between translations.

3. Minimum age

The Site is intended for adults. You must be at least 18 years old to create an account, apply for NKS PRO access or place an order. We do not knowingly collect personal information from children under 18 through the Site. If you believe a child has provided personal information to us, please contact info@nanoks.com so that we can review and, where appropriate, delete it.

4. Personal information we collect

The information we collect depends on how you interact with the Site and which features are enabled.

4.1 Information you provide directly

Activity

Information collected

Newsletter or marketing sign-up

Email address, and your marketing preference or consent where applicable.

Creating and using a customer account

Name, email address, phone number, shipping and billing addresses, order history and saved account preferences. Customer authentication is managed by Shopify using passwordless authentication, such as a one-time verification code sent to your email and, where available, other Shopify-supported sign-in methods. NKS does not receive or have access to your one-time authentication codes or passkeys.

Placing an order

Name, email address, telephone number, shipping and billing addresses, products ordered, order value, currency, delivery instructions and transaction-related information. Payment processing is described in Section 4.3.

Applying for NKS PRO professional access

Full name, business or salon name, phone number, email address, city, business address, field of activity and, where requested or voluntarily provided, business or VAT number, website or social-media handle, salon information and free-text information relevant to professional verification. NKS PRO access may be managed through the same Shopify customer account using an internal professional status or tag.

Contacting us

Name, email address, telephone number, the content of your communication and any attachments. If you contact us through WhatsApp or another messaging platform, the platform may also make your account name, telephone number or profile information available to us.

Submitting a product review, where enabled

Name or display name, email address, review text, rating and any photograph or video you choose to upload, together with information used to verify a purchase where applicable.

Promotions, training or events, where offered

Contact details and other information requested in the relevant registration or participation form.


4.2 Information collected automatically

When you use the Site, NKS, Shopify and other enabled service providers may automatically collect device and usage information through cookies, pixels, tags, SDKs and similar technologies. This may include IP address, approximate location derived from IP address, browser type and language, operating system, device or browser identifiers, referring URL, pages and products viewed, searches, items added to cart, interactions with the Site, session information, clicks, and the date and time of activity. Shopify may also assign identifiers used to operate, secure and measure the Site. See Section 8 for more information.

4.3 Payment information

Payments are processed by third-party payment providers. Our current payment options may include PayPal, Airwallex and, where enabled, digital-wallet or checkout payment methods made available through Shopify. For an Israeli PayPal business account, the PayPal service provider is currently PayPal Israel Payment Services Ltd., together with other PayPal group entities where relevant to the processing of an international transaction.

NKS does not receive or store full payment-card numbers or CVV security codes on its own systems. Payment credentials are entered into or processed through the relevant payment provider or checkout environment. We may receive payment confirmation, payment-method type, limited card information such as the last four digits where provided, transaction amount, currency, transaction reference, and information needed for fraud prevention, refunds, chargebacks and accounting.

4.4 Information from third parties

We may receive personal information from Shopify, payment providers, shipping carriers, customs or delivery partners, social-media or advertising platforms, professional distributors and partners, and publicly available sources. Examples include payment or chargeback status, fraud-risk indicators, delivery status, campaign or engagement information, and information used to verify a professional application where appropriate.

4.5 Sensitive or special-category information

We do not intentionally request sensitive or special-category personal information through the Site, such as health information, biometric data used for identification, religious or political beliefs, or other specially protected information. Please do not include such information in free-text fields, reviews or general customer-support messages unless it is specifically requested by us for a permitted purpose.

If sensitive information is included incidentally in a communication, we will process it only where permitted by applicable law, only to the extent reasonably necessary to handle the communication or comply with a legal obligation, and we may delete, redact or avoid recording it where it is not required.

5. How and why we use personal information

We use personal information for the purposes below. Where the GDPR or UK GDPR applies, the principal legal bases we may rely on are indicated. The appropriate basis can depend on the specific circumstances.

Purpose

Examples

GDPR / UK GDPR basis

Providing the Site and fulfilling orders

Creating and managing accounts; processing transactions; packing and shipping orders from Israel; sending order and delivery communications; handling returns, refunds and customer support.

Performance of a contract; legitimate interests in operating and improving our business.

NKS PRO professional verification and access

Reviewing professional applications; verifying professional or salon status; communicating about applications; granting and managing professional access, materials, training, protocols, catalogues and professional pricing.

Steps at your request before entering a contract; performance of a contract where applicable; legitimate interests in limiting professional services and materials to appropriate professional users.

Communicating with you

Responding to enquiries through forms, email, telephone, WhatsApp or other enabled channels; sending service messages about accounts, orders or important changes.

Performance of a contract; steps at your request; legitimate interests in providing support and maintaining business relationships.

Marketing and promotions

Sending newsletters, product information, professional updates, promotions and, where enabled, abandoned-cart reminders by permitted channels; measuring and personalising advertising where permitted.

Consent where required; and, where applicable law permits, legitimate interests in marketing similar products or services to existing customers, subject to applicable notice and opt-out requirements.

Analytics and improvement

Understanding Site usage, product interest and campaign performance; testing and improving the Site, products and services.

Consent for non-essential tracking where required; legitimate interests for permitted aggregated, limited or essential analytics.

Reviews and user content

Receiving, verifying, moderating and publishing reviews that you submit; inviting purchasers to review products where permitted.

Consent where applicable; performance of requested services; legitimate interests in obtaining authentic customer feedback.

Security and fraud prevention

Authenticating account access; detecting fraudulent orders, bots, abuse or security incidents; protecting the Site, customers and NKS.

Legitimate interests; compliance with legal obligations where applicable.

Legal and regulatory compliance

Tax and accounting records; responding to lawful requests; product-safety, cosmetics and regulatory obligations; handling claims, disputes and legal proceedings.

Legal obligation; legitimate interests in establishing, exercising or defending legal rights.

Business transactions

Due diligence, restructuring, financing, merger, acquisition or sale of all or part of the business.

Legitimate interests, subject to appropriate safeguards and applicable law.


We do not use personal information for solely automated decision-making that produces legal or similarly significant effects on you. NKS PRO applications are intended to be subject to human review.

6. Marketing communications and choices

We send electronic marketing only where permitted by applicable law. Depending on your location, this will generally mean that you have opted in, or that applicable law permits us to contact an existing customer about similar products or services after the required notice and opportunity to opt out have been provided.

You can stop marketing communications at any time by using the unsubscribe or opt-out mechanism in the message, changing available preferences, or contacting info@nanoks.com. Opting out of marketing does not prevent us from sending non-promotional communications that are necessary for an order, account, customer-service request, legal notice or other transaction.

Where WhatsApp or SMS marketing is offered, any consent and opt-out mechanism will be managed in accordance with applicable law and the capabilities of the relevant messaging service.

7. How we share personal information

We do not sell personal information for money. We disclose personal information to service providers and other recipients where reasonably necessary for the purposes described in this policy, as permitted or required by law.

7.1 Service providers and other recipients

Category

Provider(s)

Purpose

E-commerce, hosting, checkout and customer accounts

Shopify and relevant Shopify affiliates

Operating and securing the Site, customer accounts and checkout; hosting store, customer and order data; providing platform and transaction functionality.

Payment services

PayPal Israel Payment Services Ltd. and relevant PayPal group entities; Airwallex group entity that provides services to NKS; other enabled checkout or wallet providers

Processing payments, refunds, transaction verification, fraud prevention and chargebacks. Payment providers may act as independent controllers for parts of their processing.

Shipping, EMS and customs

Israel Post Company Ltd.; EMS and the relevant national postal operator or delivery partner in the destination country; customs, postal and import authorities where required

Preparing, transporting, tracking and delivering orders; customs and import processing.

Product reviews, where enabled

Judge.me or another enabled review provider

Collecting, verifying, moderating and displaying product reviews and, where enabled, sending review invitations.

Accessibility technology, where enabled

UserWay or another enabled accessibility provider

Providing accessibility features and processing limited technical or usage information necessary for those features.

Messaging and chat, where enabled

Dondy or another chat-widget provider; WhatsApp / Meta Platforms

Allowing a visitor to initiate or continue a conversation through a third-party messaging service.

Bot and spam protection, where enabled

hCaptcha / Intuition Machines or another security provider

Protecting forms and the Site from automated abuse and malicious activity.

Translation and localisation, where enabled

Shopify translation/localisation features and enabled translation applications

Displaying Site content in the selected language or region.

Email, SMS and marketing tools, where enabled

Shopify Email and/or other enabled marketing providers

Sending permitted transactional or marketing communications and managing preferences.

Analytics and advertising, where enabled

Shopify analytics and marketing features; Google Analytics, Google Ads and YouTube measurement tools; Meta Platforms technologies such as Meta Pixel or Conversions API

Measuring Site and campaign performance and, where permitted, personalising or measuring advertising.

Professional advisers

Accountants, auditors, insurers, lawyers and other professional advisers

Accounting, insurance, audit, regulatory, legal and dispute-related services.

Site search and filtering, where enabled

SearchGro / Simprosys Infomedia or another enabled search and filtering provider

Providing product search, filtering and related functionality and, where enabled and permitted, measuring search or product interactions.


7.2 Shopify processing

Shopify processes personal information to provide the commerce platform, checkout, customer-account, security and related services used by NKS. For some Shopify products or platform-wide purposes, Shopify may process information as an independent controller, including for fraud prevention, platform improvement, Shop, Shop Pay and other enhanced services where enabled. Shopify's own privacy notices describe that processing and the rights available in relation to information for which Shopify is independently responsible.

Shopify Consumer Privacy: https://www.shopify.com/legal/privacy/customers

Shopify Privacy Portal: https://privacy.shopify.com

7.3 Advertising and social-media partners

Where advertising or marketing technologies are enabled and you have provided any consent required by law, information such as browser or device identifiers, hashed or otherwise pseudonymised identifiers, and events such as products viewed, cart activity or purchases may be disclosed to advertising and measurement partners such as Google or Meta. Those partners may process information under their own privacy terms and may combine it with information they already hold.

In some jurisdictions, these disclosures may be defined as a "sale", "sharing" or processing for targeted advertising even though NKS does not receive money for the personal information itself. Where such laws apply to NKS, we will provide the legally required opt-out mechanisms.

7.4 Other disclosures

  • Legal and regulatory requirements: to courts, regulators, law-enforcement agencies, tax authorities or other competent bodies where required or permitted by law.

  • Business transactions: to a prospective or actual buyer, investor, lender, successor or adviser in connection with a merger, acquisition, restructuring, financing or sale, subject to appropriate confidentiality and legal safeguards.

  • At your direction or with your consent: for example, where you ask us to connect you with a distributor, educator, training partner or other professional contact.

  • Authorised distributors and partners: if you apply for NKS PRO access or request professional support from a country served by an authorised NKS distributor or partner, we may share appropriate professional contact details with that partner where reasonably necessary and permitted by applicable law. Where required, we will tell you or obtain any required consent before doing so.

8. Cookies, pixels and similar technologies

The Site uses cookies and similar storage or tracking technologies. The exact technologies used can change as Shopify, applications and Site features are updated. We group them broadly as follows:

Category

Purpose

Choice

Strictly necessary

Operate essential Site functions such as cart, checkout, account access, security, fraud prevention, load balancing, localisation required for checkout, and remembering privacy choices.

Cannot generally be disabled through the consent tool where they are strictly necessary for a service you request.

Preferences

Remember optional settings such as language, region, currency or accessibility preferences.

Where required by law, these can be managed through the cookie or privacy settings.

Analytics / performance

Help us understand Site usage, traffic, product interest and performance. Examples may include Shopify analytics, Google Analytics and analytics used by enabled applications.

Where consent is required, these will be activated only after the required consent and can be changed later.

Marketing / advertising

Measure campaigns and, where enabled, support retargeting or personalised advertising. Examples may include Meta technologies, Google Ads or YouTube measurement tags, and Shopify marketing or audience features.

Where consent or opt-out rights are required, we provide the relevant choice through the Site's privacy controls.


Where required by applicable law and as configured for your region, the Site provides privacy or consent controls that allow you to make the choices required in that region before non-essential technologies are activated. You can also use available privacy controls on the Site to review or change applicable choices. Browser settings may allow you to block or delete cookies, although some Site functions may then work differently.

Individual cookies, local-storage identifiers, durations and providers may change over time as Site features and applications are updated. This may include technologies used for site search, filtering, accessibility, reviews and other enabled functionality. Information about Shopify cookies is available in Shopify's current Cookie Policy, and additional information about technologies active on the Site may be available through the Site's privacy controls or from the relevant provider.

Shopify Cookie Policy: https://www.shopify.com/legal/cookies

9. International transfers

NKS is based in Israel and provides services internationally. Personal information may therefore be accessed, stored or processed in Israel and in other countries where Shopify, payment providers, carriers, professional partners and other service providers operate.

Where the EEA, UK or Swiss data-protection rules apply and personal information is transferred to a country that is not covered by an applicable adequacy decision, we use an available lawful transfer mechanism as required, which may include approved standard contractual clauses, the UK International Data Transfer Agreement or Addendum, recognised adequacy arrangements, or another permitted safeguard.

Transfers of personal information from Israel are carried out in accordance with applicable Israeli privacy law, including the Privacy Protection (Transfer of Data to Databases Abroad) Regulations, 5761-2001, where applicable. You may contact us for further information about relevant transfer safeguards.

10. How long we keep personal information

We retain personal information only for as long as reasonably necessary for the purposes for which it was collected, including to provide our services, maintain customer and professional relationships, comply with tax, accounting, consumer-protection, product-safety and other legal obligations, resolve disputes, prevent fraud, maintain appropriate records and enforce our agreements.

When deciding how long to retain information, we consider the nature and sensitivity of the information, the purposes for which it is processed, the relationship with the customer or professional user, applicable legal and regulatory retention periods, potential claims, chargeback or warranty periods, and security requirements. We periodically review information and delete or anonymise it when it is no longer reasonably required, subject to legal exceptions.

Information

Retention approach

Orders, invoices, payment confirmations and shipping records

For the statutory period required by applicable tax, accounting and commercial laws, and for any additional period reasonably necessary for warranties, disputes, chargebacks, regulatory obligations or legal claims.

Customer accounts

While the account or customer relationship remains active and for a reasonable period afterwards, or until a valid deletion request is completed, subject to information we must or are permitted to retain.

NKS PRO applications and professional records

For the duration of the professional relationship and for a reasonable period afterwards where needed for professional support, business records, fraud prevention, regulatory compliance or legal claims. Declined or incomplete applications are retained only for as long as reasonably necessary for the relevant administrative and security purposes.

Customer-service communications

For as long as reasonably necessary to handle the request and maintain appropriate support, complaint, product-safety or legal records.

Marketing consents, opt-outs and preferences

Until consent is withdrawn or marketing is otherwise stopped. We may retain a minimal suppression record so that we can continue to honour an opt-out request.

Reviews and user content

For as long as the review or content remains relevant to the Site or until it is removed, subject to legitimate record-keeping and legal requirements.

Analytics, cookies and advertising data

According to the configured retention settings and expiration periods of the relevant Site technologies and providers, subject to applicable consent and privacy requirements.

Security and fraud-prevention records

For as long as reasonably necessary to protect the Site, investigate incidents, prevent repeat abuse, meet security obligations and establish or defend legal claims.


11. How we protect personal information

We use reasonable technical and organisational measures designed to protect personal information against unauthorised access, disclosure, alteration, loss or misuse. Depending on the system and risk, these measures may include encrypted connections, access controls, authentication measures, role-based permissions, security and fraud-prevention tools, confidentiality obligations, vendor controls, backups and other safeguards appropriate to the nature of the information and the services involved.

Payment-card information is processed through specialised payment and checkout providers rather than being stored as full card data on NKS systems. No method of transmission, processing or storage is completely secure, so we cannot guarantee absolute security. If a personal-data breach occurs, we will assess it and provide notifications to individuals or authorities where required by applicable law.

12. Your privacy rights

Privacy rights vary by jurisdiction and are not always absolute. We may need to verify your identity before completing a request, and legal exceptions may allow or require us to retain or continue processing some information. We will respond within the period required by applicable law.

12.1 Rights generally available under applicable law

  • Access or know: ask whether we process personal information about you and request access to it where the law provides this right.

  • Correction: ask us to correct inaccurate or incomplete personal information.

  • Deletion: ask us to delete personal information, subject to legal retention requirements and other permitted exceptions.

  • Marketing opt-out: stop receiving direct marketing communications at any time.

  • Other rights: depending on your jurisdiction, you may also have rights to portability, restriction, objection, withdrawal of consent, or to opt out of certain advertising or data-sharing practices.

To exercise rights relating to personal information controlled by NKS, contact info@nanoks.com. Where appropriate, NKS will use the privacy, access and deletion tools made available by Shopify and other service providers to complete the request. Where Shopify processes information as an independent controller, including through certain Shop or Shop Pay services, you may also exercise applicable rights directly with Shopify.

12.2 Residents of Israel

Under the Israeli Protection of Privacy Law, 5741-1981, as amended, you may have rights to inspect personal information held about you in a database and to request correction or deletion of information that is inaccurate, incomplete, unclear or out of date, subject to the conditions and procedures in applicable law. Additional rights may apply to information used for direct-mail or direct-marketing activities as defined by Israeli law.

You are not generally required by law to provide personal information to NKS merely by visiting the Site. However, information identified as necessary for an order, account, professional application or other requested service must be provided if you want us to provide that service.

You may contact the Israeli Privacy Protection Authority. Information is available at https://www.gov.il/en/departments/the_privacy_protection_authority

12.3 Residents of the EEA, United Kingdom and Switzerland

Where the GDPR, UK GDPR or corresponding Swiss law applies, you may have rights to access, correction, deletion, restriction of processing, data portability, objection to processing based on legitimate interests, objection at any time to direct marketing, and withdrawal of consent. You may also lodge a complaint with the competent supervisory authority in your country or region.

If we rely on consent, withdrawing consent does not affect processing that was lawful before withdrawal. If we rely on legitimate interests, you may have a right to object based on your particular situation; direct-marketing objections will be honoured as required by law.

12.4 Residents of the United States

If an applicable US state privacy law applies both to NKS and to you, you may have rights such as access or confirmation, correction, deletion, data portability, and the right to opt out of certain uses described by law as sale, sharing or targeted advertising. Some states also provide a right to appeal a decision on a privacy request or to use an authorised agent.

NKS does not sell personal information for monetary consideration. If our use of advertising or measurement technologies is treated as a sale, sharing or targeted advertising under an applicable law, we will provide and honour the opt-out mechanisms required by that law. Where applicable law requires us to recognise a legally valid browser-based opt-out preference signal, we will process such signals as required.

12.5 Other jurisdictions

If you live in another jurisdiction that grants additional privacy rights, you may contact us to exercise rights that apply to NKS under that law. We will handle the request in accordance with applicable legal requirements.

13. Third-party websites, embedded content and social media

The Site may contain links to third-party websites, distributors, professional partners and NKS pages on platforms such as Facebook, Instagram, LinkedIn, YouTube or Vimeo. The Site may also embed third-party content, including video, where such features are enabled. When you follow a third-party link, interact with an embedded feature or communicate through a third-party platform, that third party may collect and process information under its own privacy policy and terms.

We do not control third-party privacy practices. Information that you deliberately post publicly on social-media pages, public reviews or other public areas may be visible to other people.

14. Changes to this Privacy Policy

We may update this Privacy Policy to reflect changes to our practices, technologies, service providers, Site features or legal requirements. We will update the "Last updated" date when we revise the policy. If a change is material and applicable law requires additional notice or consent, we will provide it in an appropriate manner.

15. Contact us

For questions, privacy requests or complaints relating to personal information controlled by NKS, please contact: