Privacy Policy

Information We Collect

Information you provide. We collect information you provide to us, such as your name, company, business contact information, account and login information, quote specifications, uploaded drawings or documents, shipping and billing information, order and transaction history, credit-application information, and communications with us. Stripe processes payment-card information on our behalf; Nox does not receive full payment-card numbers.

Information from other sources. We may receive information from your company or its authorized users, advertising and referral partners, service providers, shipping and business partners, and public sources.

How We Use Information

We use information to:

• prepare quotes and process orders;
• create and manage accounts;
• process payments and credit applications;
• arrange shipping and delivery;
• provide customer service and communicate about quotes, orders, payments, deliveries, and accounts;
• prevent fraud and protect our Site, systems, customers, and business;
• understand how customers find and use Nox and improve our services;
• maintain accounting, tax, compliance, and transaction records; and
• comply with law and enforce our agreements.

We use sensitive information, such as payment, credit-application, or account-security information, only as reasonably necessary to provide requested services, protect our business and customers, and comply with law. We do not use this information for targeted advertising.

Cookies, Analytics, and Advertising Technologies

We use cookies and similar technologies, including tags, pixels, local storage, and session storage. These technologies fall into the following categories:

• Strictly necessary: Used for authentication, security, carts, checkout, privacy preferences, and other requested Site functions. When you confirm a delivery destination, we automatically remember its country, ZIP or postal code, city, and state in a first-party cookie for 90 days so you can return to quoting without entering it again. This cookie contains no street address or contact details and is used for quoting and delivery, not advertising. You can change the destination in checkout or remove the cookie through your browser settings. While your browser holds a quote cart, we record when you visit and which Site pages you view so our sales team can follow up on that quote. This record carries no referrer, campaign, or advertising data and ends when the cart is emptied or ordered.
• Analytics and diagnostics: Used to understand and improve the Site, diagnose problems, and evaluate the quote and checkout experience. This category may include session replay as described below, along with first-party visit and account-usage measurement. For visitors identified as U.S.-based, this category is enabled by default unless they reject Analytics. For other visitors, including when location is unknown, it stays off until they allow Analytics.
• Advertising measurement: Used to understand whether advertisements lead to Site visits, quote activity, or purchases. For U.S. visitors, this category is enabled by default unless they opt out or send a recognized opt-out preference signal. For other visitors, it stays off until they allow Advertising. Our current Site configuration does not enable personalized-advertising signals. Order conversions may carry a hashed email address so a provider can match the order to an earlier ad click, as described below.

You can manage Analytics and Advertising technologies through Privacy Choices on the Site, available on this page and with the other links in the homepage footer. U.S. visitors can turn optional tracking off at any time. Other visitors can enable it through Privacy Choices. Saved choices take precedence over these regional defaults. Your selection is ordinarily saved in that browser for one year and may be changed at any time. Declining optional technologies will not prevent you from requesting a quote or placing an order.

Google Analytics follows your Analytics choice to measure site activity and the quote-to-order journey. You can allow Analytics while declining Advertising.

We use Google Ads and Microsoft Advertising to measure advertising effectiveness. When Advertising is enabled, these providers may receive cookie or advertising identifiers, device and browser information, pages visited, referring pages, ad-click information, conversion events, transaction value, currency, and a transaction identifier. Microsoft’s Universal Event Tracking tag loads only while Advertising is enabled and follows the same choice. We do not intentionally send payment-card information, credit-application information, or uploaded customer documents to any advertising provider. Advertising providers configured through Google Tag Manager may include Google and X.

When you submit or pay for an order, we may also share the email address on that order with Microsoft Advertising and X so they can match the order to an earlier ad click. Those providers’ tags convert the address to a hashed identifier in your browser before it is sent, and we share it only for that matching. This sharing follows your Advertising choice: decline Advertising and no order identifiers are shared.

Intercom provides support chat when you open it. When Analytics and diagnostics is enabled, it can also maintain visit history. Chat remains available when you decline optional tracking.

We use Google Places and Google Maps when you request address-autocomplete or mapping features. When you use those features, Google may receive your address or location request together with standard device and network information.

We recognize Global Privacy Control and similar legally required opt-out preference signals. When we detect a recognized signal, we turn off Advertising technologies in that browser. The Site does not respond to older "Do Not Track" signals because there is no generally accepted standard for them.

How We Disclose Information

We do not sell personal information in exchange for money.

We disclose information when reasonably necessary to operate our business, fulfill your requests, and provide our services, including to:

• Technology and service providers supporting hosting, databases, file storage, payments, email, analytics, session replay, artificial-intelligence processing, address services, security, and Site operations. These providers may include Supabase, Vercel, Amazon Web Services, Stripe, Resend, Twilio, Google, X, Anthropic, PostHog, and Statsig.
• Shipping and business-operations providers, including freight carriers, logistics companies, accounting systems such as Intuit QuickBooks, and workplace or customer-management tools used for your transaction.
• Your company and its authorized users when an account, quote, order, or communication relates to that company.
• Professional advisers and government authorities when required by law or reasonably necessary to protect our rights, property, services, customers, or others.
• A buyer, investor, lender, or successor as part of a financing, merger, acquisition, reorganization, or sale of some or all of our business.

Some privacy laws may define certain advertising-related disclosures as a "sale," "sharing," or use for targeted advertising even when no money is exchanged. Where applicable, you may opt out through Privacy Choices. We honor recognized opt-out preference signals as described above.

Text Messages (SMS)

Nox Metals Inc. sends text messages only to people who have opted in to a Nox Metals Inc. text-message program, such as operational order alerts for Nox Metals employees or order updates for customers who opt in at checkout. When you opt in, we collect your mobile phone number, your opt-in and opt-out status, and records of the messages we send you, including delivery status.

We use this information only to send the messages you opted in to, to honor opt-out and help requests, and to keep records of our messaging. We send text messages through our messaging provider, Twilio, which processes this information on our behalf.

We do not share, sell, or provide mobile phone numbers or messaging consent data to third parties or affiliates for marketing or promotional purposes. This includes the phone number and consent an employee provides for purchasing alerts; neither is used for the advertising disclosures described above. Twilio processes this information on our behalf to deliver and manage our messages.

Message frequency varies with order activity. Message and data rates may apply.

You can opt out at any time by replying STOP to any message, or get help by replying HELP. See the SMS Terms in our Terms & Conditions.

Retention

We retain information for as long as reasonably necessary for the purposes described in this policy. Session replays may be retained for up to 30 days, and browser privacy preferences are ordinarily retained for one year. Quote, order, payment, credit, accounting, tax, security, and transaction records may be retained longer for business, legal, and compliance purposes.

Security

We use administrative, technical, and physical safeguards designed for the type of information we handle. However, no website, storage system, or method of transmission is completely secure.

Your Choices and Privacy Rights

You can:

• manage Analytics, session replay, and Advertising technologies through Privacy Choices;
• unsubscribe from marketing emails using the link in the message; and
• ask us to access, correct, delete, or provide a copy of information associated with you.

Depending on where you live, you may have additional rights, including the right to know how we collect and disclose information, opt out of certain advertising-related disclosures or targeted advertising, limit certain uses of sensitive information, use an authorized agent, or appeal our response to a request.

We may verify your identity before completing a request. We will not discriminate against you for exercising an applicable privacy right. If we deny a request and applicable law provides an appeal right, you may appeal by replying to our decision.

Even if you unsubscribe from marketing, we may continue sending non-marketing messages about your account, quotes, orders, payments, deliveries, security, or ongoing business relationship.

Changes to This Policy

We may update this Privacy Policy as our services, technology, or legal obligations change. When we update it, we will revise the date at the top and provide additional notice when appropriate.

Contact Us

To ask a privacy question or submit a privacy request, email privacy@noxmetals.co.