Last updated: April 28, 2026
Introduction
Nightwooolf (collectively,“we”, “our” or “us”) promise that your privacy is under protection as you’re visiting our website https://www.nightwooolf.com (collectively, the “Site”). Our Site is to provide you the related information, resources and services.We understand the importance of personal privacy, therefore the information category and purpose will be stated at the moment of collection,and comply with legal requirements such as the General Data Protection Regulation (GDPR) and the California Consumer Privacy Act (CCPA).This Privacy Policy explains the information that Nightwooolf may collect when you interact with us and our practices with respect to that information. Please read this Privacy Policy carefully.
Security First
Nightwooolf has implemented security measures designed to prevent the loss, misuse, and unauthorized alteration of the information we collect. All personal information stored on the Nightwooolf website is encrypted and secured using SSL technology. We use SSL encryption to help protect the transmission of personal information. All sensitive or credit card information you provide while browsing the website or placing an order is transmitted via SSL technology and then encrypted in our database. Only authorized staff members have special access to the information on our website, and these individuals are legally responsible for the security of the information.
Children's Data
This website is not intended for use by children under the age of 16. Individuals under the age of 16 must not provide any information to the Nightwooolf website. We do not knowingly collect personal information from children under 16. If you are under 16, please do not register on the website, do not make any purchases through this website, do not use any interactive or public comment features on this website, and do not provide us with any personal information about yourself, including your name, address, phone, email address, or any nicknames or usernames you may use. If we discover that we have collected or received personal information from a child under the age of 16 without the consent of a legal guardian, we will delete that personal information. We appreciate your understanding of our practices.
Information We Collect
Ø Contact information: Include name, shipping address (including ZIP code and country), email address, phone number (mobile number), and social media accounts (username).
Ø Order and transaction information: Include purchased items, order total, transaction date and time, payment status, payment method (e.g., PayPal), shipping service, and return/refund history. Please note that we do not collect or use your financial information, such as credit card details, PayPal, Stripe, Amazon Pay, or Shopify Payments. You may visit the privacy policies of PayPal, Stripe, Amazon Pay, and Shopify Payments to learn more about how they store and use your financial information.
Ø Device and technical information: Include IP address, browser type and version, operating system, and device type (computer/mobile phone)
Ø Compliance Data: Include records of whether users have consented to cookies, accepted marketing communications, and agreed to the Privacy Policy and Terms of Service
Sources of Information
l User-provided: When users create an account, the website collects identity and contact information,such as names and email addresses.
l Recorded by the website: After a user places an order successfully , the website records complete order and transaction information to serve as the basis for after-sales service.
l From our partners or other third parties, such as Shopify.
How We Use Your Personal Information
l Your name, shipping address, email address, phone number, and social media account username will be used to process your order, arrange delivery, provide customer support, and send order-related notifications (such as confirmation emails and shipping updates). If you have given your explicit consent (for example, by checking a subscription box), we will use your contact information to send you marketing communications (such as new product recommendations and promotional offers). You have the right to unsubscribe at any time. Social media account information is used solely for identification and communication purposes when you actively contact us, we will not proactively send unsolicited messages to your social media accounts.
l Order and Transaction Information, include the products you purchase, total order amount, transaction date and time, payment status, shipping method, and return/exchange history—is used to fulfill orders, process payments and refunds, provide after-sales service, and offer customer support.
l Device and Technical Information is used to ensure website security (detect and defend against attacks), prevent fraudulent transactions, optimize the display of website products across different devices, ensure that product display services are provided to you in the most effective manner, and analyze user behavior (e.g., via Google Analytics) to better customize and upgrade our services. IP addresses are used solely for security and fraud prevention.
l Through Compliance Data, we record your consent or refusal regarding cookies, whether you agree to receive marketing communications, and whether you agree to our Privacy Policy and Terms of Service, along with the time and version of your selections. These records are used to demonstrate our compliance with data protection legal obligations and to provide evidence in the event of a dispute.
How We Store Information
ü Storage Location: Your personal information is hosted and stored on the servers of our technology provider, Shopify Inc. Shopify’s core servers and data centers are primarily located in Canada (New Brunswick). Additionally, depending on the specific third-party services you use (such as payment gateways, email marketing tools, and analytics tools), your personal information may also be transferred to and stored on servers located in the United States or the European Economic Area.
l Specific Storage Locations:Order information, user profiles, store settings: Stored on Shopify’s servers in Canada.
l Payment information: We do not directly store sensitive financial information such as your full credit card number. The payment information you enter at checkout is processed directly by the relevant payment service provider (e.g., PayPal, Stripe, Shopify Payments). Please refer to each payment service provider’s privacy policy for details on where their data is stored.
For personal information transferred from the European Economic Area (EEA) or the United Kingdom to Canada, the United States, and other locations, we have implemented appropriate safeguards in accordance with the requirements of Article 44 and subsequent provisions of the GDPR, including the signing of Standard Contractual Clauses (SCCs) approved by the European Commission. Canada was recognized by the European Commission in 2002 as a country providing adequate protection; therefore, data transfers to Canada have an additional legal basis.
ü Retention Period: We retain your personal information only for as long as necessary to fulfill the purposes described in this Privacy Policy, or for a longer period permitted by law to comply with legal obligations, resolve disputes, or enforce agreements. After this period expires, your personal information will be deleted or anonymized (so that it can no longer be linked to you).
Third-Party Links and Social Media Features
u This website contains hyperlinks to websites or online services operated by third parties. These links are provided solely for your convenience to access additional information. Once you click on such links and leave this website, your activities on those third-party websites or online services will be governed entirely by their own terms of use and privacy policies. We assume no responsibility for the privacy practices, content security, or data processing practices of these third-party websites or online services. We strongly recommend that you carefully review the privacy policies and relevant legal documents of any third-party website or online service before visiting it.
u This website integrates features provided by third-party social media platforms, such as Facebook’s “Like” and “Share” buttons, Twitter’s “Tweet” button, Instagram Stories, or Pinterest’s “Save” button (collectively referred to as “Social Media Features”). These Social Media Features are operated by third-party social media companies and may interact with your social media accounts.
When you use social media features on this website, even if you do not directly interact with these features, the social media platform may automatically collect the following information about you:
l Your device’s IP address;
l Your browsing activity on this website (such as the pages you visit);
l Set or read cookies or similar tracking technologies placed in your browser to determine whether you are logged into their platform;
l If you are logged into that social media account and interact with the feature (e.g., by clicking “Like”), the platform may also collect publicly available information from your social media account, including but not limited to your name, date of birth, profile picture, user ID, friends list, and other details associated with that account.
The collection of information related to these social media features and the subsequent processing of such data are independently controlled by the social media company providing the feature. Any interaction you have with such features is governed by the privacy policy and terms of use of that social media company. We have no control over and assume no responsibility for the data processing practices of these platforms.
In accordance with the requirements of the General Data Protection Regulation (GDPR) and the California Consumer Privacy Act (CCPA), we will seek your explicit consent in advance via the Cookie Consent Management Tool regarding the tracking technologies used by social media features. You may disable or delete cookies associated with these social media features through your browser settings or the Cookie Preference Center on this website.
We recommend that you review the privacy policies of the following major social media platforms to understand their specific data processing practices:
l Facebook: https://www.facebook.com/privacy/policy
l Twitter (X): https://twitter.com/en/privacy
l Pinterest: https://policy.pinterest.com/en/privacy-policy
How We Disclose Information
² This is the core of this Privacy Policy. We do not sell your personal information to third parties for marketing purposes; we only disclose your personal information to third parties to the extent necessary in the following circumstances:
² To Shopify, vendors, and other third parties who perform services on our behalf (e.g., IT management, payment processing, data analytics, customer support, cloud storage, fulfillment, and shipping).
² Disclosure with Your Express Consent: With your express consent, we may disclose your information to other third parties.
² Disclosure to Comply with Laws and Regulations or in Response to Legal Proceedings:to comply with applicable laws, court orders, government requests, or other legal proceedings; to protect our rights, property, or safety, or those of others (such as in the investigation of fraud); to enforce our Terms of Service; or to protect our business interests.
User Rights and Choices
ü Right of Access: You have the right to request a copy of the personal information we hold about you.
ü Right to Rectification: You have the right to request that we correct any inaccurate or incomplete personal information about you.
ü Right to Erasure: Under certain circumstances (such as when the information is no longer necessary or you withdraw your consent), you have the right to request that we erase your personal information.
ü Right to Restrict Processing: Under certain circumstances, you have the right to request that we suspend the processing of your personal information.
ü Right to Data Portability: You have the right to request that we provide the personal information you have provided to us in a structured, commonly used, and machine-readable format, and to request that we transmit this information to another data controller.
ü Right to Object: You have the right to object at any time, on grounds relating to your particular situation, to our processing of your personal information based on our legitimate interests (including processing for direct marketing purposes).
ü Right to Withdraw Consent: If we process your personal information based on your consent, you have the right to withdraw that consent at any time. Withdrawing consent does not affect the lawfulness of processing based on consent prior to withdrawal.
ü Right to Lodge a Complaint with a Supervisory Authority: You have the right to lodge a complaint with the data protection supervisory authority in your jurisdiction.
Changes to The Privacy Policy
Nightwooolf may update this Privacy Policy from time to time, including to reflect changes in our practices or due to changes in legal requirements and regulatory reasons. We will post the revised Privacy Policy on this website, update the “Last Updated” date, and provide notice as required by applicable law.
Contact
If you have any questions about our privacy practices or the Privacy Policy, or you would like to exercise any of the rights available to you, please call or email us at service@nightwooolf.com or contact us at Rm1801 Easey Comm Bldg 253-261 Hennessy Road Wanchai Hong Kong