We use Google Analytics to analyze aggregate behavior on our website, with the goal of using these aggregated data sets to improve user experience, website performance, and relevance of the content that we publish. We do not use the user-id-session collection function, and do not analyze individual user sessions using Google Analytics. We do create remarketing lists with Google Analytics, which at aggregate are used to improve the relevance of paid advertising for users who have not opted out of data collection with Google (please see the "Data Vendors" tab for opt-out instructions). These lists cannot be used by Nanoleaf to personally identify you. On the European locales of our website, IP addresses are anonymised by local servers before data is processed by Google Analytics. Please note that anonymised data may be sent to these third countries : United States, Canada, Hong Kong.

We use Google Optimize to analyze aggregate visitor preferences and help determine whether the content which we publish on our website is useful for visitors. This includes "A/B" and "Multivariant" tests of content and website design/layout. The information collected through this analysis is of an aggregate, anonymous nature (user-id-session is not collected).

We use Google Ads to promote our products and services in various countries, including the United Kingdom and the member states of the European Union. Ad products which we utilize include AdWords (text and search), Display (banner), and various formats of video advertising units on YouTube. Google Ads is a subprocessor of aggregate data collected via Google Analytics and shared with Google Ads in an anonymised manner (user-id-session is not transmitted, since it is not collected). Ad personalization signals are disabled by default for users in the EU and UK. This prevents the use of remarketing and retargeting advertisements unless a visitor has opted in for this use.

We use Facebook Connect to record behavioral activity related to sales, and to improve the relevance of marketing and advertising to "look-alike cohorts". In practice, this means that an anomymous Facebook user-id is generated after the completion of a sale and sent to Facebook to attribute against a set of user data in their posession. At aggregate, this data is used to improve the targeting of advertising to visitors on Facebook, Instagram, and other properties owned by Meta (primarily by identifying "like" users on these platforms who may find the advertisements relevant).

We use Twitter Connect to record certain behavioral actions on Twitter (for example, link clicks to our website) and analyze the associated behaviors on our website with the goal of improving the experience that visitors have, and determine which content is relevant. This data is aggregated and anonymous in nature, individual user sessions are not analyzed and Nanoleaf cannot attribute this data to its own personally-identifiable data stored in user accounts for Nanoleaf services.

We use Funnelytics to determine the success of marketing campaigns in aggregate, on narrowly-defined sets of website landing pages and purchase checkouts. This data is aggregated and anonymous in nature, and cannot be used by Nanoleaf to personally identify a visitor to our website.

We use Shopify to process purchases on our website in a PCI DSS compliant checkout environment which meets PSD2 requirements as required by law in the European Union. All payment transactions are processed in France, and are compliant with national law as well as the regulations proscribed by the European Commission. When you make a purchase on the Nanoleaf Shop, data essential to the processing and fulfillment of your purchase is shared with Shopify (the processor) and accessed by Nanoleaf as required to fulfill your order (the sub-processor). Purchase data is aggregated and processed by Nanoleaf for reporting purposes (these reports are not shared with other parties under any circumstances). Personally-identifiable information is used only to provide order fulfillment and customer service (either at your request, or proactively when we identify in advance service or logistics disruptions which may impact you). All data collected and stored on Shopify's servers is subject to the right to be forgotten, and you may request deletion of such data at any time by contacting us to initiate the request on your behalf. After a request has been initiated, Shopify will communicate with you directly solely in regards to the progress of your data deletion request. Please see the ""Data Vendors"" section for more information.

We use Sendinblue to provide certain transactional and marketing-related email or SMS communications with your explicit permission (the opt-in mechanism required when signing up for a contact list on our website). At our direction, Sendinblue facilitates the communication of commercial and non-commercial messages based on the permissions which you gave during the sign-up process. Some examples include limited-time promotions, general company news and updates, or product-specific news and updates related to devices which you have indicated that you own (or have purchased through the Nanoleaf Shop on our website). All data collected and stored on Sendinblue's servers is subject to the right to be forgotten, and you may request deletion of such data by contacting us. Personally-identifiable information is limited to your contact record, which only includes information which you have volunteered during the signup process (common data attributes are name, email address, country of domicile, language preference, and products owned).

We use Gorgias to facilitate customer service, order support, and technical support interactions via LiveChat on our website, telephone (IP telephony), social media messaging, and email messaging. Personally-identifiable information is required to facilitate these interactions, which includes your email address and (optionally) your name and telephone number. Order reference numbers and device serial numbers are also commonly requested to facilitate such interactions, although these cannot be used in isolation to personally identify you. Gorgias stores your contact details and case history, which enables us to provide better (and more expedient) customer service in the future. You can request deletion of any case or your case history at any time by contacting us.

Data is Anonymised : Yes
Data Storage Locations : France, Canada, United States, Hong Kong
Data Usage Purposes : Technical Analysis, Marketing
To disable the collection of data for processing with Google Analytics, you can install the opt-out tool here

Data is Anonymised : Yes
Data Storage Locations : France, Canada, United States, Hong Kong
Data Usage Purposes : Technical Analysis, Marketing

Data is Anonymised : No
Data Storage Locations : Canada, United States, Hong Kong
Data Usage Purposes : Marketing
Google's privacy policy can be found here

Data is Anonymised: No
Data Storage Locations: United States
Data Usage Purposes: Marketing
Facebook's privacy policy can be found here

Data is Anonymised: No
Data Storage Locations: United States
Data Usage Purposes: Marketing
Twitter's privacy policy can be found here

Data is Anonymised: Yes
Data Storage Locations: Canada
Data Usage Purposes: Marketing
Funnelytics' privacy policy can be found here

Data is Anonymised: No
Data Storage Locations: France, Canada, Hong Kong, Japan, Viet Nam
Data Usage Purposes: Order Processing and Fulfillment
Please note that personally-identifiable information for EU and UK customers is stored in France, and may be sub-processed in Canada. This data is not stored in the other locations listed (rather, the data for customers in those regions is stored locally).
To submit a right to be forgotten request, please contact Nanoleaf Support
More information on how Shopify manages GDPR compliance and deletion requests is available here

Data is Anonymised: No
Data Storage Locations: France
Data Usage Purposes: Marketing, Non-Marketing Communications
To submit a right to be forgotten request, please contact Nanoleaf Support
More information on how Sendinblue manages GDPR compliance is available here

Data is Anonymised: No
Data Storage Locations: United States
Data Usage Purposes: Customer Service
To submit a right to be forgotten request, please contact Nanoleaf Support
More information on how Gorgias manages GDPR compliance is available here