Depending on how you interact with Nordic Lamp Co., we may collect the following categories of personal information.

Contact Information

This may include:

• name;
• email address;
• shipping address;
• billing address;
• telephone number where provided or necessary for an order; and
• other contact information you choose to provide.

Order and Transaction Information

This may include:

• products ordered;
• order number;
• order value and currency;
• transaction status;
• shipping and delivery information;
• return, cancellation, and refund information;
• payment-method type;
• payment confirmation or transaction references; and
• information necessary to administer your purchase.

Payment-card information is processed through our payment providers and their authorized payment-processing partners. We may receive limited payment information, such as payment status, card type, or masked payment details, where provided by the payment infrastructure.

Nordic Lamp Co. does not require customers to send complete payment-card details by email.

Account Information

If customer-account functionality is available and you choose to use it, we may process information associated with your account, including:

• account identification information;
• contact information;
• order history;
• saved preferences where supported; and
• account-related authentication or security information.

Communications

When you contact us, we may collect:

• your name;
• email address;
• order number;
• the contents of your message;
• product or delivery information;
• details relating to returns, refunds, or complaints; and
• attachments or other information you voluntarily provide.

Website and Device Information

When you visit our website, we and our authorized service providers may automatically collect information such as:

• IP address;
• browser type;
• device type;
• operating system;
• approximate location derived from technical information;
• referring website or traffic source;
• pages viewed;
• interactions with our website;
• session information;
• cookie or similar identifiers;
• technical events and error information; and
• date and time of website activity.

Advertising, Analytics, and Attribution Information

Where the relevant technologies are enabled and their use is legally permitted, we may process information relating to:

• website visits;
• products viewed;
• shopping-cart activity;
• checkout interactions;
• completed purchases;
• advertising interactions;
• advertising and device identifiers;
• campaign attribution;
• conversion events; and
• advertising and website performance.

Our confirmed analytics and advertising-related providers include Google Analytics, Google Ads, and wetracked.io. Their respective roles are explained below.

Shipment and Tracking Information

For shipment tracking and delivery administration, we may process:

• order number;
• tracking number;
• shipment status;
• destination information;
• carrier information;
• delivery events;
• delivery confirmation information; and
• other information necessary to administer or display shipment tracking.

We collect personal information from several sources.

Directly From You

For example, when you:

• place an order;
• enter information at checkout;
• create or use a customer account, where available;
• contact customer service;
• request a return, cancellation, or refund;
• submit a privacy request; or
• otherwise provide information through our website.

Automatically

Some information may be collected automatically through:

• cookies;
• pixels;
• website tags;
• local storage;
• analytics technologies;
• attribution and conversion-measurement technologies; and
• similar website technologies.

Where applicable law requires consent for non-essential tracking technologies, those technologies must be subject to the relevant consent requirements.

From Service Providers and Business Partners

We may receive information from providers involved in:

• ecommerce hosting;
• payment processing;
• fraud prevention;
• analytics;
• advertising;
• conversion tracking and attribution;
• shipping and fulfillment; and
• parcel tracking.

Information received from these providers is used for the purposes described in this Privacy Policy and is subject to applicable legal requirements.

We may use personal information to:

• operate and maintain nordiclampco.com;
• process and administer customer orders;
• process payments and verify transactions;
• arrange shipping and delivery;
• provide shipment tracking;
• handle cancellations, returns, and refunds;
• communicate with customers about their orders;
• respond to customer-service requests;
• investigate delivery or payment issues;
• detect, investigate, or prevent fraud and security incidents;
• maintain website and transaction security;
• understand how visitors use our website;
• measure website performance;
• analyze shopping and checkout activity;
• improve the functionality and usability of our online store;
• measure advertising campaigns and conversions;
• attribute orders and other conversion events to advertising campaigns;
• support advertising personalization where enabled and legally permitted;
• maintain accurate business and transaction records;
• comply with applicable legal obligations;
• establish, exercise, or defend legal claims; and
• enforce our applicable policies and agreements.

We do not use SMS marketing as part of Nordic Lamp Co.'s confirmed current marketing practices.

Any future introduction of SMS marketing or additional material data-processing providers would require appropriate privacy disclosures and compliance with applicable consent requirements.

Our online store is powered by Shopify.

Shopify provides the ecommerce infrastructure used to operate Nordic Lamp Co. and may process personal information relating to:

• website visits;
• device and browser information;
• customer accounts;
• orders;
• checkout activity;
• transactions;
• shipping and delivery information;
• customer preferences;
• fraud prevention and security; and
• the use of Shopify-supported services and payment features where applicable.

Shopify may process information on our behalf when providing ecommerce services and may also process certain information for its own purposes, depending on the relevant Shopify service and applicable terms.

For further information about Shopify's processing of consumer information, please review the Shopify Consumer Privacy Policy.

We use Shopify Payments as part of our payment-processing infrastructure.

Information necessary to authorize, process, secure, and administer a transaction may be provided to Shopify and its authorized payment-related partners.

This may include:

• billing information;
• payment-method information;
• transaction amount and currency;
• transaction status;
• payment identifiers;
• fraud-prevention and security information; and
• other information necessary to complete or administer payment.

The payment options confirmed for Nordic Lamp Co. are:

• Visa;
• Mastercard;
• Apple Pay;
• Google Pay; and
• Shop Pay.

Payment availability may depend on your device, browser, payment eligibility, and checkout configuration. The payment methods available for your specific order are displayed at checkout.

Depending on the selected payment method, additional payment providers or wallet operators may process personal information under their respective privacy notices.

Nordic Lamp Co. does not require customers to provide complete payment-card information by email.

For further information about the available payment options, please review our Payment Methods page.

We use Google Analytics to understand how visitors interact with our website and to evaluate website performance.

Depending on our configuration and applicable privacy choices, Google Analytics may process information such as:

• website and page interactions;
• session information;
• device and browser information;
• approximate geographic information;
• referral information;
• technical and client identifiers;
• website engagement events; and
• cookie or similar identifiers.

We use analytics information to understand website traffic, identify usability issues, evaluate store performance, and improve the online shopping experience.

Google Analytics may use cookies or similar technologies to distinguish visitors and sessions.

Where applicable law requires consent for analytics cookies or similar non-essential technologies, their use must respect the customer's applicable consent choices.

You can learn more about Google's privacy practices through the Google Privacy Policy.

We use Google Ads for advertising, campaign measurement, and related advertising functions.

Depending on the features enabled and applicable privacy choices, information may be used to:

• measure advertising conversions;
• understand whether advertising resulted in a website visit or purchase;
• attribute transactions to advertising campaigns;
• evaluate advertising performance;
• measure campaign effectiveness;
• support advertising audience functions where enabled and permitted; and
• improve advertising relevance where legally permitted.

Google may receive information through advertising tags, cookies, technical identifiers, device information, website interactions, purchase events, and related technologies.

We do not assume that every feature offered by Google Ads is enabled on our store. The personal information processed depends on our actual advertising configuration and the applicable legal requirements.

Where consent is legally required for advertising cookies, tracking, or related processing, those technologies must be controlled in accordance with the applicable consent requirements.

Under certain United States state privacy laws, some disclosures connected with cross-context behavioral advertising or targeted advertising may qualify as a sale, sharing, or processing for targeted advertising, even where information is not exchanged for money.

Where the applicable law provides an opt-out right, eligible customers may exercise that right as described in Section 16.

Additional information about Google's privacy practices is available in the Google Privacy Policy.

We use wetracked.io for ecommerce conversion tracking, advertising attribution, and related performance measurement.

wetracked.io helps us understand how website interactions, shopping activity, and completed purchases relate to advertising campaigns and other traffic sources.

Depending on the integration configuration, wetracked.io may process information such as:

• order identifiers;
• transaction amounts and currency;
• purchase and conversion events;
• products associated with a transaction;
• website and checkout events;
• referral and campaign information;
• advertising attribution identifiers;
• technical device and browser information;
• IP addresses or similar technical identifiers where collected; and
• customer or transaction-related information made available through the configured integration.

We use this information to measure advertising effectiveness, improve attribution accuracy, and understand the relationship between advertising activity and store transactions.

Depending on the configured integration, relevant conversion information may be transmitted to connected advertising or measurement platforms.

The exact information processed and transmitted depends on the active configuration, applicable privacy restrictions, and customer consent where required.

Where applicable law requires consent for non-essential tracking or advertising-related processing, wetracked.io must be configured to respect the applicable consent requirements.

For further information about the provider's privacy practices, please review the wetracked.io Privacy Policy.

We use Track123 to provide and administer shipment tracking for customer orders.

Track123 may process information necessary to retrieve and display tracking information, including:

• tracking number;
• order number;
• shipment status;
• destination country;
• destination postal information;
• carrier information;
• tracking events;
• delivery status; and
• other order or logistics information required for shipment tracking.

Track123 may communicate with relevant carriers and logistics systems to retrieve or update shipment information.

When you use our order-tracking service, certain technical information associated with tracking requests may also be processed, including tracking identifiers and request timestamps.

We use this information to help customers monitor shipments, investigate delivery issues, and provide order-related assistance.

We disclose personal information to carriers, logistics providers, fulfillment partners, and related service providers where necessary to:

• prepare and ship orders;
• deliver parcels;
• provide shipment tracking;
• investigate delivery problems;
• manage returns; and
• resolve shipping-related customer-service requests.

This information may include:

• customer name;
• delivery address;
• contact information where necessary;
• order information;
• shipment details; and
• tracking identifiers.

The specific carriers and logistics providers involved may vary depending on the order, shipping destination, and delivery arrangements.

Because fulfillment and return operations may involve international service providers, certain information may be processed outside your country of residence.

Nordic Lamp Co. and our authorized service providers may use cookies, pixels, website tags, local storage, and similar technologies.

These technologies may support the following purposes.

Essential Functions

For example:

• shopping-cart functionality;
• checkout;
• security;
• customer-account features where available;
• fraud prevention;
• session management; and
• necessary website operation.

Analytics

Where enabled and permitted, analytics technologies may help us understand:

• visitor numbers;
• website sessions;
• page views;
• device and browser information;
• website interactions; and
• shopping and checkout performance.

Advertising and Attribution

Where enabled and legally permitted, advertising and attribution technologies may support:

• conversion measurement;
• advertising attribution;
• campaign performance analysis;
• advertising effectiveness;
• audience measurement; and
• advertising personalization where applicable.

Our confirmed providers involved in analytics, advertising, or attribution include Google Analytics, Google Ads, and wetracked.io.

Some cookies and similar technologies are necessary to operate the website. Others, such as analytics and advertising technologies, may require your consent under applicable law.

Where legally required, non-essential technologies must not be activated before the necessary consent has been obtained.

You may manage cookies through your browser settings and any applicable cookie-consent or privacy-preference controls provided on our website.

Browser settings may allow you to block or remove cookies. However, disabling essential cookies may interfere with cart, checkout, account, or other website functionality.

For more information, please review our Cookie Policy.

Nordic Lamp Co. may communicate with customers regarding purchases, payments, shipping, delivery, returns, refunds, and customer-service matters.

These operational communications are necessary to administer purchases and respond to customer requests.

Where promotional email communications are offered, they will be subject to applicable marketing and consent requirements.

If you receive promotional emails from us, you may opt out of future promotional communications using the unsubscribe mechanism provided in those messages or by contacting us at support@nordiclampco.com.

Opting out of promotional communications does not prevent us from sending necessary non-promotional messages relating to:

• your order;
• payment or transaction status;
• shipping and delivery;
• returns and refunds;
• security issues; or
• customer-service requests.

SMS Marketing: Nordic Lamp Co. does not currently conduct SMS marketing as part of its confirmed marketing practices.

We do not identify any separate third-party email-marketing platform as active in this Privacy Policy because no such provider has been confirmed for the current store configuration.

We may disclose personal information to the following categories of recipients where reasonably necessary for the purposes described in this Privacy Policy.

Ecommerce and Infrastructure Providers

Including Shopify and service providers supporting our online store.

Payment Providers

Including Shopify Payments and the payment providers or wallet operators supporting the payment method selected at checkout.

Analytics Providers

Including Google Analytics.

Advertising Providers

Including Google Ads.

Conversion Tracking and Attribution Providers

Including wetracked.io.

Shipment and Tracking Providers

Including Track123 and the relevant carriers, fulfillment partners, and logistics providers involved in delivering or returning an order.

Professional and Legal Recipients

Information may be disclosed to professional advisers, regulators, government authorities, courts, law enforcement, or other recipients when reasonably necessary to:

• comply with applicable law;
• respond to valid legal requests;
• protect rights, property, or safety;
• investigate fraud or unlawful activity; or
• establish, exercise, or defend legal claims.

Business Transactions

Personal information may be disclosed in connection with a merger, acquisition, financing, restructuring, sale of assets, bankruptcy, or similar corporate transaction, subject to applicable legal requirements.

We do not disclose personal information to unrelated parties for purposes outside those described in this Privacy Policy without an appropriate legal basis or other lawful justification.

Nordic Lamp Co. does not describe ordinary disclosures to payment processors, shipping providers, or other necessary service providers as the sale of customer lists for monetary compensation.

However, our use of analytics, advertising, and attribution technologies, including Google Ads and wetracked.io, may involve disclosures or processing that qualify as a sale, sharing, or processing for targeted advertising under certain United States state privacy laws.

This classification may apply even where no payment is received in exchange for the personal information.

Whether a particular disclosure qualifies under these legal definitions depends on the applicable law and the actual data-processing activity.

Where a relevant privacy law applies to Nordic Lamp Co. and grants a right to opt out, eligible individuals may exercise that right using the applicable privacy controls or by contacting us as described in Section 16.

We do not knowingly sell or share the personal information of children in circumstances prohibited by applicable law.

We retain personal information only for as long as reasonably necessary for the purposes described in this Privacy Policy, subject to applicable legal requirements.

Retention purposes may include:

• completing and administering transactions;
• providing customer service;
• maintaining business, tax, and accounting records;
• administering returns and refunds;
• investigating payment or delivery disputes;
• preventing fraud;
• maintaining website security;
• resolving complaints;
• establishing or defending legal claims; and
• complying with applicable legal obligations.

Different categories of personal information may have different retention periods depending on their purpose, sensitivity, applicable legal requirements, and operational necessity.

For example, transaction information may need to be retained for accounting or legal purposes even after an order has been completed.

Analytics and technical information may be subject to different retention periods determined by the relevant system configuration and legal requirements.

Where information is no longer reasonably necessary, we will delete, anonymize, or otherwise securely dispose of it in accordance with applicable law and our data-retention practices.

Some information may remain in backups for a limited period or be retained where legally necessary in connection with an investigation, dispute, or legal obligation.

Depending on your state of residence and whether the relevant privacy law applies to Nordic Lamp Co., you may have certain rights concerning your personal information.

These rights may include the right to:

• know or confirm whether we process personal information about you;
• access personal information;
• receive information about categories of personal information collected, used, or disclosed;
• request correction of inaccurate personal information;
• request deletion of personal information, subject to legal exceptions;
• obtain a portable copy of certain personal information;
• opt out of certain sales or sharing of personal information;
• opt out of processing for targeted advertising;
• limit certain uses or disclosures of sensitive personal information where applicable;
• appeal certain privacy-request decisions where required by law; and
• exercise applicable privacy rights without unlawful discrimination or retaliation.

These rights differ by state and may be subject to eligibility requirements, exemptions, and verification procedures.

How to Submit a Privacy Request

You may submit a privacy request by emailing:

support@nordiclampco.com

Please use Privacy Request in the email subject line and describe the right you wish to exercise.

We may need to verify your identity before responding to certain requests. Verification requirements will depend on the nature of the request and applicable law.

We will not request more information than reasonably necessary to verify and process your request.

Where legally required, we will respond within the applicable statutory time limits and provide information about available appeal rights if a request is denied.

Authorized Agents

Where applicable law permits, you may authorize another person to submit a privacy request on your behalf.

We may request reasonable evidence of the agent's authority and may require appropriate identity verification in accordance with applicable law.

Opt-Out Requests

Where applicable law provides a right to opt out of the sale or sharing of personal information or processing for targeted advertising, you may submit your request through any applicable privacy-choice control available on our website.

You may also contact us at:

support@nordiclampco.com

Where legally required, we will recognize and process qualifying universal opt-out preference signals, including supported browser-based signals, in accordance with applicable law.

Privacy requests submitted by email do not replace website-level opt-out mechanisms where a directly accessible mechanism is legally required.

If the California Consumer Privacy Act, as amended by the California Privacy Rights Act, applies to Nordic Lamp Co. and the personal information concerned, California residents may have additional rights.

These may include:

• the right to know what personal information is collected and how it is used or disclosed;
• the right to access certain personal information;
• the right to request deletion;
• the right to correct inaccurate personal information;
• the right to opt out of sale or sharing;
• the right to limit certain uses or disclosures of sensitive personal information where applicable; and
• the right not to be discriminated against for exercising applicable privacy rights.

For purposes of relevant California disclosures, the categories of personal information potentially processed by Nordic Lamp Co. include:

• identifiers, such as names, contact information, IP addresses, and customer identifiers;
• commercial information, including purchases, transaction records, and product interactions;
• internet or electronic network activity, including browsing and website interactions;
• approximate geolocation information derived from technical data;
• customer communications and information voluntarily provided to customer support;
• financial or payment-related information necessary for transaction administration; and
• inferences relating to shopping interests or advertising performance where such processing is enabled.

The sources, purposes, categories of recipients, and retention considerations for these categories are described throughout this Privacy Policy.

Our advertising and attribution integrations may involve processing that qualifies as sharing for cross-context behavioral advertising under California law, depending on the actual configuration and applicable legal requirements.

We do not knowingly use or disclose sensitive personal information for purposes that require a separate right to limit such processing without providing the legally required mechanism.

We do not knowingly sell or share the personal information of consumers under 16 in violation of applicable California law.

Certain information, processing activities, or businesses may be exempt from some California privacy requirements.

California privacy requests may be submitted using the contact information in Section 16, subject to any additional legally required request methods and opt-out controls.

Nordic Lamp Co. is operated by a United States legal entity, and some of the service providers involved in operating our store may process personal information internationally.

Personal information may be processed in the United States and other countries where our ecommerce, payment, advertising, analytics, attribution, shipping, tracking, or infrastructure providers operate.

Data-protection laws in those jurisdictions may differ from the laws of your country of residence.

Where applicable law requires safeguards for international transfers, we will use an appropriate legally recognized transfer mechanism or other lawful basis for the transfer.

European Economic Area, United Kingdom, and Switzerland

Where the General Data Protection Regulation, UK GDPR, Swiss Federal Act on Data Protection, or comparable data-protection legislation applies to our processing, additional rights and obligations may apply.

Depending on the circumstances, the legal bases for processing personal information may include:

• Performance of a contract: Processing information necessary to complete purchases, administer orders, arrange delivery, provide tracking, handle returns, and provide contractual services.
• Legal obligations: Processing required for accounting, tax, consumer-protection, regulatory, or other legal duties.
• Legitimate interests: Processing necessary for appropriate business operations, customer support, fraud prevention, service security, and improvement of our services, where those interests are not overridden by applicable individual rights.
• Consent: Processing based on valid consent where required, including certain analytics, advertising, non-essential cookies, or optional marketing activities.
• Legal claims: Processing necessary to establish, exercise, or defend legal claims where applicable law permits.

Where consent is the applicable legal basis, you may withdraw that consent at any time. Withdrawal does not affect the lawfulness of processing carried out before consent was withdrawn.

Depending on the applicable law, you may have the right to:

• request access to personal information;
• request correction of inaccurate personal information;
• request deletion of personal information in appropriate circumstances;
• request restriction of processing;
• object to processing based on certain legitimate interests;
• request data portability where the legal conditions are met;
• withdraw consent where processing is consent-based; and
• lodge a complaint with the competent data-protection supervisory authority.

You may exercise applicable rights by contacting support@nordiclampco.com.

We will evaluate and respond to requests in accordance with the relevant legal requirements and time limits.

Where a legally required data-protection representative or additional local contact must be appointed, the relevant contact information must be made available separately or through an updated notice.

We do not make decisions based solely on automated processing that produce legal or similarly significant effects on individuals unless such processing is separately disclosed and carried out in accordance with applicable law.

We use reasonable administrative, organizational, and technical measures intended to protect personal information against unauthorized access, misuse, loss, alteration, or disclosure.

These measures may include appropriate access controls, secure service-provider arrangements, and safeguards supporting the confidentiality and integrity of personal information.

However, no internet transmission, storage system, or security measure can be guaranteed to be completely secure.

If you use a customer account, you are responsible for keeping your account credentials confidential and for notifying us if you believe your account or information has been compromised.

If you believe that your personal information has been accessed or used without authorization, please contact support@nordiclampco.com.

Nordic Lamp Co. is a general retail website and is not directed to children under the age of 13.

We do not knowingly collect personal information directly from children under 13 for advertising, profiling, or other purposes prohibited by applicable law.

Where applicable law establishes a higher age threshold or additional protections for children's personal information, those requirements take precedence.

If you believe a child has provided personal information to us inappropriately, please contact:

support@nordiclampco.com

We will review the request and take appropriate action where required, including deleting information when legally necessary.

Our website may contain links to third-party websites or services, including payment providers, shipping providers, and other external resources.

Those third parties may have their own privacy policies, terms, and data-processing practices.

Nordic Lamp Co. is not responsible for the independent privacy practices of third-party websites or services that we do not control.

We encourage you to review the relevant third-party privacy notices before providing information directly to those services.

We may update this Privacy Policy from time to time to reflect:

• changes to our services;
• changes to our technology or active service providers;
• changes to our data-processing practices;
• changes to our advertising, analytics, or tracking configuration;
• changes in applicable privacy laws; or
• other operational or legal developments.

When we update this Privacy Policy, we will publish the revised version on nordiclampco.com and update the revision date shown at the beginning of the policy.

Where applicable law requires additional notice or consent for a material change in processing, we will take the required steps before implementing that change.

For questions about this Privacy Policy, how personal information is processed, or to exercise an applicable privacy right, please contact:

Privacy Controller / Legal Operator:

For further information about our business identity, please visit our Legal & Company Information page.

For additional information about cookies and tracking technologies, please review our Cookie Policy.

For general customer-service inquiries, please visit our Contact page.

We will review privacy-related inquiries and requests and respond in accordance with applicable legal requirements.