Privacy Policy
Effective Date: January 19, 2026
Last Updated: January 19, 2026
This Privacy Policy describes how Nordalight (“Nordalight,” “we,” “us,” or “our”) collects, uses, discloses, and safeguards personal information when you visit our website, place an order, or otherwise interact with our services (the “Services”). Use of the Services constitutes acceptance of this Privacy Policy.
We operate a commercial online retail website serving customers in the United States and other supported regions. This policy applies to information collected through our website, checkout, customer support channels, and related communications.
1. Categories of Information We Collect
We collect personal information necessary to operate an online retail business, including name, billing address, shipping address, email address, phone number, order and transaction records, payment confirmation data from processors, customer service communications, account credentials where accounts are created, device and usage data such as IP address and browser type, cookie and tracking identifiers, and general location information derived from IP address.
2. Sources of Information
Information is collected directly from you when you place an order, submit forms, contact support, or subscribe to communications. Information is collected automatically through cookies and analytics technologies when you browse the website. Information may also be received from payment processors, fraud prevention providers, shipping carriers, analytics vendors, and marketing partners where permitted by law.
3. Business Purposes for Use
Personal information is processed for legitimate commercial purposes including order processing and fulfillment, payment authorization, fraud screening and risk control, shipping and delivery coordination, customer support, account management, website operation, performance monitoring, security protection, legal and regulatory compliance, and marketing communications where consent or lawful basis exists.
4. Payment Processing Transparency
Our store is hosted on Shopify infrastructure. Payments are processed through secure third-party payment providers such as Stripe, PayPal, and other authorized processors. We do not store full credit or debit card numbers on our servers. Payment data is processed and secured by certified payment providers under their own security frameworks. Payment processing providers maintain PCI-compliant security standards.
5. Sharing and Disclosure
Personal information is shared only with service providers necessary to operate the store, including payment processors, shipping and logistics partners, hosting providers, analytics and security vendors, customer support platforms, and marketing platforms where permitted. Information may also be disclosed when required by law, legal process, or governmental request, to enforce agreements, to prevent fraud or abuse, or in connection with a business transaction such as a merger or asset sale. We do not sell personal information for monetary consideration.
6. Cookies and Tracking Technologies
We use cookies, pixels, and similar technologies to enable website functionality, maintain secure sessions, measure performance and usage, and support advertising and remarketing. A cookie consent mechanism is displayed where required by law. Users can control cookies through browser settings.
7. Marketing Communications
Promotional emails are sent only where lawful. You may opt out at any time using the unsubscribe link or by contacting support. Transactional and service communications relating to orders, payments, and account activity are sent regardless of marketing preferences.
8. Data Retention
Personal information is retained only as long as operationally necessary and legally required, including for accounting, tax records, warranty handling, dispute resolution, fraud monitoring, and contract enforcement. Data is securely deleted or anonymized when no longer required.
9. Security Safeguards
We maintain administrative, technical, and physical safeguards appropriate for an online retail environment, including encryption in transit, access controls, processor tokenization, and fraud monitoring systems. No internet transmission or storage system can be guaranteed completely secure.
10. Children’s Data
The Services are not directed to individuals under 13 years of age. We do not knowingly collect personal information from children. If such data is identified, it is deleted.
11. U.S. Processing Notice
Information is processed and stored in the United States. By using the Services, you acknowledge and consent to U.S. data processing and transfer.
12. California Privacy Rights
California residents have rights under California privacy law, including the right to know categories of personal information collected, the right to access specific information, the right to request deletion subject to legal exceptions, the right to correct inaccurate information, the right to limit certain uses of sensitive data where applicable, and the right to non-discrimination for exercising privacy rights. Requests must be submitted by emailing info@nordalight.com with the subject line “Privacy Request.” Identity verification is required before fulfillment. We do not sell personal information as defined under California law.
13. Do Not Track Signals
Browser Do Not Track signals are not currently honored due to the absence of a uniform industry standard.
14. Policy Updates
This Privacy Policy may be updated from time to time. Updated versions are posted on this page with revised dates. Continued use of the Services constitutes acceptance of the updated policy.
15. Contact Information
Store Name: Nordalight
Address: 453 S Spring St Ste 400 Los Angeles, CA 90013 USA
Email: info@nordalight.com
Phone: +1 (213) 342-1120
Customer Support Hours: Monday to Friday, 9:00 AM – 5:00 PM Pacific Time
Standard response time: 1–2 business days