Privacy Policy

Northshelf ("Northshelf," "we," "us," or "our") respects your privacy and is committed to protecting the personal data of everyone who visits our website or purchases our products. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit our online store (the "Site") or make a purchase from us, and it describes your rights regarding that information, including rights available to you under the General Data Protection Regulation ("GDPR").

By using our Site, you agree to the collection and use of information in accordance with this Privacy Policy. If you do not agree with our practices, please do not use our Site.

1. Who We Are

Northshelf is an online retailer specializing in seasonal clothing, serving customers primarily in the United States. Our Site is built and hosted using the Wix e-commerce platform.

2. Personal Data We Collect

We collect personal data that you provide directly to us, data collected automatically as you interact with our Site, and data received from third parties involved in fulfilling your order.

2.1 Information You Provide to Us

Contact information: name, email address, phone number, shipping and billing address
Order information: items purchased, order history, order value
Payment information: processed securely through PayPal and our credit card payment processor (see Section 4). We do not directly store full credit card numbers on our servers.
Account information: if you create an account, your username, password, and preferences
Communications: messages you send us via email, contact forms, or customer service inquiries

2.2 Information Collected Automatically

Device and usage data: IP address, browser type, operating system, referring URLs, pages viewed, and time spent on the Site
Location data: general geographic location inferred from your IP address
Cookies and similar tracking technologies: as described in Section 3 below

2.3 Information from Third Parties

Confirmation and tracking data from our shipping suppliers and dropshipping partners
Transaction and fraud-prevention data from our payment processors

3. Cookies and Similar Technologies

Our Site, powered by Wix, uses cookies and similar tracking technologies (such as pixels and local storage) to operate the Site, remember your preferences, analyze traffic, and support marketing efforts.

Types of cookies we use:

Essential cookies: required for core Site functionality, such as shopping cart operation and checkout
Performance and analytics cookies: help us understand how visitors use our Site so we can improve it
Functional cookies: remember your preferences and settings
Marketing/advertising cookies: used to deliver relevant advertising and measure campaign performance

You can control or disable cookies through your browser settings. Please note that disabling certain cookies may affect the functionality of the Site, including your ability to complete a purchase. Where required by law, we will request your consent to non-essential cookies via a cookie banner or consent tool on the Site.

4. How We Use Your Personal Data

We use the personal data we collect for the following purposes:

To process, fulfill, and ship your orders, including sharing order details with our dropshipping suppliers
To process payments through PayPal and our credit card payment processor
To communicate with you about your orders, inquiries, and customer service requests
To send you marketing communications, where you have consented or as otherwise permitted by law (you may opt out at any time)
To operate, maintain, and improve our Site and product offerings
To detect, investigate, and prevent fraud, unauthorized transactions, and other illegal activities
To comply with legal obligations, such as tax and accounting requirements

Legal Bases for Processing (GDPR)

Where the GDPR applies to our processing of your personal data, we rely on the following legal bases:

Performance of a contract: to process and fulfill your orders
Consent: for marketing communications and non-essential cookies
Legitimate interests: to improve our Site, prevent fraud, and operate our business, provided these interests are not overridden by your rights
Legal obligation: to comply with applicable tax, accounting, and regulatory requirements

5. Third-Party Service Providers

We share personal data with trusted third parties who help us operate our business. These include:

Wix.com Ltd.: our e-commerce platform provider, which hosts our Site and supports core store functionality
Dropshipping suppliers/manufacturers: we share the information necessary to fulfill your order (such as your name, shipping address, and order details) with our third-party suppliers, who ship products directly to you
PayPal: processes payments made via PayPal; PayPal's use of your data is governed by its own privacy policy
Credit card payment processor: processes credit and debit card transactions on our behalf
Shipping and logistics providers: used to deliver your order and provide tracking information
Analytics providers: help us understand Site usage and performance
Email/marketing service providers: used to send order confirmations, updates, and (where applicable) marketing communications

We require our third-party service providers to use appropriate safeguards to protect your personal data and to process it only for the purposes we specify. We do not sell your personal data to third parties.

6. International Data Transfers

Because we operate a dropshipping business, your personal data—including your name, address, and order details—may be transferred to, stored, and processed in countries outside of your country of residence, including countries where our suppliers, payment processors, or service providers (such as Wix and PayPal) are located. These countries may not have data protection laws equivalent to those in your home jurisdiction.

Where we transfer personal data of individuals located in the European Economic Area ("EEA"), the United Kingdom, or Switzerland to countries outside those regions, we rely on appropriate safeguards, such as:

The European Commission's Standard Contractual Clauses ("SCCs"), or
Transfers to recipients certified under recognized data protection frameworks, or
Other legally recognized transfer mechanisms

You may contact us at info@northshelf.net for more information about the safeguards we use for international data transfers.

7. Data Retention

We retain your personal data only for as long as necessary to fulfill the purposes for which it was collected, including:

For the duration of your customer relationship with us and any period thereafter required to comply with legal, tax, or accounting obligations
Order and transaction records are generally retained for a minimum of seven (7) years to comply with applicable tax and financial recordkeeping laws
Marketing data is retained until you withdraw your consent or opt out, after which we will delete or anonymize it within a reasonable period
Account data is retained until you request deletion of your account, subject to legal retention requirements

When personal data is no longer needed, we securely delete or anonymize it.

8. Your Rights Under the GDPR

If you are located in the EEA, the United Kingdom, or Switzerland, you have the following rights regarding your personal data:

Right to access: request a copy of the personal data we hold about you
Right to rectification: request correction of inaccurate or incomplete data
Right to erasure ("right to be forgotten"): request deletion of your personal data, subject to certain legal exceptions
Right to restrict processing: request that we limit how we use your data in certain circumstances
Right to data portability: request a copy of your data in a structured, commonly used, machine-readable format
Right to object: object to our processing of your data based on legitimate interests or for direct marketing purposes
Right to withdraw consent: where processing is based on consent, withdraw that consent at any time without affecting the lawfulness of processing before withdrawal
Right to lodge a complaint: file a complaint with a supervisory authority (see Section 10)

To exercise any of these rights, please contact us at info@northshelf.net. We will respond to your request within the timeframes required by applicable law. We may need to verify your identity before fulfilling your request.

9. Data Security

We implement reasonable technical and organizational measures designed to protect your personal data against unauthorized access, alteration, disclosure, or destruction. This includes relying on the security measures provided by Wix, PayPal, and our credit card processor. However, no method of transmission over the internet or electronic storage is completely secure, and we cannot guarantee absolute security.

10. Right to Lodge a Complaint

If you believe our processing of your personal data infringes the GDPR, you have the right to lodge a complaint with a data protection supervisory authority, particularly in the EU member state of your habitual residence, place of work, or place of the alleged infringement. A list of EU supervisory authorities is available at: https://edpb.europa.eu/about-edpb/about-edpb/members_en

We encourage you to contact us first at info@northshelf.net so we can attempt to resolve your concern directly.

11. Children's Privacy

Our Site is not intended for children under the age of 16. We do not knowingly collect personal data from children. If we become aware that we have inadvertently collected personal data from a child, we will take steps to delete such information promptly.

12. Third-Party Links

Our Site may contain links to third-party websites, including supplier or payment provider sites. We are not responsible for the privacy practices of those third parties. We encourage you to review their privacy policies before providing any personal data.

13. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, technology, legal requirements, or other factors. We will post the updated policy on this page with a revised "Last Updated" date. We encourage you to review this policy periodically.

14. Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us at:

Northshelf Email: info@northshelf.net