Privacy Policy

Welcome to Northlight Shop! At www.wonderxmas.com, we believe that the magic of the holidays should be accompanied by peace of mind, especially when it comes to your personal information. This Privacy Policy explains how we collect, use, disclose, and safeguard your data when you visit our website and make purchases. By using our site, you agree to the practices described here.

Our commitment to your privacy is as steadfast as our commitment to bringing festive joy to your home. We handle your data with the same care and security we would want for our own.

1. Information We Collect

To provide you with a seamless and magical shopping experience, we collect several types of information:

Personal Information You Provide:

• Contact & Identity Data: Name, email address, shipping and billing address, and phone number when you create an account or place an order.
• Payment Information: Credit/debit card details (processed securely via our partners), PayPal email, or other payment method details. We do not store full credit card numbers on our servers.
• Communications: Records of your correspondence with our customer service team (e.g., via [email protected]).
• Account Preferences: Saved items, order history, and shipping preferences if you create an account.

Information Collected Automatically:

• Device & Usage Data: IP address, browser type, operating system, referring URLs, pages viewed, time spent on site, and clickstream data.
• Location Data: General geographic location (country/region) derived from your IP address to show correct currency (USD) and determine shipping availability.

2. How We Use Your Information

We use your data solely to enhance your holiday shopping journey:

• To Process & Fulfill Orders: To complete your purchase, arrange shipping, send order confirmations, and provide customer support.
• To Communicate with You: To respond to inquiries, send transactional emails (order updates, shipping notifications), and, with your consent, inform you about exclusive festive offers and news.
• To Improve Our Website & Services: To analyze trends, monitor site performance, and understand how customers interact with our menus (like Christmas Decorations, Christmas Trees, etc.) to improve your experience.
• To Ensure Security: To protect against fraud, unauthorized transactions, and to maintain the safety and security of our website and services, using industry-standard SSL encryption.
• To Comply with Legal Obligations: As required by applicable law, regulation, or legal process.

3. Sharing & Disclosure of Information

We value your trust and do not sell or rent your personal information to third parties. We only share data under these circumstances:

• Service Providers: With trusted partners who perform essential functions on our behalf, such as payment processing (e.g., credit card gateways, PayPal), order fulfillment, shipping carriers, and email delivery services. These partners are contractually bound to protect your data.
• Legal Requirements: If required to do so by law, or in response to valid requests by public authorities (e.g., court orders).
• Business Transfers: In connection with a merger, sale of company assets, or acquisition, where customer information may be transferred as a business asset.
• With Your Consent: In any other situation, we will share your data only with your explicit permission.

As a global shop, your data may be transferred to and processed in countries outside your own, including the United States, where our servers are located. We ensure such transfers are protected by appropriate safeguards.

4. Data Storage & Security

Your security is our top priority, just like the security of your payment during checkout.

• Retention: We retain your personal information only as long as necessary to fulfill the purposes outlined in this policy, unless a longer retention period is required by law.
• Protection Measures: We implement a variety of technical and organizational security measures, including:
  • SSL (Secure Socket Layer) encryption on all data transmissions.
  • Secure, PCI-DSS compliant payment processing partners.
  • Regular security assessments and restricted access to personal data.
• While we strive to protect your information, no electronic transmission or storage method is 100% secure. We encourage you to use strong passwords and protect your account credentials.

5. Your Rights & Choices

Depending on your location (such as under GDPR or CCPA), you may have certain rights regarding your personal data:

• Access & Correction: You can access and update your account information by logging into your Northlight Shop account.
• Deletion: You may request deletion of your personal data, subject to certain legal exceptions.
• Opt-Out of Marketing: You can unsubscribe from promotional emails by clicking the “unsubscribe” link in any such email.
• Data Portability: You may request a copy of your data in a structured, machine-readable format.
• Restrict Processing: You may object to or restrict certain processing of your data.

To exercise these rights, please contact us at [email protected]. We will respond within a reasonable timeframe, consistent with applicable laws.

6. Cookies & Tracking Technologies

Like most festive online shops, we use cookies and similar technologies to make your browsing experience brighter and more efficient.

• What are Cookies? Small text files stored on your device that help us remember your preferences, analyze site traffic, and personalize content.
• How We Use Them:
  • Essential Cookies: Necessary for site functionality, such as keeping items in your cart as you browse our Christmas Decorations or Christmas Lights sections.
  • Analytics Cookies: Help us understand how visitors use our site (e.g., Google Analytics) to improve our menus and layout.
  • Preference Cookies: Remember your language, currency (USD), and other settings.
• Your Control: You can manage your cookie preferences through your browser settings. Please note that disabling certain cookies may affect the functionality of our website.

7. Children’s Privacy

Our website is not directed to children under the age of 16. We do not knowingly collect personal information from children. If you are a parent or guardian and believe your child has provided us with data, please contact us, and we will take steps to delete such information.

8. Changes to This Privacy Policy

We may update this policy periodically to reflect changes in our practices or legal requirements. The “Last Updated” date at the top will indicate the latest revision. We encourage you to review this page occasionally to stay informed.