Privacy policy

Privacy Policy

Last updated: October 22, 2026

This Privacy Policy describes how BrightNoel ("we", "us", "our"), operating the BrightNoel online store (the "Store"), collects, uses, and shares your personal information when you visit the Store, make a purchase, or contact us.

Our platform

The Store is hosted on Shopify, an e-commerce platform. Information you submit through the Store is processed by Shopify on our behalf so we can run the Store, take payments, and fulfill your orders. You can learn more in the Shopify Privacy Policy and exercise certain rights through the Shopify Privacy Portal.

Information we collect

  • Contact and order details: name, email address, shipping and billing address, phone number (if provided), and the items you purchase.
  • Payment information: payments are processed by secure third-party payment processors (such as Shopify Payments, PayPal, or other processors shown at checkout). We do not store your full card number.
  • Communications: messages you send us, such as support requests.
  • Device and usage information: IP address, browser and device type, pages viewed, and how you interact with the Store, collected automatically through cookies and similar technologies.

How we use your information

  • To process and fulfill your orders, including shipping, tracking, returns, and refunds
  • To communicate with you about your order and respond to your questions
  • To prevent fraud and keep the Store secure
  • To improve the Store and understand how it is used
  • To send marketing emails, only if you have opted in; you can unsubscribe at any time using the link in any email
  • To comply with legal obligations

Who we share it with

We do not sell your personal information for money. We share information only as needed to run the Store, with:

  • Shopify (our e-commerce platform)
  • Payment processors to process your payment
  • Our fulfillment partner and shipping carriers to pack and deliver your order (your name, shipping address, phone number if provided, and order contents)
  • Analytics and advertising services (for example, Shopify analytics or social media advertising tools) to understand Store usage and show relevant ads, if enabled
  • Authorities, when required by law or to protect our rights

Cookies

We and our service providers use cookies and similar technologies to keep your cart working, remember your preferences, understand Store traffic, and, where enabled, measure and personalize advertising. You can control or delete cookies through your browser settings; blocking some cookies may affect how the Store works. Where required, you will be asked for consent through a cookie banner.

Your privacy rights (including California / CCPA)

Depending on where you live, you may have the right to:

  • Know / access the personal information we hold about you
  • Correct inaccurate information
  • Delete your personal information, subject to legal exceptions (for example, records we must keep for tax purposes)
  • Opt out of the "sale" or "sharing" of personal information for targeted advertising
  • Not be discriminated against for exercising your rights

California residents: under the California Consumer Privacy Act (CCPA), as amended by the CPRA, you have the rights listed above. We do not sell personal information for money. Some use of advertising cookies may be considered "sharing" under California law; you can opt out by contacting us, by using any "Do not sell or share my personal information" link on the Store, or by enabling the Global Privacy Control (GPC) signal in your browser, which we honor where supported.

If you are in the European Economic Area or the UK, you also have rights under the GDPR, including the right to object to or restrict processing, to withdraw consent, and to lodge a complaint with your local data protection authority.

To exercise any of these rights, contact us through our contact form. We may need to verify your identity before responding. You may use an authorized agent to make a request on your behalf.

Data retention

We keep order information for as long as needed to fulfill your order and meet legal, tax, and accounting obligations, and other information only as long as needed for the purposes described here.

International transfers

We and our service providers may process your information in countries other than where you live, including the United States, the European Union, and China (where some of our fulfillment partners prepare orders). We take reasonable steps to protect your information when it is transferred.

Security

We rely on Shopify's secure infrastructure and encrypted (HTTPS) checkout. No method of transmission or storage is 100% secure, but we work to protect your information.

Children

The Store is not directed to children under 16, and we do not knowingly collect their personal information.

Changes

We may update this Privacy Policy from time to time. The updated version will be posted on this page with a new "Last updated" date.

Contact us

For questions about this policy or your personal information, contact us through our contact form.