Privacy Policy

1. Who we are and what changed

NightVeil is a brand that sold weighted sleep masks to customers in the United States. The store has stopped taking new orders. This website is now informational only: there is no checkout, no payment processing, no account system and no newsletter.

We remain responsible for the personal data we collected while the store was running, and we still process what is needed to complete deliveries already in progress and to support past customers. For any privacy question or request, contact us at info@nightveilmask.com. We respond within 1 business day and resolve formal requests within the timeframes required by law, at most 45 days.

2. What this site collects now

Nothing. There are no analytics, no advertising pixels and no third-party tracking scripts on this site anymore, and it sets no cookies. Nothing here profiles you or follows you between sites.

Our host, Vercel, keeps short-lived technical server logs that can include IP addresses, for security and reliability. We do not use them to identify visitors. Vercel processes them under its own privacy policy.

3. What we still hold from past orders

If you ordered from us while the store was open, we still hold the records belonging to that order:

• Your name, email address, shipping address and phone number, as entered at checkout.
• Order details: what you bought, the amount paid, and the shipment tracking number.
• Any email correspondence with you about your order.
• We never held your card number. Payments were processed by Stripe and card details never reached our servers.

4. Why we still process it

Only for these purposes, and nothing else:

• Completing deliveries that are still in transit, including sending tracking updates.
• Handling returns, refunds and guarantee claims on orders already placed.
• Answering your questions about your order.
• Meeting legal obligations, in particular the retention of transaction records for tax and accounting purposes.

5. Who still receives it

Only the providers needed to finish and support existing orders:

• Stripe: holds the payment record of your order and processes any refund.
• Our fulfilment partner and the postal carrier: hold the shipping details needed to deliver a package still in transit.
• Resend: delivers our emails to you, such as a tracking update or a reply.
• Vercel: hosts the site and processes technical logs.
• Authorities: only where we are legally required to, and only the minimum required.

6. What we stopped

Google Analytics, the Meta Pixel and the Meta Conversions API have all been removed from this site. No usage data, event data or hashed customer data is sent to Google or Meta anymore.

The newsletter is closed. If you were on the list, you will receive nothing further from it.

7. How long we keep it

Order and transaction records: up to 7 years, as required by Dutch tax law. This is a legal obligation we cannot waive, though we can restrict the data to the minimum the law requires.

Customer service emails: deleted once the matter is closed and no longer needed.

8. Your rights

You can ask us to give you a copy of your data, correct it, delete it, or send it to you in a portable format. You can also object to a particular use or ask us to restrict it. We never discriminate against anyone for exercising a right.

To exercise any right, email info@nightveilmask.com from the address linked to your order. We verify requests by matching your email against our order records and respond within 45 days.

These rights apply under the GDPR if you are in the EU/EEA, and under laws such as the CCPA/CPRA in the United States. We have never sold or shared personal information for cross-context behavioural advertising, and we do not do so now.

9. Security

All traffic to nightveilmask.com is encrypted with TLS. Payment records live with Stripe, a PCI-DSS Level 1 certified provider. Access to order data is limited to the people who need it.

10. Children

NightVeil was never directed at children and we do not knowingly hold personal information about anyone under 16.

11. Changes to this policy

The "Last updated" date above always reflects the current version. If anything material changes, this page changes with it.

12. Contact

Privacy questions, requests or complaints: info@nightveilmask.com. EU/EEA residents may also contact the Dutch Data Protection Authority (Autoriteit Persoonsgegevens); California residents may contact the California Attorney General.