Privacy policy

Last updated: September 10, 2026his Privacy Policy explains how Jamota, operated by Nuvela Group LLC, collects, uses, stores and shares your personal data when you visit or make a purchase at jamota.com. We are committed to protecting your personal data and processing it in accordance with applicable data protection laws, including the California Consumer Privacy Act as amended by the CPRA, and, where they apply to you, the General Data Protection Regulation and the UK Data Protection Act 2018.

Who is responsible for your data

The data controller responsible for your personal data is:

Nuvela Group LLC, trading as Jamota
Colorado Secretary of State entity ID: 20261656588
Registered office: 1500 N Grant St, Ste B, Denver, CO 80203
Email: support@jamota.com
Phone and text: +1 (339) 800-8572

Our team works from Hanoi, Vietnam. This matters for your privacy and we explain what it means in the section on international transfers below.

If you have any question about how we handle your personal data, or you wish to exercise your rights, contact us at the details above and a person replies within 1 business day.

What personal data we collect

We collect and process the following categories of personal data:

  • Identity and contact data: your name, email address, phone number, and billing and delivery address when you place an order or create an account.
  • Transaction data: details of the products you purchase, order history, payment method type (never full card numbers) and transaction amounts.
  • Technical and usage data: your IP address, browser type and version, device type, pages visited, time spent on pages, referring URLs and other information about how you interact with our website. This is collected automatically through cookies and similar technologies, and includes session recordings that capture mouse movement, clicks and scrolling.
  • Communications data: messages, emails and other correspondence you send us, including customer service inquiries and any product review you choose to submit.
  • Marketing preferences: your preferences regarding marketing communications from us.

We do not collect or process special categories of personal data, such as health information, racial or ethnic origin, religious beliefs or biometric data.

Why we are allowed to process it

We rely on the following legal bases:

  • Contract performance: processing your personal data is necessary to fulfill your order, process payment, arrange delivery and manage your account.
  • Legitimate interests: we process certain personal data to prevent fraud, improve our website and understand how customers use our store. We only rely on this basis where our interests are not overridden by your rights.
  • Consent: where you have given us clear consent to send you marketing communications. You may withdraw consent at any time.
  • Legal obligation: processing necessary to comply with tax, accounting and other legal requirements.

How we use your personal data

We use the personal data we collect to process and fulfill your orders, including sending order confirmations and shipping notifications; to manage your account and answer your inquiries; to send you marketing emails where you have opted in, with an unsubscribe link in every email; to invite you to review a product you have bought; to improve our website and customer experience; to detect and prevent fraud and unauthorized access; and to comply with our legal and regulatory obligations.

We do not use your personal data to make solely automated decisions that have a significant effect on you.

Who we share your personal data with

We do not sell your personal data. We share it only with the following categories of recipients, and only where it is necessary:

  • Our apparel suppliers, located in China. To dispatch your order, the supplier holding that item receives your name, delivery address and, where the carrier requires it, your phone number. They receive nothing else. They are not permitted to use your data for any purpose other than dispatching your order, and they are not permitted to market to you.
  • Shipping carriers. The international and domestic carriers handling your parcel receive your name, delivery address and, where required for delivery notification, your phone number.
  • Shopify Inc. Our e-commerce platform provider, which hosts our store and processes payments. Shopify acts as a data processor on our behalf. See shopify.com/legal/privacy.
  • Payment processors. Shopify Payments, Shop Pay, PayPal, Apple Pay and Google Pay process your payment. They handle card data directly and are independently PCI DSS certified. We never see or store your full card number.
  • Email and SMS platforms. Omnisend sends our order confirmations and, where you have opted in, our marketing emails and text messages. You can unsubscribe from either at any time.
  • Order tracking. 17TRACK receives your order and tracking number so that you can follow your parcel from our site.
  • Analytics and product review providers. Microsoft Clarity receives usage data including session recordings, and Judge.me processes review requests and any review you submit.
  • Advertising platforms. We may share hashed or anonymized identifiers with platforms such as Google and Meta to show relevant advertising. You can opt out as described below.
  • Legal authorities. We may disclose personal data where required by law or to protect the rights and safety of our users.

Every third party we work with is required to process your personal data only as instructed by us and in accordance with applicable data protection law.

International transfers of personal data

Your personal data is processed in more than one country, and we would rather tell you exactly where than leave it vague.

  • United States. Nuvela Group LLC is a US company and our store, payments and customer records are hosted on Shopify's infrastructure.
  • Vietnam. Our team works from Hanoi, so the people who read your emails, check your order and answer your questions access your data from Vietnam.
  • China. Our apparel suppliers dispatch orders from their own facilities in China, so your name and delivery address are transferred to China in order to get your parcel to you.

Where personal data is transferred outside the country in which it was collected, we put appropriate safeguards in place, including contractual commitments requiring each recipient to protect your data and use it only for the purpose we specify. Where a transfer is subject to GDPR, we rely on European Commission Standard Contractual Clauses.

How we protect your personal data

We implement appropriate technical and organizational security measures to protect your personal data against unauthorized access, accidental loss, destruction or damage. Our website uses HTTPS encryption for all data in transit. Checkout is hosted on Shopify's infrastructure, which is certified to PCI DSS Level 1, the highest level of payment card data security. Access to personal data is restricted to those who need it to do their job.

No method of transmission over the internet is completely secure. If you have reason to believe your interaction with us is no longer secure, contact us immediately at support@jamota.com.

How long we keep your personal data

We keep your personal data only for as long as necessary for the purposes it was collected for, including satisfying legal, accounting and reporting requirements. Order and transaction data is kept for a minimum of 7 years to comply with US tax and financial record keeping obligations. Account data is kept for as long as your account is active. Marketing preference data is kept until you unsubscribe or ask us to delete it. We securely delete or anonymize personal data when it is no longer needed.

Cookies and tracking technologies

We use cookies and similar tracking technologies on jamota.com. Cookies are small data files placed on your device that keep your shopping cart active, remember your preferences, help us understand how you use the site and allow us to show you relevant advertising. Some of these tools record your session, meaning your mouse movement, clicks and scrolling on the page, so that we can see where the site is confusing people.

You can control cookies through your browser settings. Disabling some cookies may affect how parts of the website work.

Your rights

Depending on where you live, you have the following rights over your personal data:

  • Access: request a copy of the personal data we hold about you.
  • Correction: ask us to correct inaccurate or incomplete personal data.
  • Deletion: ask us to delete your personal data in certain circumstances.
  • Restriction: ask us to limit how we use your personal data in certain circumstances.
  • Portability: request a machine readable copy of your personal data to transfer elsewhere.
  • Objection: object to processing based on legitimate interests, or to direct marketing.
  • Withdraw consent: where processing is based on consent, withdraw it at any time without affecting the lawfulness of processing before you withdrew it.

California residents have additional rights under the CCPA as amended by the CPRA, including the right to know what personal data we collect, the right to opt out of the sale or sharing of personal data, the right to correct and delete, the right to limit the use of sensitive personal information, and the right not to be discriminated against for exercising any of these rights. We do not sell personal data. An automated opt out is active on this store for residents of California, Colorado and thirteen other states with applicable privacy laws. To opt out of sharing for targeted advertising, use our Do Not Sell or Share My Personal Information page or email support@jamota.com with the subject "CCPA Opt Out".

EU and UK residents may lodge a complaint with their local supervisory authority. In the UK this is the Information Commissioner's Office at ico.org.uk. In Ireland it is the Data Protection Commission at dataprotection.ie. In other EU member states, contact your national supervisory authority.

To exercise any of these rights, contact us at support@jamota.com. We respond within 30 days, and within 45 days for CCPA requests. We may need to verify your identity first.

Children's personal data

Our store is not directed at children under the age of 13 and we do not knowingly collect personal data from children. If you believe we have collected personal data from a child, contact us at support@jamota.com and we will delete it promptly.

Third party links

Our website may contain links to third party websites. This Privacy Policy does not apply to them. We are not responsible for their data protection practices and recommend you read their privacy policies before providing any personal data.

Changes to this Privacy Policy

We may update this Privacy Policy to reflect changes in our practices or in the law. The date at the top of this page always reflects when it was last revised. We will notify you of material changes by email or by a prominent notice on our website.

Contact us about privacy

For any question, concern or request relating to this Privacy Policy or your personal data, email support@jamota.com with the subject "Privacy", or text and call +1 (339) 800-8572.

Nuvela Group LLC
Registered Office: 1500 N Grant St, Ste B, Denver, CO 80203

Customer service hours are Monday to Friday, 9:00 AM to 5:00 PM (MT).