Personally-identifiable information is limited to your contact record, which only includes information which you have volunteered during the signup process (common data attributes are name, email address, country of domicile, language preference, and products owned). All data collected and stored on Sendinblue's servers is subject to the right to be forgotten, and you may request deletion of such data by contacting us. Some examples include limited-time promotions, general company news and updates, or product-specific news and updates related to devices which you have indicated that you own (or have purchased through the Nanoleaf Shop on our website). At our direction, Sendinblue facilitates the communication of commercial and non-commercial messages based on the permissions which you gave during the sign-up process. We use Sendinblue to provide certain transactional and marketing-related email or SMS communications with your explicit permission (the opt-in mechanism required when signing up for a contact list on our website). Please see the ''Data Vendors'' section for more information. After a request has been initiated, Shopify will communicate with you directly solely in regards to the progress of your data deletion request. All data collected and stored on Shopify's servers is subject to the right to be forgotten, and you may request deletion of such data at any time by contacting us to initiate the request on your behalf.

Personally-identifiable information is used only to provide order fulfillment and customer service (either at your request, or proactively when we identify in advance service or logistics disruptions which may impact you).

Purchase data is aggregated and processed by Nanoleaf for reporting purposes (these reports are not shared with other parties under any circumstances). When you make a purchase on the Nanoleaf Shop, data essential to the processing and fulfillment of your purchase is shared with Shopify (the processor) and accessed by Nanoleaf as required to fulfill your order (the sub-processor). All payment transactions are processed in France, and are compliant with national law as well as the regulations proscribed by the European Commission. We use Shopify to process purchases on our website in a PCI DSS compliant checkout environment which meets PSD2 requirements as required by law in the European Union.

Hexagon offices