Privacy policy
NRNL — PRIVACY POLICY
Last updated: 24 September 2026
1. Who we are
No Rules, No Labels (NRNL) is operated by Kane Stewart as a sole trader in the United Kingdom.
Data controller: Kane Stewart, trading as No Rules, No Labels (NRNL)
Business correspondence address:
71 Tiber Road
Lincoln
Lincolnshire
LN6 9ST
United Kingdom
Email: nrnlofficial@gmail.com
Website: nrnl.co.uk
2. What this policy covers
This Privacy Policy explains how NRNL collects, uses, stores and shares personal information when you:
- visit or use nrnl.co.uk;
- create or use a customer account;
- place or manage an order;
- contact NRNL;
- request a return, refund or other customer support;
- choose to receive marketing communications; or
- otherwise interact with NRNL and its online store.
Our online store is powered by Shopify.
3. Personal information we may collect
Depending on how you interact with NRNL, we may collect:
Identity and contact information
This may include your:
- name;
- email address;
- telephone number;
- billing address; and
- delivery address.
Order and transaction information
This may include:
- products ordered;
- sizes, colours or variants selected;
- order numbers;
- transaction and payment status;
- delivery information;
- returns; and
- refunds.
Account information
Where customer accounts are available, this may include:
- account identifiers;
- preferences;
- saved settings; and
- information associated with your account.
Customer-service information
This may include:
- messages sent to NRNL;
- order enquiries;
- returns information;
- complaints; and
- other correspondence.
Marketing information
This may include:
- subscription preferences;
- marketing consent;
- unsubscribe requests; and
- communication preferences.
Technical and usage information
This may include:
- IP address;
- browser information;
- device information;
- website interactions;
- cookie information;
- security logs; and
- diagnostic information generated through the store and its service providers.
Payment methods are handled through Shopify and/or the payment providers made available during checkout.
Please do not send full payment-card details to NRNL by email or customer-service message.
4. Why we use your information and our lawful bases
NRNL only processes personal information where there is a lawful basis for doing so.
Orders and contract administration
Lawful basis: Contract
We use information to:
- process orders;
- arrange payment;
- fulfil and deliver products;
- provide transactional communications; and
- manage our contract with you.
Returns, refunds, cancellations and customer support
Lawful basis: Contract and, where applicable, legal obligation
We use information to:
- manage orders;
- process returns or refunds;
- respond to statutory consumer rights;
- resolve problems; and
- answer customer-service enquiries.
Legal, tax, accounting and compliance records
Lawful basis: Legal obligation and, where appropriate, legitimate interests
We may retain and use information to:
- comply with legal obligations;
- maintain appropriate business and accounting records;
- manage disputes;
- establish, exercise or defend legal claims; and
- demonstrate compliance with applicable requirements.
Security, fraud and abuse prevention
Lawful basis: Legitimate interests
We may process information where reasonably necessary to:
- protect customers;
- protect NRNL;
- secure our website and systems;
- investigate suspicious activity;
- prevent fraud or misuse; and
- troubleshoot security or technical issues.
We rely on legitimate interests only where those interests are not overridden by your rights and interests.
Marketing
Lawful basis: Consent or another lawful basis permitted by applicable law
Where NRNL sends direct marketing, we will provide an appropriate way to unsubscribe or object.
Placing an order or otherwise interacting with NRNL is not treated by itself as blanket consent to receive unrelated marketing.
5. Cookies and similar technologies
Shopify and related service providers use cookies and similar technologies to operate, secure and improve the NRNL website.
Some cookies and technologies are necessary for functions such as:
- basket functionality;
- checkout;
- account features;
- security; and
- basic website operation.
Where applicable law requires consent for non-essential technologies such as analytics, advertising or similar tracking technologies, NRNL uses the available consent and privacy controls before those technologies are used where required.
You can manage available choices through the cookie banner and other privacy controls provided on the website.
Where available, you can also use the Your Privacy Choices page to manage eligible data-sharing or targeted-advertising preferences.
6. Who we share information with
NRNL may share personal information where reasonably necessary with organisations involved in operating the store or fulfilling your request.
These may include:
- Shopify and ecommerce infrastructure providers;
- payment providers made available during checkout;
- Printful or another approved fulfilment provider used for the relevant order;
- postal, courier and delivery providers;
- email and customer-communication providers;
- hosting, cloud and security providers;
- professional advisers where reasonably necessary; and
- courts, regulators, law-enforcement bodies or public authorities where disclosure is legally required or reasonably necessary to establish, exercise or defend legal rights.
NRNL does not sell customer personal information for money.
Where applicable law treats certain advertising disclosures as a “sale” or “sharing”, eligible opt-out rights and website privacy controls apply.
7. Shopify
NRNL's online store is powered by Shopify.
Shopify processes personal information in connection with services such as:
- hosting;
- checkout;
- fraud prevention;
- payments;
- ecommerce functionality; and
- other platform services.
Shopify may also act as an independent data controller for some of its own processing.
Further information about Shopify's handling of personal information is available through Shopify's own privacy information and privacy portal.
8. International processing
Some of the service providers used by NRNL may process personal information outside the United Kingdom.
Where UK data-protection law treats a transfer as a restricted international transfer, NRNL and the relevant service provider will rely on an applicable adequacy arrangement or another lawful transfer mechanism and appropriate safeguards as required.
9. How long we keep information
NRNL keeps personal information only for as long as reasonably necessary for the purpose for which it was collected and for any applicable:
- legal;
- tax;
- accounting;
- fraud-prevention;
- warranty;
- dispute; or
- regulatory period.
Order and transaction records may therefore be retained longer than ordinary customer-service correspondence.
Security and diagnostic information is retained only for as long as reasonably necessary for security, troubleshooting and legal purposes.
When information is no longer required, it will be deleted, anonymised or otherwise handled appropriately.
10. Your rights
Depending on the circumstances and the lawful basis being used, UK data-protection law may give you rights including the right to:
- request access to your personal information;
- request correction of inaccurate or incomplete information;
- request erasure of personal information;
- request restriction of processing;
- object to certain processing;
- receive certain personal information in a portable format; and
- withdraw consent where consent is the lawful basis used.
These rights are not absolute and may not apply in every situation.
You have the right to object to direct marketing.
You can also use the unsubscribe method included in an NRNL marketing communication where available.
To make a privacy request, email:
nrnlofficial@gmail.com
We may request reasonable information to confirm your identity before acting on a request.
11. Security
NRNL and its service providers use measures intended to protect personal information against unauthorised access, loss, misuse, alteration or disclosure.
No method of internet transmission or electronic storage can be guaranteed to be completely secure.
Please do not send sensitive information that NRNL has not asked you to provide.
12. Children
The NRNL store is not designed to collect unnecessary personal information from children.
If you believe a child has provided personal information to NRNL in circumstances where it should not have been collected, contact us at nrnlofficial@gmail.com so that we can review the situation.
13. Third-party websites and platforms
The NRNL website may contain links to websites, services or social-media platforms operated independently by third parties.
Those organisations have their own privacy practices and policies.
NRNL is not responsible for independent processing carried out by third parties outside our control.
14. Complaints
If you have a concern about how NRNL handles your personal information, please contact:
nrnlofficial@gmail.com
We will review and respond to privacy concerns as appropriate.
You also have the right to complain to the UK's data-protection regulator.
As at the date of this Privacy Policy, that regulator is the Information Commissioner's Office (ICO).
From 30 September 2026, the regulator becomes the Information Commission, while continuing to use the ICO identity.
You do not need to complain to NRNL before exercising your right to contact the regulator.
15. Changes to this Privacy Policy
NRNL may update this Privacy Policy when our:
- services;
- suppliers;
- technology;
- business practices; or
- legal obligations
change.
The current version will display its latest revision date.
Where a change materially affects how existing personal information is used, NRNL will take any additional steps required by applicable law.
16. Contact
No Rules, No Labels (NRNL)
Operated by Kane Stewart, sole trader
71 Tiber Road
Lincoln
Lincolnshire
LN6 9ST
United Kingdom
Email: nrnlofficial@gmail.com
Website: nrnl.co.uk