Privacy Policy

Welcome to NHN Commerce LLC (“NHN Commerce,” “we,” “us,” “our”). Your privacy is critically important to us. This Privacy Policy explains how we collect, use, disclose, and safeguard your personal information when you visit our website https://nhncommerce.shop (the “Site”), make a purchase, or interact with us through other channels (email, phone, social media). It also describes your rights regarding your personal data and how you can exercise those rights.

We are committed to transparency. This policy is designed to be read and understood by real people, not just lawyers. Please take a few minutes to read it carefully. By using our Site or providing us with your personal information, you consent to the practices described in this Privacy Policy. If you do not agree, please do not use our Site or provide us with your data.

1. Information We Collect

We collect several types of information from and about users of our Site, including:

1.1. Personal Identifiers (Information You Provide Directly)

When you place an order, create an account, sign up for our newsletter, request a stain sample, or contact customer service, we may collect:

• Full name (first and last)

• Billing address (street, city, state, ZIP code, country)

• Shipping address (if different from billing)

• Email address

• Phone number (optional, but helpful for freight delivery scheduling)

• Payment information (credit/debit card details) – Important: We do not directly store your full card number. Payment information is collected and processed by Stripe, our third-party payment processor. We receive only a payment token, the last four digits of your card, the card brand, and the expiration date. For more on Stripe’s privacy practices, see Stripe’s Privacy Policy.

1.2. Order & Customization Details

Because we sell custom-made furniture, we collect specific information about your product preferences, including:

• Wood type selected (e.g., Cherry, Brown Maple)

• Stain or finish selected (e.g., Almond, Harvest, Shadow)

• Table dimensions (length, width)

• Number of extension leaves

• Edge profile, skirt height, and other custom options

• Any special instructions you provide in the order notes

This information is necessary to fulfill your order and is stored as part of your transaction history.

1.3. Automatically Collected Information (Device & Usage Data)

When you browse our Site, we automatically collect certain information through cookies, log files, and other tracking technologies. This may include:

• IP address (anonymized or hashed where possible)

• Browser type and version (e.g., Chrome, Safari, Firefox)

• Operating system (e.g., Windows, macOS, iOS, Android)

• Referring website (the site you came from)

• Pages you view on our Site, including time spent on each page

• Search terms you use on our Site

• Clickstream data (the sequence of links you click)

• Device identifiers (for mobile users)

This information is generally not linked to your personal identity unless you are logged into your account. We use it to improve our website performance, diagnose technical issues, and understand customer preferences.

1.4. Information from Third-Party Sources

We may receive information about you from third parties in limited circumstances, such as:

• Shipping carriers (e.g., FedEx, UPS) – to update delivery status or resolve delivery issues.

• Fraud prevention services (through Stripe) – to verify the legitimacy of transactions.

• Social media platforms (if you interact with our social media accounts) – such as your public profile information (name, profile picture) when you comment or send a message.

We do not buy or rent personal data from data brokers.

---

2. How We Collect Your Information

We collect information using the following methods:

2.1. Direct Interactions

You provide us with information when you:

• Create an account on our Site.

• Place an order (online, by email, or by phone).

• Subscribe to our email newsletter.

• Request free stain samples.

• Contact customer service via email, phone, or contact form.

• Leave a product review or upload photos.

2.2. Automated Technologies (Cookies & Tracking)

As explained in Section 6, we use cookies and similar technologies to collect usage data. You can control cookies through your browser settings, but disabling some cookies may affect Site functionality.

2.3. Third-Party Analytics & Advertising

We use Google Analytics to understand how visitors interact with our Site. Google Analytics collects information such as your IP address (anonymized), browser type, and pages visited. Google’s privacy policy is available at https://policies.google.com/privacy. You can opt out of Google Analytics by installing the Google Analytics Opt-out Browser Add-on.

We also use Google Ads and Meta (Facebook) Ads for remarketing campaigns. These services may place cookies on your browser to show you relevant ads based on your browsing history. You can opt out of interest-based advertising through the Digital Advertising Alliance (DAA) at https://optout.aboutads.info.

---

3. How We Use Your Information

We use the information we collect for the following business purposes:

3.1. Order Processing & Fulfillment (Contractual Necessity)

• To process, confirm, and fulfill your orders (including custom furniture production).

• To communicate order status, production updates, shipping information, and delivery appointments.

• To process payments and issue refunds via Stripe.

• To provide customer support and respond to your inquiries.

Legal basis: Performance of a contract (your purchase agreement with us).

3.2. Account Management & Personalization

• To create and manage your user account.

• To save your preferences (e.g., favorite wood types, saved cart items) for a personalized experience.

• To remember your shopping cart contents between visits.

Legal basis: Legitimate interest (improving user experience) or consent (if you create an account).

3.3. Marketing & Promotional Communications

• To send you email newsletters, product updates, and special offers (if you have opted in).

• To show you relevant ads on third-party platforms (remarketing).

• To request product reviews after your purchase.

Legal basis: Consent (for email marketing) or legitimate interest (for product review requests). You may opt out of marketing emails at any time by clicking the “unsubscribe” link in any email.

3.4. Site Improvement & Analytics

• To analyze usage trends and improve our website’s design, content, and functionality.

• To diagnose technical issues and prevent fraud.

• To measure the effectiveness of our advertising campaigns.

Legal basis: Legitimate interest (operating and improving our business).

3.5. Legal Compliance & Fraud Prevention

• To comply with applicable laws, regulations, legal processes, or government requests.

• To detect, investigate, and prevent fraudulent transactions, unauthorized account access, or other illegal activities.

• To enforce our Terms and Conditions and other policies.

Legal basis: Legal obligation or legitimate interest (protecting our business and customers).

3.6. No Automated Decision-Making (Profiling)

We do not use automated decision-making or profiling that has legal or significant effects on you. Any credit card fraud checks are performed by Stripe using their algorithms, but we do not make automated decisions based on your personal data beyond basic transaction verification.

---

4. Sharing Your Information with Third Parties

We do not sell, rent, or trade your personal information to third parties for their own marketing purposes. However, we share your information with limited categories of third parties as necessary to operate our business.

4.1. Service Providers (Data Processors)

We share your information with the following types of service providers who process data on our behalf:

All service providers are contractually obligated to keep your data confidential and secure, and to use it only for the specified purposes.

4.2. Legal Compliance & Safety

We may disclose your personal information if required to do so by law (e.g., a court order, subpoena, or government investigation) or if we believe in good faith that such disclosure is necessary to:

• Protect our rights, property, or safety, or those of our customers or the public.

• Investigate fraud or security breaches.

• Enforce our Terms and Conditions.

4.3. Business Transfers

If NHN Commerce LLC is involved in a merger, acquisition, bankruptcy, or sale of all or a portion of its assets, your personal information may be transferred as part of that transaction. We will notify you via email and/or a prominent notice on our Site of any change in ownership or use of your personal information.

4.4. With Your Consent

We may share your information for other purposes with your explicit consent (e.g., publishing a photo of your custom table in our gallery with your permission).

---

5. Data Retention

We retain your personal information only as long as necessary to fulfill the purposes for which it was collected, including satisfying legal, accounting, or reporting requirements.

After the retention period, we will securely delete or anonymize your information.

---

6. Cookies & Tracking Technologies

6.1. What Are Cookies?

Cookies are small text files placed on your computer or mobile device when you visit a website. They help the website remember your actions and preferences (such as login, language, font size, and other display preferences) over a period of time.

6.2. Types of Cookies We Use

6.3. Managing Cookies

You can control cookies through your browser settings. Most browsers allow you to:

• See what cookies are stored and delete them individually.

• Block third-party cookies.

• Block all cookies.

• Clear all cookies when you close the browser.

However, if you disable strictly necessary cookies, certain features of our Site may not work properly (e.g., adding items to cart, checking out).

For more information on how to manage cookies, visit AboutCookies.org.

6.4. Do Not Track (DNT)

Our Site does not currently respond to browser “Do Not Track” (DNT) signals because there is no universally accepted standard for how to interpret them. However, you can opt out of targeted advertising as described in Section 7.

---

7. Your Privacy Rights (including GDPR, CCPA)

Depending on where you live (e.g., European Union, California, Canada, Australia), you may have certain rights regarding your personal information. We are committed to honoring those rights to the fullest extent possible.

7.1. Rights for All Users (Global)

You have the right to:

• Access: Request a copy of the personal information we hold about you.

• Correction: Request that we correct inaccurate or incomplete information.

• Deletion: Request that we delete your personal information, subject to certain legal exceptions (e.g., tax records, fraud prevention).

• Objection: Object to our processing of your data for direct marketing purposes or where we rely on legitimate interests.

• Restriction: Request that we restrict processing of your data in certain circumstances (e.g., while we verify a correction).

• Data Portability: Request a machine-readable copy of your data to transfer to another service provider (where technically feasible).

7.2. Additional Rights for EU Residents (GDPR)

If you are located in the European Economic Area (EEA), you have the additional rights:

• Right to withdraw consent: Where we rely on your consent (e.g., marketing emails), you may withdraw that consent at any time without affecting the lawfulness of processing based on consent before withdrawal.

• Right to lodge a complaint: You may lodge a complaint with your local data protection authority (e.g., ICO in the UK, CNIL in France) if you believe our processing violates GDPR.

Our legal bases for processing EU data are: (a) performance of a contract, (b) legitimate interests, (c) legal obligation, and (d) consent.

7.3. Additional Rights for California Residents (CCPA/CPRA)

If you are a California resident, the California Consumer Privacy Act (CCPA) and California Privacy Rights Act (CPRA) provide you with the following rights:

• Right to Know: You have the right to request that we disclose the categories and specific pieces of personal information we have collected about you, the sources of that information, the business purpose for collecting it, and the categories of third parties with whom we share it.

• Right to Delete: You have the right to request that we delete your personal information, subject to exceptions (e.g., completing a transaction, detecting security incidents, complying with legal obligations).

• Right to Correct: You have the right to request correction of inaccurate personal information.

• Right to Opt-Out of Sale/Sharing: We do not sell your personal information or share it for cross-context behavioral advertising (as defined by California law). Therefore, there is no opt-out to offer.

• Right to Limit Use of Sensitive Personal Information: We do not collect sensitive personal information (e.g., Social Security number, precise geolocation, biometric data) except for payment card information processed by Stripe. We do not use such information for secondary purposes.

• Right to Non-Discrimination: We will not discriminate against you for exercising any of your California privacy rights (e.g., charging different prices, denying services).

California’s “Shine the Light” law (California Civil Code § 1798.83) permits California residents to request, once per year, information about our disclosure of personal information to third parties for direct marketing purposes. As we do not share for such purposes, there is no information to disclose.

7.4. How to Exercise Your Rights

To exercise any of your privacy rights, please contact us at:

Email: namhuyedx@gmail.com
Subject Line: PRIVACY REQUEST – [Your Right, e.g., ACCESS/DELETION]
Please include: Your full name, email address associated with your account, and a clear description of your request. We may ask for proof of identity (e.g., a copy of your ID or confirming recent order details) to prevent unauthorized access.

Response Time: We will respond within 30 days for GDPR requests and within 45 days for CCPA requests (extensions possible with notice). There is no fee for exercising your rights unless your request is excessive or repetitive.

7.5. Authorized Agents (CCPA)

California residents may use an authorized agent to submit a privacy request on their behalf. The agent must provide written permission signed by you, and we may require you to verify your identity directly with us.

7.6. Opting Out of Marketing Communications

You can opt out of receiving marketing emails at any time by clicking the “unsubscribe” link in any email or by emailing us with “UNSUBSCRIBE” in the subject line. Please allow up to 10 business days for removal from active campaigns. Even after opting out, you may still receive transactional emails (order confirmations, shipping updates, customer service replies).

---

8. Security of Your Information

We take the security of your personal information very seriously. We implement a variety of industry-standard security measures to protect your data from unauthorized access, use, alteration, or disclosure.

8.1. Technical Safeguards

• SSL/TLS Encryption: Our entire website uses 256-bit SSL encryption (verified by a valid SSL certificate). This means all data transmitted between your browser and our server is encrypted.

• Tokenization: Payment card information is never stored on our servers. Stripe tokenizes your card data, and we only store a reference token.

• Access Controls: Only authorized employees (customer service and order fulfillment staff) have access to personal information, and only to the extent necessary for their job functions. All access is logged.

• Regular Security Audits: We perform periodic vulnerability scans and security assessments. Stripe also maintains PCI Level 1 certification.

8.2. Organizational Safeguards

• Employee Training: All NHN Commerce employees receive privacy and data security training annually.

• Data Minimization: We collect only the information necessary for the stated purposes.

• Incident Response Plan: In the unlikely event of a data breach, we will notify affected customers and relevant authorities within 72 hours (or as required by law).

8.3. Limitations

No method of transmission over the Internet or electronic storage is 100% secure. While we strive to protect your personal information, we cannot guarantee its absolute security. You are also responsible for maintaining the security of your account credentials (e.g., choosing a strong password and not sharing it).

If you believe your account has been compromised, please contact us immediately.

---

9. Children’s Privacy

Our Site and services are intended for adults aged 18 and over. We do not knowingly collect personal information from children under the age of 13 (or under the age of 16 for residents of certain countries, such as the EU). If you are a parent or guardian and believe your child has provided us with personal information, please contact us. We will delete that information promptly. If we learn that we have inadvertently collected personal information from a child without verified parental consent, we will delete it.

---

10. International Data Transfers

NHN Commerce LLC is based in the United States. Your personal information may be transferred to, stored, and processed in the United States or other countries where our service providers (e.g., Stripe, shipping carriers, email platforms) operate. These countries may have data protection laws that differ from those in your country.

10.1. For EEA and UK Residents

We ensure that any transfer of your personal data outside the EEA or UK is protected by appropriate safeguards, such as:

• Standard Contractual Clauses (SCCs) adopted by the European Commission, which impose data protection obligations on the data importer.

• Stripe’s compliance with the EU-US Data Privacy Framework (where applicable).

You may request a copy of the SCCs by contacting us.

10.2. For Other International Customers

By providing your personal information to us, you consent to the transfer of your data to the United States for the purposes described in this Privacy Policy. If you do not consent, please do not use our Site.

---

11. Third-Party Links

Our Site may contain links to third-party websites, such as our payment processor Stripe, shipping carriers, or social media platforms. This Privacy Policy does not apply to those third-party sites. We are not responsible for the privacy practices or content of such sites. We encourage you to read the privacy policies of any third-party site you visit.

---

12. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, legal requirements, or operational needs. The “Last Updated” date at the top of this page indicates when the most recent changes were made.

• Minor changes (e.g., clarification of wording, adding a new service provider) will be posted on this page without individual notice.

• Material changes (e.g., new data uses, changes to data sharing) will be communicated via email (to the address associated with your account) and/or a prominent notice on our Site at least 30 days before the changes take effect.

Your continued use of our Site after any changes constitutes your acceptance of the updated Privacy Policy. If you do not agree, you may close your account and request deletion of your data.

---

13. Contact Us

If you have any questions, concerns, or complaints about this Privacy Policy or our data handling practices, please contact us.

NHN Commerce LLC
Attention: Privacy Officer
Address: 30 N Gould St Ste R, Sheridan, WY 82801, USA
Email: namhuyedx@gmail.com (best for privacy requests)
Phone: +1626-999-2237 (for general inquiries; for privacy-specific matters, please use email)

For data protection authorities: If you believe we have not resolved your privacy concern, you may have the right to lodge a complaint with your local supervisory authority. For EU residents, a list of authorities is available at https://edpb.europa.eu/about-edpb/about-edpb/members_en. For California residents, you may contact the California Attorney General at https://oag.ca.gov/privacy.

---

Summary of Key Privacy Points

---

Thank you for trusting NHN Commerce with your personal information. We are committed to protecting your privacy as much as we are committed to providing you with beautiful, lasting furniture