Privacy policy


Last updated: August 11, 2026

Nightlit operates this store and website, including all related information, content, features, tools, products, and services, in order to provide you, the customer, with a curated shopping experience (the “Services”).

The Services are powered by Shopify, which enables us to provide and operate our online store.

This Privacy Policy explains how Nightlit collects, uses, processes, and discloses personal information when you visit, use, or make a purchase or other transaction through our Services, or when you otherwise communicate with us.

If there is a conflict between our Terms of Service and this Privacy Policy regarding the collection, processing, or disclosure of personal information, this Privacy Policy will control with respect to those matters.

Please read this Privacy Policy carefully. By accessing or using any of our Services, you acknowledge that you have read and understood this Privacy Policy and understand how your information may be collected, used, and disclosed as described below.

Personal Information We Collect or Process

When we use the term “personal information,” we mean information that identifies you or that can reasonably be linked to you or another person.

Personal information does not include information that has been collected anonymously or de-identified in a way that it can no longer reasonably identify or be linked to you.

Depending on how you interact with our Services, where you live, and as permitted or required by applicable law, we may collect or process the following categories of personal information:

Contact Information

This may include:

  • Your name

  • Billing address

  • Shipping address

  • Email address

  • Phone number

  • Other contact details you voluntarily provide

Payment and Financial Information

When you make a purchase, payment information may be collected and processed by our payment processors and other payment service providers.

Nightlit does not store your complete credit card or debit card information on our own systems, and we do not have access to your full card number, CVV/security code, or other sensitive card credentials after you submit your payment.

Payment information is handled directly by secure third-party payment gateways and payment processors that process payments on our behalf. These providers use security measures designed to protect payment information during payment processing.

We may receive limited payment-related information, such as:

  • Payment method

  • Payment status

  • Transaction identification information

  • Payment confirmation

  • The last four digits of a payment card, where provided to us by a payment processor

  • Other limited information necessary to identify or manage a transaction

We do not intentionally store complete payment card details on our own systems.

Account Information

If you create an account, we may collect:

  • Username

  • Password

  • Account preferences

  • Account settings

  • Security-related information

  • Other information associated with your account

Shopping and Transaction Information

We may collect information about your interactions with our store, including:

  • Products you view

  • Products you add to your cart

  • Products you add to a wishlist

  • Products you purchase

  • Orders you place

  • Returns

  • Exchanges

  • Cancellations

  • Previous transactions

  • Product preferences and interests

Communications

If you contact us, we may collect the information contained in your communication, including:

  • Customer support requests

  • Emails

  • Messages

  • Reviews

  • Other information you voluntarily provide to us

Device and Technical Information

We may automatically collect certain technical information, including:

  • IP address

  • Device type

  • Browser type

  • Operating system

  • Network information

  • Device identifiers

  • Other technical information associated with your device or connection

Usage Information

We may collect information about how you interact with our Services, including:

  • Pages you visit

  • Products you view

  • How you navigate our website

  • When you access our Services

  • Interactions with features of our website

  • Other website usage information

We may also create reasonable inferences or preferences based on the information described above, where permitted by applicable law.

How We Collect Personal Information

We may collect personal information from several sources.

Directly from you

We may collect information when you:

  • Create an account

  • Place an order

  • Visit or use our Services

  • Subscribe to communications

  • Contact customer support

  • Submit a review

  • Participate in features of our website

  • Otherwise provide information to us

Automatically

Certain information may be collected automatically when you use our Services through:

  • Cookies

  • Pixels

  • Web beacons

  • Similar technologies

  • Your browser

  • Your device

These technologies may help us operate, secure, analyze, and improve our Services and, where permitted, provide personalized advertising.

From Service Providers

We may receive information from companies that provide services to us, including:

  • Shopify

  • Payment processors

  • Shipping and fulfillment providers

  • Analytics providers

  • Customer support providers

  • Technology providers

  • Cloud and hosting providers

From Partners and Other Third Parties

We may also receive information from business partners, advertising partners, social-media platforms, or other third parties where permitted by applicable law.

How We Use Your Personal Information

Depending on how you interact with us, we may use personal information for the following purposes.

Providing, Operating, and Improving the Services

We may use your information to:

  • Process and fulfill orders

  • Process returns and exchanges

  • Arrange shipping and delivery

  • Process payments through our payment providers

  • Manage your account

  • Remember your preferences

  • Remember products you are interested in

  • Provide customer support

  • Send order and account notifications

  • Allow you to submit reviews

  • Provide product recommendations

  • Personalize your shopping experience

  • Improve our website, products, and Services

  • Understand how customers use our Services

Marketing and Advertising

Where permitted by applicable law, we may use personal information for marketing and promotional purposes.

This may include:

  • Sending promotional emails

  • Sending promotional text messages

  • Sending promotional communications by postal mail

  • Showing advertisements on our website

  • Showing advertisements on other websites or platforms

  • Providing personalized product recommendations

  • Advertising products based on your interactions with our Services

For example, advertising or marketing may take into account products you have viewed, added to your cart, purchased, or otherwise interacted with.

Depending on where you live, you may have the right to opt out of certain targeted advertising, sharing, or other marketing-related processing.

Security and Fraud Prevention

We may use information to:

  • Protect our Services

  • Authenticate accounts

  • Prevent unauthorized activity

  • Detect potential fraud

  • Investigate suspicious activity

  • Prevent illegal or malicious activity

  • Protect customers and other users

  • Maintain the security and integrity of our Services

Although we use reasonable security measures, no method of transmission or electronic storage can be guaranteed to be completely secure.

Communicating With You

We may use your information to:

  • Respond to questions

  • Provide customer service

  • Resolve issues

  • Send order-related communications

  • Send account-related communications

  • Maintain our customer relationship

Legal and Compliance Purposes

We may use or disclose personal information when reasonably necessary to:

  • Comply with applicable laws

  • Respond to lawful requests from government authorities

  • Respond to subpoenas, court orders, or other legal processes

  • Protect our legal rights

  • Enforce our Terms of Service and policies

  • Investigate suspected violations

  • Resolve disputes

  • Protect the rights, safety, or property of Nightlit, our customers, or others

Payment Security

We take payment security seriously.

Nightlit does not store complete credit card or debit card information on our own systems.

When you enter payment information during checkout, your payment details are transmitted to and processed by the applicable payment gateway or payment processor.

This means:

  • Nightlit does not have access to your full card number after payment information is submitted.

  • Nightlit does not store your complete card number in our own databases.

  • Nightlit does not intentionally store your CVV or card security code.

  • Payment information is handled by third-party payment providers using their own security systems and safeguards.

  • We may receive limited payment information necessary to confirm and manage your transaction.

Because payments are processed by specialized payment providers, Nightlit employees generally cannot view or retrieve your complete card information.

Payment processors may have their own privacy policies and terms governing how they process payment information.

How We Disclose Personal Information

We may disclose personal information to third parties when reasonably necessary for legitimate business purposes and as permitted by applicable law.

This may include:

Shopify and Service Providers

We may share information with Shopify and companies that provide services to us, including:

  • Payment processing

  • IT and technology services

  • Website hosting

  • Data analytics

  • Customer support

  • Cloud storage

  • Order fulfillment

  • Shipping and delivery

  • Fraud prevention

  • Security services

These providers generally receive only the information reasonably necessary to perform their services.

Business and Marketing Partners

We may work with business and marketing partners to provide advertising, analytics, and promotional services.

For example, Shopify may support personalized advertising and related services using information associated with your interactions with our store and, where applicable, other merchants and websites.

Depending on where you live, you may have the right to opt out of certain sharing or processing for targeted advertising.

When You Request or Authorize Disclosure

We may disclose information when you direct us to do so, request that we do so, or otherwise consent to the disclosure.

For example, this may occur when:

  • You request delivery or shipping services

  • You use a social-media feature

  • You use a third-party login

  • You otherwise authorize information to be shared

Affiliates and Corporate Group

We may share information with our affiliates or other companies within our corporate group where appropriate.

Business Transactions

Personal information may be disclosed or transferred as part of a business transaction, such as:

  • A merger

  • Acquisition

  • Sale of assets

  • Financing

  • Bankruptcy

  • Reorganization

  • Similar corporate transaction

Legal and Safety Reasons

We may disclose information when necessary to:

  • Comply with applicable law

  • Respond to legal requests

  • Respond to subpoenas or warrants

  • Enforce our policies

  • Protect our Services

  • Protect our rights

  • Protect customers or other individuals

  • Investigate fraud or unlawful activity

Relationship With Shopify

Our Services are hosted and powered by Shopify.

Shopify collects and processes information relating to your access to and use of our Services in order to provide, operate, maintain, and improve the Shopify platform and related services.

Information you submit through our Services may be transmitted to and processed by Shopify and other third parties, including providers that may be located in countries different from where you live.

We may also use certain Shopify features that incorporate information obtained from interactions with our store, other merchants, and Shopify.

Where Shopify independently processes personal information for its own purposes, Shopify may be responsible for that processing.

For more information about how Shopify handles personal information and the privacy rights available to you, please review Shopify's Consumer Privacy Policy and privacy resources.

Cookies and Similar Technologies

Our Services may use cookies and similar technologies.

These technologies may be used to:

  • Keep our website functioning properly

  • Remember your preferences

  • Maintain shopping carts and sessions

  • Understand website usage

  • Analyze website performance

  • Improve our Services

  • Detect fraud and security issues

  • Personalize content

  • Support advertising and marketing

Depending on where you live, you may have choices regarding certain cookies, tracking technologies, or targeted advertising.

Your browser or device may also provide controls for managing cookies and similar technologies.

Third-Party Websites and Links

Our Services may contain links to websites, applications, or online platforms operated by third parties.

If you visit a third-party website through one of our links:

  • That website may have its own privacy policy.

  • That website may collect information independently from us.

  • We do not control the privacy or security practices of third-party websites.

  • We are not responsible for the privacy, security, accuracy, completeness, or reliability of information on third-party websites.

We recommend reviewing the privacy policies and terms of any third-party website you visit.

Information you post publicly or on semi-public platforms, including social-media platforms, may be visible to other users and may be used by those platforms according to their own policies.

Children's Data

Our Services are not intended for children.

We do not knowingly collect personal information from children under the age of majority applicable in their jurisdiction.

If you are a parent or legal guardian and believe that a child has provided us with personal information, you may contact us using the contact information provided through our Services and request that the information be deleted.

As of the effective date of this Privacy Policy, we do not have actual knowledge that we “sell” or “share,” as those terms are defined under applicable privacy laws, personal information belonging to individuals under 16 years of age.

Security of Your Information

We use reasonable administrative, technical, and organizational measures designed to protect personal information against unauthorized access, misuse, alteration, disclosure, or destruction.

Payment information is handled by third-party payment processors and gateways rather than being stored as complete payment-card information on Nightlit's own systems.

However, no security system is perfect or completely impenetrable.

We cannot guarantee absolute or “perfect” security of your information.

Information transmitted over the internet may also be vulnerable while in transit. For this reason, we recommend that you avoid sending sensitive or confidential information through unsecured communication channels.

Retention of Personal Information

We retain personal information only for as long as reasonably necessary for the purposes described in this Privacy Policy, unless a longer retention period is required or permitted by law.

The length of time we retain information may depend on factors including:

  • Whether you maintain an account

  • Whether we need the information to provide Services

  • Whether the information is necessary to complete transactions

  • Legal and regulatory requirements

  • Accounting and record-keeping obligations

  • Resolving disputes

  • Enforcing agreements and policies

  • Preventing fraud or abuse

When personal information is no longer reasonably necessary, we may delete, anonymize, or otherwise dispose of it in accordance with applicable law.

Your Rights and Choices

Depending on where you live, you may have some or all of the following rights.

These rights are not absolute and may be subject to legal exceptions.

Right to Access / Know

You may have the right to request access to personal information we maintain about you.

Right to Delete

You may have the right to request deletion of personal information we maintain about you.

Right to Correct

You may have the right to request correction of inaccurate personal information.

Right to Data Portability

In certain circumstances, you may have the right to receive a copy of your personal information in a portable format or request that it be transferred to another organization.

Right to Opt Out of Sale or Sharing

Depending on where you live, you may have the right to opt out of the “sale” or “sharing” of personal information as those terms are defined under applicable privacy laws.

Right to Opt Out of Targeted Advertising

Depending on where you live, you may have the right to opt out of the processing of personal information for targeted or interest-based advertising.

Global Privacy Control

Where required or recognized by applicable law, we recognize the Global Privacy Control (“GPC”) signal.

If you visit our website with GPC enabled, we may treat the signal as a request to opt out of certain applicable processing for the browser and device sending the signal.

If we can associate the device sending the GPC signal with a Shopify account, the opt-out may also be applied to that account where required or supported.

We do not recognize other “Do Not Track” browser signals unless required by applicable law.

Marketing Communications

You may unsubscribe from promotional emails at any time by using the unsubscribe option included in our marketing communications.

Even if you unsubscribe from marketing communications, we may continue to send non-promotional communications that are necessary, including:

  • Order confirmations

  • Shipping updates

  • Account notifications

  • Security notices

  • Customer-service communications

  • Other transactional messages

Additional Rights for UK and EEA Residents

If you reside in the United Kingdom or European Economic Area, and subject to applicable law and its exceptions, you may also have the right to:

Object to Processing

You may have the right to object to certain processing of your personal information.

Restrict Processing

You may have the right to request that we restrict the processing of your personal information in certain circumstances.

Withdraw Consent

Where we rely on your consent as the legal basis for processing your information, you may withdraw your consent at any time.

Withdrawing consent does not affect the lawfulness of processing carried out before you withdrew your consent.

Exercising Your Rights

You may exercise applicable privacy rights through the options provided on our Services or by contacting us using the contact information made available on our website.

We may need to verify your identity before completing certain requests in order to protect your information from unauthorized access.

Where permitted by law, you may also authorize another person to submit a request on your behalf.

If an authorized agent submits a request, we may require proof that you authorized the agent to act on your behalf, and we may require you to verify your identity directly.

We will respond to valid privacy requests within the timeframes required by applicable law.

We will not discriminate against you for exercising privacy rights available to you under applicable law.

Complaints

If you have concerns or complaints about how we process your personal information, you may contact us using the contact information provided through our Services.

Depending on where you live, you may have the right to appeal our response or submit a complaint to your local data protection or privacy authority.

Residents of the European Economic Area may contact their relevant data protection supervisory authority.

International Transfers

Your personal information may be transferred to, stored in, or processed in countries outside the country where you live.

If your personal information is transferred from the European Economic Area or United Kingdom to a country that does not provide an adequate level of data protection, we will rely on legally recognized transfer mechanisms where required, such as:

  • European Commission Standard Contractual Clauses

  • Applicable UK-approved contractual safeguards

  • Other legally recognized transfer mechanisms

Changes to This Privacy Policy

We may update this Privacy Policy from time to time.

Changes may be made to reflect:

  • Changes to our business practices

  • Changes to our Services

  • New technologies

  • Operational changes

  • Legal requirements

  • Regulatory requirements

  • Changes in how we collect or process information

When we make changes, we will post the updated Privacy Policy on our website and update the “Last updated” date.

Where required by applicable law, we will provide additional notice of material changes.

Contact Us

If you have questions about this Privacy Policy, how we handle personal information, or your privacy rights, please contact Nightlit using the contact information provided on our website.