PRIVACY POLICY

PRIVACY POLICY – NIGHTBOUND CREATIONS

Last Updated: 29.7.2025

Nightbound Creations (“we,” “our,” “us”), operates this website and online store, hosted via Squarespace, to provide products, custom-made items, and related services (“Services”). This Privacy Policy explains how we collect, use, share, and protect your personal information when you access or use our Services or communicate with us.

By using our Services, you confirm that you have read and understood this Privacy Policy, including your rights under the General Data Protection Regulation (GDPR) and other applicable laws.

1. Information We Collect

For the purposes of this Policy, “personal information” means any information that identifies or can reasonably be linked to you or another person. Anonymous or de-identified data is not considered personal information.

We may collect the following categories of personal information:

Contact details: Name, address, email, phone number, and shipping/billing addresses.
Order and transaction data: Purchased products, payment details, order history, refunds, and returns (processed securely through our payment providers).
Account information (if you create an account): Email and preferences.
Communication data: Information provided via contact forms, emails, custom order requests, or social media.
Device and usage data: IP address, browser type, session duration, navigation behavior (collected via Squarespace analytics and cookies).

Cookies are used to deliver core functionality, security, and (with your consent) analytics and marketing. Visitors are notified via a cookie banner when first visiting the website.

We do not knowingly collect personal information from children under the legal age of majority in your jurisdiction. If you believe a minor has provided us with their information, contact us to request deletion.

2. How We Collect Information

We may collect your personal information:

Directly from you: When you create an account, place an order, contact us, or submit a custom request.
Automatically: Through analytics tools, cookies, and your interactions with our site (only with consent where required)
From service providers and partners: Such as Squarespace (our hosting and e-commerce platform), payment processors, and shipping providers, to fulfil your orders.

3. How We Use Your Information

We process your personal information based on the following lawful grounds (GDPR Art. 6):

• Contractual necessity: To process your orders, payments, and shipping, and provide customer support.

• Legal obligations: To comply with tax, accounting, and legal requirements.

• Legitimate interests: To improve services, manage operations, and protect against fraud (while respecting your rights).

• Consent: For marketing emails, analytics, and cookies, where required by law.

Uses include:

Order Fulfillment: Managing purchases, returns, shipments, and notifications.
Customer Support and Communications: Responding to inquiries and keeping you updated on orders.
Site Improvement & Analytics: Understanding user behaviour and optimising the site.
Security and Legal Compliance: Fraud detection, account protection, and compliance with legal obligations.

We do not engage in automated decision-making or profiling without your explicit consent.

4. Sharing of Personal Information

We share your information only where necessary:

With Squarespace (our website host and platform).
With payment processors (e.g., Stripe, PayPal) for secure transactions.
With shipping and logistics providers to deliver your orders.
With accountants or legal advisors when required for compliance.
With authorities where legally necessary.

We do not sell your personal information to third parties.

5. International Transfers

Your personal data may be transferred outside the EU/EEA, for example, to Squarespace servers in the United States and through integrated services like Google Analytics and Google Workspace (email and domain tools).

These transfers are protected using:

Standard Contractual Clauses (SCCs) approved by the European Commission.
EU–U.S. Data Privacy Framework for certified entities.
Other recognised safeguards where applicable.

Additionally, our website uses cookies to enhance your browsing experience, some of which may involve data processing outside the EU/EEA. You are notified via a cookie banner when visiting our website, and you can adjust your preferences at any time.

If you want more details about safeguards used, contact us at info@nightboundcreations.com.

6. Your Rights (Including GDPR)

Depending on your location, you may have the right to:

Access the personal data we hold about you.
Correct inaccuracies in your data.
Request deletion (“Right to Be Forgotten”).
Restrict or object to processing.
Receive a copy of your data (“Data Portability”).
Withdraw consent (for processing based on consent, such as marketing).
Lodge a complaint with your local Data Protection Authority.

In Finland, you may contact the Office of the Data Protection Ombudsman: https://tietosuoja.fi/en/home.

To exercise these rights, contact info@nightboundcreations.com. We may verify your identity before fulfilling your request.

7. Data Retention & Security

We retain your data only as long as necessary for:

Fulfilling your orders and providing services.
Complying with legal and tax obligations (up to 6 years for accounting).
Resolving disputes and enforcing agreements.

Your personal data is processed on Squarespace’s secure servers and is not transferred elsewhere except:

To trusted third parties (e.g., shipping, payment processors).
For accounting purposes (where only your name, order details, and amount are used).

We protect your data through:

SSL (HTTPS) encryption and secure hosting.
Password-protected access controls.
Minimal data handling (only authorised personnel access).

No system is entirely impenetrable. Avoid sending sensitive information over unencrypted channels. In case of a breach, we will notify affected users and regulators as required by GDPR.

8. Cookies & Tracking

This website uses cookies and similar technologies to ensure core site functionality, improve your browsing experience, and—only with your consent—enable analytics and marketing tools. Our use of cookies complies with the General Data Protection Regulation (GDPR) and ePrivacy rules.

When you first visit our site, a cookie banner appears, allowing you to accept, reject, or customize your preferences for non-essential cookies. You can withdraw or change your consent at any time via the cookie banner or your browser’s cookie settings.

Types of Cookies We Use

Essential Cookies – Always active. These enable Squarespace (our hosting platform) to securely deliver this website, manage transactions, and support basic site functionality.
Analytics Cookies – Used only with your consent to help us understand visitor interactions, such as page views, time spent on site, and navigation patterns. These are powered by Squarespace Analytics and, where applicable, Google Analytics.
Marketing Cookies – Activated only with your explicit consent. These help us deliver relevant promotions, track campaign performance, and avoid showing you repetitive ads.

Disabling non-essential cookies will not prevent access to the site but may reduce functionality (e.g., personalized content or performance tracking).

Data Collected Through Analytics

If you consent to analytics or marketing cookies, we may collect the following information:

Your browser, device, and network details
Pages you visited before arriving on our website
Your IP address (which may indicate your general location)
On-site interactions, such as clicks, scroll depth, searches, and timestamps

This data is shared only with trusted service providers (Squarespace and, if enabled, Google Analytics) and is used exclusively to improve site performance, user experience, and our marketing efforts.

Your Rights & Control

Under GDPR, you have the right to:

Refuse non-essential cookies (via the banner or your browser)
Request access to or deletion of any personal data derived from cookies
Withdraw consent for analytics or marketing tracking at any time

For more details on your privacy rights and how to exercise them, please see Section 6 (“Your Rights”).

To learn more about how Squarespace uses cookies, visit Squarespace’s Cookie Policy.

9. Changes to This Privacy Policy

We may update this policy to reflect legal or operational changes. Updates will be posted here with a new “Last Updated” date. Significant changes may be communicated by email or site notice.