Privacy policy

Privacy Policy

Last updated: June 5, 2026

This Privacy Policy describes how Jamota (operated by Nuvela Group LLC, the data controller) collects, uses, and discloses your personal data when you visit, use, or make a purchase on jamota.com, or otherwise communicate with us (the "Services").

Jamota is powered by Shopify. If there is a conflict between our Terms of Service and this Privacy Policy, this Privacy Policy controls with respect to the collection, processing, and disclosure of your personal data.

Please read this Privacy Policy carefully. By using and accessing any of the Services, you acknowledge that you have read and understood this Privacy Policy.

Data Controller

For the purpose of applicable data protection laws, the data controller of your personal data is:

Nuvela Group LLC (trading as Jamota)
1500 N Grant St, STE B
Denver, CO 80203
United States
Email: support@jamota.com
Phone: +1 (339) 800-8572

Personal Data

When we use the term "personal data" (also referred to as "personal information"), we mean information that identifies or can reasonably be linked to you as an individual. Personal data does not include information that has been anonymised or de-identified. Depending on how you interact with the Services, we may collect or process the following categories of personal data:

  • Contact details: name, billing address, shipping address, phone number, and email address.
  • Financial information: credit card or debit card details (processed via Shopify Payments), payment confirmation, and transaction details. We do not store full card numbers.
  • Account information: username, password, security questions, and preferences.
  • Transaction information: items viewed, added to cart, purchased, returned, or cancelled, and your order history.
  • Communications with us: information you include when contacting our customer support.
  • Device and usage information: IP address, browser type, device identifiers, and information about how you interact with and navigate the Services, collected automatically through cookies and similar technologies.

Sources of Personal Data

We may collect personal data from the following sources:

  • Directly from you — when you create an account, place an order, contact us, or otherwise provide information to us.
  • Automatically through the Services — from your device via cookies, web beacons, and similar technologies when you browse or use jamota.com.
  • From service providers — including Shopify and other third parties that process data on our behalf.
  • From business partners and other third parties — in connection with advertising and analytics services.

How We Use Your Personal Data

We use your personal data for the following purposes:

  • Order fulfilment: to process payments, fulfil and ship orders, handle returns and exchanges, send order notifications, and create and manage your account.
  • Marketing and advertising: to send marketing communications by email, SMS, or post, and to display online advertisements, including based on your purchase history and browsing activity. You may opt out at any time.
  • Security and fraud prevention: to authenticate your account, detect fraudulent or malicious activity, and protect our Services and users.
  • Customer communications: to respond to your enquiries and provide customer support.
  • Legal compliance: to comply with applicable laws, respond to legal process, and enforce our terms and policies.
  • Service improvement: to analyse how customers use our Services and improve their functionality and user experience.

Data Protection 

We take the data protection of your personal data seriously. We do not sell your personal data to third parties. We may disclose your personal data in the following limited circumstances:

  • Service providers: Shopify and other vendors that perform services on our behalf, including payment processing, IT management, data analytics, customer support, cloud storage, and order fulfilment and shipping.
  • Business and marketing partners: to provide advertising and marketing services, including personalised advertising based on your online activity. Our partners use your information in accordance with their own privacy notices.
  • At your direction: when you consent to sharing your information with third parties, such as through social media integrations.
  • Within our corporate group: with affiliates of Nuvela Group LLC.
  • Legal and safety reasons: in connection with a business transaction such as a merger, to comply with legal obligations, enforce our terms, or protect the rights and safety of our users or the public.

Relationship with Shopify

The Services are hosted by Shopify, which collects and processes personal data about your access to and use of the Services. Information you submit may be transmitted to and shared with Shopify and third parties located in countries other than where you reside. In certain circumstances, Shopify is responsible for processing your personal data and responding to your rights requests. For more information, see the Shopify Consumer Privacy Policy and the Shopify Privacy Portal.

Cookies and Tracking Technologies

We use cookies and similar tracking technologies to operate and improve the Services, remember your preferences, and deliver personalised advertising. You can manage your cookie preferences through your browser settings. Note that disabling certain cookies may affect the functionality of the Services.

International Data Transfers

We may transfer, store, and process your personal data outside the country in which you reside, including in the United States. If we transfer personal data from the European Economic Area (EEA) or the United Kingdom, we rely on recognised transfer mechanisms such as the European Commission's Standard Contractual Clauses or equivalent safeguards, unless the transfer is to a country with an adequate level of data protection.

Data Retention

We retain your personal data for as long as necessary to maintain your account, provide the Services, comply with our legal obligations, resolve disputes, and enforce our agreements. The specific retention period depends on the nature of the data and the purpose for which it was collected.

Data Security

We implement technical and organisational measures to protect your personal data from unauthorised access, loss, or misuse. However, no security system is perfectly impenetrable, and we cannot guarantee the absolute security of your information. We recommend that you use a strong, unique password for your account and do not share your login credentials.

Children's Data

The Services are not directed at children under the age of 13 (or the applicable age of majority in your jurisdiction). We do not knowingly collect personal data from children. If you believe we have inadvertently collected data from a child, please contact us and we will promptly delete it.

Your Rights and Choices

Depending on where you reside, you may have the following rights regarding your personal data:

  • Right to Access / Know: request access to the personal data we hold about you.
  • Right to Deletion: request that we delete your personal data.
  • Right to Correction: request that we correct inaccurate personal data.
  • Right to Data Portability: receive a copy of your personal data in a structured, machine-readable format.
  • Right to Opt Out of Sale / Targeted Advertising: opt out of the sharing of your personal data for targeted advertising purposes. You can exercise this right here.
  • Managing Marketing Preferences: unsubscribe from marketing emails at any time using the unsubscribe link in our emails.

If you reside in the UK or European Economic Area, you also have the right to:

  • Object to or Restrict Processing: ask us to stop or restrict certain processing of your personal data.
  • Withdraw Consent: where we process data based on consent, withdraw that consent at any time without affecting the lawfulness of processing prior to withdrawal.
  • Lodge a Complaint: file a complaint with your local data protection supervisory authority. A list of EEA authorities is available at edpb.europa.eu.

We will not discriminate against you for exercising any of these rights. To exercise your rights, please contact us using the details in the Contact section below. We may need to verify your identity before processing your request.

Third-Party Websites and Links

The Services may contain links to third-party websites. We are not responsible for the privacy practices or content of those sites. We encourage you to review the privacy policies of any third-party sites you visit.

Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, legal requirements, or for other operational reasons. When we make material changes, we will update the "Last updated" date at the top of this page and notify you as required by applicable law.

Data Controller

For the purposes of applicable data protection laws, the data controller responsible for your personal data is:

Nuvela Group LLC (trading as Jamota) 

If you have questions about this Privacy Policy, our data protection practices, or wish to exercise any of your rights in relation to your personal data, please contact the data controller: