NFB Store respects your privacy. This Privacy Policy explains how we collect, use, disclose, and protect information about you when you visit our website, create an account, make a purchase, contact support, leave a review, subscribe to emails/SMS, or interact with us in any other way. By using our services, you agree to the practices described here.
If you do not agree with this Policy, please do not use the site or provide personal information.
1) Who we are (Controller)
- Controller: NFB Store
- Contact email: [support@nfbstore.com]
2) Scope
This Policy applies to personal information we process about website visitors, account holders, customers, newsletter/SMS subscribers, and customer support contacts worldwide. It does not apply to third-party websites or services we link to.
3) Information we collect
We collect information directly from you, automatically from your device/browser, and from third parties.
A. Information you provide
- Account details (name, email, password, phone).
- Order details (billing/shipping name, address, phone, email; items purchased).
- Payment details (handled by our payment processors; we do not store full card numbers).
- Communications (support messages, chat transcripts, email/SMS interactions).
- Reviews, Q&A, photos, and other user-generated content.
- Preferences (marketing opt-ins, cookie choices).
B. Information collected automatically
- Device & usage data (IP address, browser type, OS, device IDs, pages viewed, time on page, referring URLs).
- Cookies, pixels, and similar technologies to remember settings, secure your session, analyze traffic, and personalize content/ads.
C. Information from third parties
- Payment & fraud prevention partners (e.g., Stripe/PayPal) provide transaction status and risk signals.
- Analytics & advertising partners (e.g., Google Analytics/Ads, Meta) provide aggregated insights and ad performance.
- Shipping and logistics providers (e.g., USPS/UPS/DHL) provide delivery status.
- Social networks or single sign-on (if used) may share your public profile or email with your permission.
4) How we use your information
We use personal information to:
- Provide the site, process and deliver orders, handle returns/refunds, and provide customer support.
- Create and manage your account; authenticate and secure access.
- Personalize your experience (e.g., recently viewed items, cart reminders).
- Send transactional emails/SMS (order confirmations, shipping updates).
- Send marketing communications where permitted; you can opt out anytime.
- Analyze site performance, improve products/services, and prevent fraud/abuse.
- Comply with legal obligations and enforce our terms.
Legal bases for EEA/UK users: performance of a contract, legitimate interests (e.g., site security, analytics, marketing to existing customers), consent (e.g., certain cookies/marketing), and legal obligations.
5) Cookies & similar technologies
We use first-party and third-party cookies, pixels, and tags to:
- keep you signed in and secure checkout,
- remember cart and preferences,
- measure traffic and performance,
- personalize content and advertising.
You can manage cookies via your browser settings and our [Cookie Settings] link (insert your link or banner control). Disabling certain cookies may affect site functionality.
6) Advertising, analytics & “selling/sharing” (U.S. laws)
We work with analytics and advertising partners (e.g., Google, Meta) that may set cookies/pixels to measure performance and show interest-based ads. Under some U.S. state privacy laws, this may be considered “selling” or “sharing” personal information or targeted advertising.
- To opt out, use our [Do Not Sell or Share My Personal Information] link (add to your footer) and adjust browser settings.
- We also honor Global Privacy Control (GPC) signals where required.
7) SMS & email marketing
If you opt in, we may send promotional emails or SMS/MMS.
- Email: Unsubscribe anytime via the link in our emails.
- SMS/MMS: Reply STOP to cancel, HELP for help. Message & data rates may apply. Frequency varies. Consent is not a condition of purchase.
Transactional messages (e.g., order updates) may still be sent.
8) Payment processing
Payments are processed by third-party providers (e.g., Stripe, PayPal, Shop Pay) on their secure infrastructure. We do not store complete card numbers or security codes. Your use of these services is subject to their privacy policies.
9) How we share information
We share personal information with:
- Vendors/Processors who perform services for us (e.g., website hosting, WooCommerce plugins, customer chat such as Tawk.to, email/SMS platforms, payment processors, fraud prevention, logistics/shipping, analytics/advertising).
- Business transfers (e.g., merger, acquisition).
- Legal reasons (to comply with law, enforce terms, protect our rights or users, prevent fraud).
- With your consent or at your direction (e.g., posting reviews, social sharing).
We do not sell your personal information for money.
10) International transfers
We operate globally. Your information may be transferred to and processed in countries with different data protection laws than your country. Where required, we use lawful transfer mechanisms (e.g., Standard Contractual Clauses).
11) Data retention
We keep personal information only as long as necessary for the purposes described, including:
- orders & tax records: typically 7–10 years (subject to local law),
- accounts & support records: while your account is active and for a reasonable period thereafter,
- marketing consent records: until you opt out, plus a short audit window,
- cookies: per their individual lifespans (see Cookie Settings).
12) Your rights
EEA/UK (GDPR): You can request access, correction, deletion, restriction, portability, and object to certain processing (including direct marketing). Where processing is based on consent, you can withdraw consent at any time.
United States (e.g., CA, CO, CT, UT, VA): You may have the right to:
- know/access the categories and specific pieces of personal information we collected;
- delete personal information;
- correct inaccuracies;
- opt out of “sale”/“sharing”/targeted advertising;
- limit use of sensitive personal information (if applicable);
- equal service and price (non-discrimination).
Use our [Do Not Sell or Share] link and/or submit a request via the methods below.
Canada, Australia, Brazil & others: You may have similar rights under local laws.
We will verify your identity before fulfilling requests and respond within the required timeframe. You may authorize an agent where allowed by law.
How to exercise your rights:
Email us at [support@nfbstore.com] with your request and the country/state you reside in. If you believe we have not resolved your concern, you may contact your local data protection authority.
13) California notice at collection (CPRA)
Categories collected: Identifiers (name, email, phone, IP); customer records (addresses); commercial information (orders); internet activity (usage/cookies); geolocation (approximate IP-based); inferences (preferences); and, if provided, user content (reviews).
Sources: You, your devices, our service providers/partners.
Purposes: As described in Sections 4–6.
Retention: See Section 11.
Selling/Sharing: We may “share” or “sell” (as defined by CPRA) identifiers and internet activity to advertising partners for cross-context behavioral advertising. Opt out using [Do Not Sell or Share] and adjust cookie settings.
Sensitive personal information: We do not use or disclose sensitive personal information for purposes that require offering a “limit” option under CPRA.
14) Security
We use administrative, technical, and physical safeguards appropriate to the risk (e.g., HTTPS/TLS, access controls, limited retention). No method of transmission or storage is 100% secure.
15) Children’s privacy
Our services are not directed to children under 13 (or 16 in some regions). We do not knowingly collect personal information from children. If you believe a child provided information, contact us to delete it.
16) Third-party links & social features
Our site may link to third-party sites and services. Their privacy practices are not covered by this Policy. Review their policies before providing personal information.
17) Automated decision-making
We do not use automated decision-making that produces legal or similarly significant effects on you without human involvement.
18) Changes to this Policy
We may update this Policy from time to time. The “Effective date” above reflects the latest version. Material changes will be posted on this page and, where required, notified to you.
19) Contact us
If you have questions or requests about this Policy or your personal information, contact:
Email: [support@nfbstore.com]
You can also manage cookies via [Cookie Settings] and marketing preferences via unsubscribe links in our emails/SMS.
20) Accessibility
If you need this Policy in another format, please contact us at [support@nfbstore.com].