Nanoleaf Creator Club

First Party Usage

Third Party Usage

Data Vendors

Essential Functions & Legitimate Interest

The below services are essential to the function of this website, and cannot be disabled without breaking your browsing experience. They're designed to process data in your browser only ("first party"), and to not transmit information to our servers or to third party servers (with the exception of if you choose to log into our website, as explained in more detail below).

Nanoleaf Geolocation Service
We use your IP address to determine the country which you're connecting from and suggest the locale which is most relevant to your physical location (localizing product information, availability, and currency). Data processing is conducted on the client side (your browser), and your location preference is stored in a cookie in your browser. Pinpointing your location by this service is restricted to the country level, and is not sent to our servers for storage or further analysis.
Nanoleaf Language Identification Service
We use the preferred language settings provided by the user-agent of your browser to suggest content which is available in your language. Data processing is conducted on the client side (your browser), and your language preference is stored in a cookie in your browser. This information is not sent to our servers for storage or further analysis.
Nanoleaf Single Sign-On Service
Upon login with an eligible Nanoleaf account, we generate a hashed and anonymised token and store it in your browser. This facilitates single sign on for various accounts that you use to interact with our products and services (Nanoleaf Shop, Nanoleaf Helpdesk, Nanoleaf App, and/or Nanoleaf Cloud). This token does interact with third party services if you log into our website, but is designed in such a way that it cannot be used to identify you without access to additional data (specifically, a database containing information registered in any of your Nanoleaf user accounts). For more information on these interactions, please review the "Third Party" and "Data Vendors" sections.

Functionality & Legitimate Interest
Data collected of this type is required for this website to function, and cannot be disabled. To prevent this type of data usage, please disable Javascript in the browser. Note that doing so may break your browsing experience on this website, and make certain content or functionality unavailable until Javascript is enabled and the page reloaded. See the Data Vendors tab for more information on processor and subprocessor relationships.
Security & Authentication Usage
You consent to our collection and processing of data in order to securely authenticate your account(s) with Nanoleaf and to enhance the protection of any personal information willingly provided to Nanoleaf. This type of data usage cannot be disabled. See the Data Vendors tab for more information on processor and subprocessor relationships.
Advertising Usage
You consent to our collection and processing of data for marketing and advertising purposes. Your data will never sold by Nanoleaf to another party even if you give consent. See the Data Vendors tab for more information on processor and subprocessor relationships.
Performance Usage
You consent to our collection and processing of data for the purpose of improving the functionality and user experience of this website and similar websites on the nanoleaf.me domain and subdomains. See the Data Vendors tab for more information on processor and subprocessor relationships.
Personalization Usage
You consent to our collection and processing of data in order to personalize your browsing experience and present to you more relevant content and experience based on the preferences which you indicate. See the Data Vendors tab for more information on processor and subprocessor relationships.

Data Exchange With Third Parties

The below services and use cases refer to direct agreements with third-party vendors which may process data (processors) on our behalf (as a sub-processor). We take care to select vendors who have appropriate protections in place around the handling of personally-identifiable information, and describe the related interactions in plain language to the best of our ability. Links to vendor privacy policies and vendor opt-outs can be found in the "Data Vendors" section.

Google Analytics
We use Google Analytics to analyze aggregate behavior on our website, with the goal of using these aggregated data sets to improve user experience, website performance, and relevance of the content that we publish. We do not use the user-id-session collection function, and do not analyze individual user sessions using Google Analytics. We do create remarketing lists with Google Analytics, which at aggregate are used to improve the relevance of paid advertising for users who have not opted out of data collection with Google (please see the "Data Vendors" tab for opt-out instructions). These lists cannot be used by Nanoleaf to personally identify you. On the European locales of our website, IP addresses are anonymised by local servers before data is processed by Google Analytics. Please note that anonymised data may be sent to these third countries : United States, Canada, Hong Kong.

Data is Anonymised : Yes
Data Storage Locations : France, Canada, United States, Hong Kong
Data Usage Purposes : Technical Analysis, Marketing
To disable the collection of data for processing with Google Analytics, you can install the opt-out tool here
Google Optimize
We use Google Optimize to analyze aggregate visitor preferences and help determine whether the content which we publish on our website is useful for visitors. This includes "A/B" and "Multivariant" tests of content and website design/layout. The information collected through this analysis is of an aggregate, anonymous nature (user-id-session is not collected).

Data is Anonymised : Yes
Data Storage Locations : France, Canada, United States, Hong Kong
Data Usage Purposes : Technical Analysis, Marketing
Google Ads
We use Google Ads to promote our products and services in various countries, including the United Kingdom and the member states of the European Union. Ad products which we utilize include AdWords (text and search), Display (banner), and various formats of video advertising units on YouTube. Google Ads is a subprocessor of aggregate data collected via Google Analytics and shared with Google Ads in an anonymised manner (user-id-session is not transmitted, since it is not collected). Ad personalization signals are disabled by default for users in the EU and UK. This prevents the use of remarketing and retargeting advertisements unless a visitor has opted in for this use.

Data is Anonymised : No
Data Storage Locations : Canada, United States, Hong Kong
Data Usage Purposes : Marketing
Google's privacy policy can be found here
Facebook Connect
We use Facebook Connect to record behavioral activity related to sales, and to improve the relevance of marketing and advertising to "look-alike cohorts". In practice, this means that an anomymous Facebook user-id is generated after the completion of a sale and sent to Facebook to attribute against a set of user data in their posession. At aggregate, this data is used to improve the targeting of advertising to visitors on Facebook, Instagram, and other properties owned by Meta (primarily by identifying "like" users on these platforms who may find the advertisements relevant).

Data is Anonymised: No
Data Storage Locations: United States
Data Usage Purposes: Marketing
Facebook's privacy policy can be found here
Twitter Connect
We use Twitter Connect to record certain behavioral actions on Twitter (for example, link clicks to our website) and analyze the associated behaviors on our website with the goal of improving the experience that visitors have, and determine which content is relevant. This data is aggregated and anonymous in nature, individual user sessions are not analyzed and Nanoleaf cannot attribute this data to its own personally-identifiable data stored in user accounts for Nanoleaf services.

Data is Anonymised: No
Data Storage Locations: United States
Data Usage Purposes: Marketing
Twitter's privacy policy can be found here
Funnelytics
We use Funnelytics to determine the success of marketing campaigns in aggregate, on narrowly-defined sets of website landing pages and purchase checkouts. This data is aggregated and anonymous in nature, and cannot be used by Nanoleaf to personally identify a visitor to our website.

Data is Anonymised: Yes
Data Storage Locations: Canada
Data Usage Purposes: Marketing
Funnelytics' privacy policy can be found here
Shopify
We use Shopify to process purchases on our website in a PCI DSS compliant checkout environment which meets PSD2 requirements as required by law in the European Union. All payment transactions are processed in France, and are compliant with national law as well as the regulations proscribed by the European Commission. When you make a purchase on the Nanoleaf Shop, data essential to the processing and fulfillment of your purchase is shared with Shopify (the processor) and accessed by Nanoleaf as required to fulfill your order (the sub-processor). Purchase data is aggregated and processed by Nanoleaf for reporting purposes (these reports are not shared with other parties under any circumstances). Personally-identifiable information is used only to provide order fulfillment and customer service (either at your request, or proactively when we identify in advance service or logistics disruptions which may impact you). All data collected and stored on Shopify's servers is subject to the right to be forgotten, and you may request deletion of such data at any time by contacting us to initiate the request on your behalf. After a request has been initiated, Shopify will communicate with you directly solely in regards to the progress of your data deletion request. Please see the ""Data Vendors"" section for more information.

Data is Anonymised: No
Data Storage Locations: France, Canada, Hong Kong, Japan, Vietnam
Data Usage Purposes: Order Processing and Fulfillment
Please note that personally-identifiable information for EU and UK customers is stored in France, and may be sub-processed in Canada. This data is not stored in the other locations listed (rather, the data for customers in those regions is stored locally).
To submit a right to be forgotten request, please contact Nanoleaf Support
More information on how Shopify manages GDPR compliance and deletion requests is available here
Brevo
We use Brevo to provide certain transactional and marketing-related email or SMS communications with your explicit permission (the opt-in mechanism required when signing up for a contact list on our website). At our direction, Breco facilitates the communication of commercial and non-commercial messages based on the permissions which you gave during the sign-up process. Some examples include limited-time promotions, general company news and updates, or product-specific news and updates related to devices which you have indicated that you own (or have purchased through the Nanoleaf Shop on our website). All data collected and stored on Brevo's servers is subject to the right to be forgotten, and you may request deletion of such data by contacting us. Personally-identifiable information is limited to your contact record, which only includes information which you have volunteered during the signup process (common data attributes are name, email address, country of domicile, language preference, and products owned).

Data is Anonymised: No
Data Storage Locations: France
Data Usage Purposes: Marketing, Non-Marketing Communications
To submit a right to be forgotten request, please contact Nanoleaf Support
More information on how Brevo manages GDPR compliance is available here
Gorgias
We use Gorgias to facilitate customer service, order support, and technical support interactions via LiveChat on our website, telephone (IP telephony), social media messaging, and email messaging. Personally-identifiable information is required to facilitate these interactions, which includes your email address and (optionally) your name and telephone number. Order reference numbers and device serial numbers are also commonly requested to facilitate such interactions, although these cannot be used in isolation to personally identify you. Gorgias stores your contact details and case history, which enables us to provide better (and more expedient) customer service in the future. You can request deletion of any case or your case history at any time by contacting us.

Data is Anonymised: No
Data Storage Locations: United States
Data Usage Purposes: Customer Service
To submit a right to be forgotten request, please contact Nanoleaf Support
More information on how Gorgias manages GDPR compliance is available here
Pinterest
We use Pinterest Ads to measure, report on and improve the performance of ads on Pinterest, or to figure out what kinds of ads to show customers on or off of Pinterest. This includes information about your visits to our site or purchases you made from us, or information about your interests from a third-party service, which we might use to help show you ads. You can control how we use this information to personalize your experience and the ads you see on Pinterest in your Privacy and Data Settings.

Data is Anonymised: No
Data Storage Locations: United States
Data Usage Purposes: Marketing
Pinterest's privacy policy can be found here
TikTok
We use TikTok Ads to promote our products and services in various countries.TikTok shares information with advertisers and third-party measurement companies to show how many and which users of the Platform have viewed or clicked on an advertisement. If you use the TikTok Lite version of TikTok, information is shared with advertising networks to display personalized advertisements to you on the TikTok Lite app and elsewhere online. TikTok stores and processes data in accordance with their privacy policy.

Data is Anonymised: No
Data Storage Locations: United States and Canada
Data Usage Purposes: Marketing
TikTok's privacy policy can be found here