GDPR Compliance
Built for European merchants: minimal data, EU residency by default, and rights we help you honour.
Last updated 5 August 2026
Our position
Nouss acts as a processor for merchants in the EU and UK. We process behavioural data only on your documented instructions, under a Data Processing Agreement, with EU storage by default and Standard Contractual Clauses for any transfer outside the EEA.
Right of access
Data subjects can request confirmation of whether their data is processed and a copy of it. As your processor we retrieve everything associated with an identifier and return it to you so you can respond within the statutory one-month window.
Right to erasure
On a verified deletion request we remove the associated events and scores from production systems within 30 days, with backups ageing out within a further 35 days.
Right to rectification
Inaccurate personal data supplied by your store can be corrected or re-synced, and any derived intent score is recalculated from the corrected data.
Right to data portability
We provide behavioural events and intent scores in a structured, commonly used, machine-readable format (JSON or CSV) on request.
Consent and objection
Nouss honours consent signals from your consent management platform, including Google Consent Mode. When consent is denied or withdrawn, scoring stops for that visitor and no audience membership is created.
Data minimisation
We collect behavioural signals scoped to your store only. No cross-site tracking, no data broker enrichment, no special categories of personal data, and no sale or sharing of personal data.
How to submit a request
Shoppers should contact the merchant whose store they visited; merchants can forward verified requests to sales@nouss.in and we will action them as your processor. We acknowledge within 5 business days and complete within 30 days.