Privacy Policy

Information We Collect

Information you provide. We collect information you provide to us, such as your name, company, business contact information, account and login information, quote specifications, uploaded drawings or documents, shipping and billing information, order and transaction history, credit-application information, and communications with us. Stripe processes payment-card information on our behalf; Nox does not receive full payment-card numbers.

Information from other sources. We may receive information from your company or its authorized users, advertising and referral partners, service providers, shipping and business partners, and public sources.

How We Use Information

We use information to:

• prepare quotes and process orders;
• create and manage accounts;
• process payments and credit applications;
• arrange shipping and delivery;
• provide customer service and communicate about quotes, orders, payments, deliveries, and accounts;
• prevent fraud and protect our Site, systems, customers, and business;
• understand how customers find and use Nox and improve our services;
• maintain accounting, tax, compliance, and transaction records; and
• comply with law and enforce our agreements.

We use sensitive information, such as payment, credit-application, or account-security information, only as reasonably necessary to provide requested services, protect our business and customers, and comply with law. We do not use this information for targeted advertising.

Cookies, Analytics, and Advertising Technologies

We use cookies and similar technologies, including tags, pixels, local storage, and session storage. These technologies fall into the following categories:

• Strictly necessary: Used for authentication, security, carts, checkout, privacy preferences, and other requested Site functions.
• Analytics and diagnostics: If you allow them, used to understand and improve the Site, diagnose problems, and evaluate the quote and checkout experience. This category may include session replay as described below.
• Advertising measurement: Unless you opt out, used to understand whether advertisements lead to Site visits, quote activity, or purchases. Where applicable law requires prior consent, we use these technologies only after receiving consent. Our current Site configuration does not enable personalized-advertising signals or enhanced conversions using customer contact information.

You can manage Analytics and Advertising technologies through Privacy Choices on the Site. Your selection is ordinarily saved in that browser for one year and may be changed at any time. Declining optional technologies will not prevent you from requesting a quote or placing an order.

We use Google Ads to measure advertising effectiveness. Unless you opt out, Google may receive cookie or advertising identifiers, device and browser information, pages visited, referring pages, ad-click information, conversion events, transaction value, currency, and a transaction identifier. We do not intentionally send payment-card information, credit-application information, or uploaded customer documents to Google Ads. Advertising providers configured through Google Tag Manager may include Google and X.

We use Google Places and Google Maps when you request address-autocomplete or mapping features. When you use those features, Google may receive your address or location request together with standard device and network information.

We recognize Global Privacy Control and similar legally required opt-out preference signals. When we detect a recognized signal, we turn off Advertising technologies in that browser. The Site does not respond to older "Do Not Track" signals because there is no generally accepted standard for them.

How We Disclose Information

We do not sell personal information in exchange for money.

We disclose information when reasonably necessary to operate our business, fulfill your requests, and provide our services, including to:

• Technology and service providers supporting hosting, databases, file storage, payments, email, analytics, session replay, artificial-intelligence processing, address services, security, and Site operations. These providers may include Supabase, Vercel, Amazon Web Services, Stripe, Resend, Google, X, Anthropic, and Statsig.
• Shipping and business-operations providers, including freight carriers, logistics companies, accounting systems such as Intuit QuickBooks, and workplace or customer-management tools used for your transaction.
• Your company and its authorized users when an account, quote, order, or communication relates to that company.
• Professional advisers and government authorities when required by law or reasonably necessary to protect our rights, property, services, customers, or others.
• A buyer, investor, lender, or successor as part of a financing, merger, acquisition, reorganization, or sale of some or all of our business.

Some privacy laws may define certain advertising-related disclosures as a "sale," "sharing," or use for targeted advertising even when no money is exchanged. Where applicable, you may opt out through Privacy Choices. We honor recognized opt-out preference signals as described above.

Retention

We retain information for as long as reasonably necessary for the purposes described in this policy. Session replays may be retained for up to 30 days, and browser privacy preferences are ordinarily retained for one year. Quote, order, payment, credit, accounting, tax, security, and transaction records may be retained longer for business, legal, and compliance purposes.

Security

We use administrative, technical, and physical safeguards designed for the type of information we handle. However, no website, storage system, or method of transmission is completely secure.

Your Choices and Privacy Rights

You can:

• manage Analytics, session replay, and Advertising technologies through Privacy Choices;
• unsubscribe from marketing emails using the link in the message; and
• ask us to access, correct, delete, or provide a copy of information associated with you.

Depending on where you live, you may have additional rights, including the right to know how we collect and disclose information, opt out of certain advertising-related disclosures or targeted advertising, limit certain uses of sensitive information, use an authorized agent, or appeal our response to a request.

We may verify your identity before completing a request. We will not discriminate against you for exercising an applicable privacy right. If we deny a request and applicable law provides an appeal right, you may appeal by replying to our decision.

Even if you unsubscribe from marketing, we may continue sending non-marketing messages about your account, quotes, orders, payments, deliveries, security, or ongoing business relationship.

Changes to This Policy

We may update this Privacy Policy as our services, technology, or legal obligations change. When we update it, we will revise the date at the top and provide additional notice when appropriate.

Contact Us

To ask a privacy question or submit a privacy request, email privacy@noxmetals.co.