Privacy Policy

We use the information we collect primarily to process and fulfill your orders, manage your account, and communicate with you regarding your transactions. Additionally, we use this data to maintain website security, prevent fraudulent activity, and send promotional updates if you have opted in. For visitors from the European Economic Area (EEA) and the United Kingdom (UK), we process your personal data based on specific legal grounds. We process transaction and delivery data under the legal basis of Performance of a Contract. We use system data for security and performance optimization under our Legitimate Interests. Marketing messages are sent only with your explicit Consent, and corporate bookkeeping data is maintained under our Legal Obligations to comply with tax and regulatory requirements.

Our Store Platform and Security 

Our online store is hosted by Shopify, which provides the e-commerce platform that allows us to sell products to you. Customer data necessary to operate the store is processed and stored within the Shopify environment. Shopify operates in a PCI DSS-compliant environment. Data in transit is protected with encryption (SSL/TLS). We and our service providers take reasonable administrative, technical, and physical precautions to protect personal information. No method of transmission over the Internet or electronic storage is 100% secure. For more information on how Shopify handles data, see their privacy resources (available via shopify.com). 

Data Retention

We retain your personal information, account details, and purchase history for up to 7 years. This timeframe is strictly maintained to satisfy our legal, tax, accounting, and corporate regulatory obligations, or until you request its deletion.

Cookies & Tracking

We value your data privacy. Our website strictly utilizes essential, functional cookies to support core shopping cart behavior and checkout security. We do not integrate third-party marketing, tracking, or behavioral analytics cookies. Because we do not track our visitors across third-party websites, our site does not alter its behavior in response to browser Do Not Track (DNT) signals.

 

Sharing of Information / Third Parties 

We do not sell your personal information. We only transfer your data to trusted service providers that are strictly necessary to operate the store and fulfill orders, including our hosting platform (Shopify), your chosen payment processor, and shipping carriers.

Other websites: Links on our site may lead to third-party sites that have their own privacy policies and practices. We are not responsible for those sites. 

Marketing Communications 

If you explicitly opt-in to receive our email newsletter, we may collect information regarding your engagement with our messages, such as whether an email was opened or if a link was clicked. We do not share or combine this information with outside third-party marketing networks. You may receive emails about promotions, specials, or new products. You can unsubscribe at any time by following the instructions in any marketing email or by contacting us. Transactional emails (order confirmations, shipping notices) are sent regardless of marketing opt-in.

Your Rights and Choices 

Depending on your location, you have specific rights regarding your personal information, including the right to access, correct, update, or request the deletion of your data. To exercise these rights, email us at support@nighthawksupply.store and we will respond within the timeframe required by applicable law. 

For California residents under the CCPA/CPRA, we disclose that in the preceding 12 months we have collected Identifiers such as names and addresses, Commercial Information like purchase history, and Internet/Network Activity including IP addresses and device information. We disclose these categories only to our trusted Service Providers, including Shopify, payment processors, and shipping carriers, strictly for business purposes to operate our store. We do not sell your personal information, nor do we share your information for cross-context behavioral advertising. 

For EEA and UK residents under the GDPR, you also hold the right to data portability, the right to object to certain processing, the right to withdraw marketing consent at any time, and the right to lodge a complaint with your local data protection authority.

Children's Privacy

Our store is not intended for, nor do we knowingly collect data from, individuals under the age of 16. If we learn that a child under 16 has provided us with personal data, we will delete it immediately.

Changes to This Policy

We may update this Privacy Policy from time to time. Changes will be posted on this page with an updated “Last updated” date. Material changes may be highlighted or communicated by email where appropriate. 

Contact Us 

Questions about this Privacy Policy or our data practices can be sent to: support@nighthawksupply.store 

or by mail at: 

ChillSet PCM 

17195 Silver Pky. PMB 109 

Fenton, MI 48430-3426