Privacy policy

Last updated: October 22, 2026

Nexloa operates this store and website, including all related information, content, features, tools, products and services, in order to provide you, the customer, with a curated shopping experience (the "Services"). This Privacy Policy describes how we collect, use, and disclose your personal information when you visit, use, or make a purchase or other transaction using the Services or otherwise communicate with us.

Personal information we collect

• Contact details including your name, address, billing address, shipping address, phone number, and email address.
• Financial information including payment card information, transaction details and payment confirmation (processed by our payment providers — we do not store full card numbers).
• Transaction information including the items you view, add to cart, or purchase.
• Communications with us including customer support messages.
• Device and usage information including your IP address and how you interact with the Services.

How we use it

To process orders and payments, arrange shipping, provide customer support, prevent fraud, and comply with legal obligations. We do not sell your personal information.

Disclosure

We share information with service providers who perform services on our behalf (payment processing, fulfilment, hosting, analytics) and as required by law.

Your order: who receives your details

To prepare, ship and follow up your order, we use your name, email address, phone number, delivery and billing addresses and the products you ordered. We share them with the partners who take part in processing the order, and only what each one needs for its part:

• Our fulfilment partner, who prepares and ships your parcel and may be located outside your country, sees for each order the products, your name, delivery address and phone number.
• The carrier receives, through our fulfilment partner, what it needs to deliver the parcel and to reach you about the delivery, such as your name, delivery address and phone number.
• The payment service you choose receives what it needs to take your payment and to prevent fraud.
• Our email provider receives your email address and the content of the messages we send you about your order.

We do this to carry out your order, which we could not deliver without it, to prevent fraud and to meet our legal obligations. We do not sell your personal information. These partners handle it under their own privacy policies or on our instructions, and some of them are in other countries (see “International transfers” below).

Phone number and delivery

To place an order you must give a phone number, with its country code. It lets the carrier reach you about your delivery, and lets us reach you if there is a problem with your order. We keep it with your order and your customer record, and we pass it, with your name and delivery address, to the partner that prepares and ships your parcel (which may be located outside your country) and to the carrier. It may also be passed to the payment service you use, together with your payment. We don't call or text you for marketing. If you accepted advertising, a scrambled (hashed) version of it can also be sent to Meta, as described below.

Customer care: your messages and photos

When you write to us through the contact form, we keep your name, your email address, your message, the order number if you give one, and the photos you attach (up to 3 per message). A person answers you by email. You can also follow the conversation, reply and add photos from a private link we send you: keep that link to yourself, because anyone who has it can read your messages. We use them to answer you, to solve problems with your order and to keep a record of what was said, on the basis of your request and of our legitimate interest in running customer care properly.

Photos are converted to a small image when they arrive, so the location and other details recorded by your phone are not kept. Your messages and photos can be read by the people who handle customer care for us, and the emails go through our email provider. We keep a case for 24 months after it is resolved, then delete it with its messages and photos. A case that is waiting for your answer is marked as resolved after 14 days without one (you can reopen it by replying); a message identified as spam is deleted after 30 days. You can ask us to delete your messages sooner: see “Your rights”.

Advertising events sent from our server

If you accept advertising in the cookie banner — or you are in a country where the law only requires that you can refuse, such as the United States, and you have not refused — and your browser does not send a “Global Privacy Control” signal, the shop's own server also sends Meta, in addition to the Meta pixel in your browser, a few events: that you added a product to your cart, that you started checkout and, once your payment is confirmed, your purchase. This lets Meta count a sale even when your browser blocks its pixel, and lets us measure the result of our advertising.

These events carry the products, their value and currency, the order number, the page concerned, your IP address, your browser's description and Meta's own browser identifiers (set by its pixel or by a click on one of its ads). For a purchase they also carry your email address, phone number, first and last name, city, state or region, postal code, country and customer number, each scrambled by a one-way function (hashed) before it leaves our server. Nothing is sent for a visitor who refused advertising, whose browser sends “Global Privacy Control”, or who is in a country where consent is required and did not give it. We keep the event, with your IP address and browser description, for up to 7 days so that it can be sent again if Meta cannot be reached, then delete it; a record that it was sent, without these details, is kept for 60 days. Meta handles these data under its own privacy policy (linked below, in the section on analytics and advertising services).

Visit statistics without cookies

To see which pages are read and where visitors leave the shop, the shop counts visits with a tool built into it and run on our own servers. It sets no cookie and stores nothing on your device, and none of this data is sent to a third party. It rests on our legitimate interest in understanding how the shop is used and improving it.

What is recorded: the page viewed (its address, without anything after a “?”), your language, the product or the words you search for, the items you add to or remove from your cart, the moment you start checkout and the moment an order is paid (its amount and currency, never your name or contact details), the type of device, the browser, your country as reported by our network provider, and where the visit came from (a website, a search engine, an advertising link or direct access).

What is not recorded: your IP address, your full browser identification, your name, email address or postal address, or anything you type in a form. To tell visits apart, a short code is worked out from your IP address and browser with a secret key that changes every day; only that code is kept, and it can't be used to recognise you from one day to the next. When you pay, a random reference to your visit (it contains nothing about you) is passed to the payment provider so that the order can be matched with it. The statistics are kept for up to 14 months, then deleted.

Your choice. We don't count visitors whose browser sends a “Do Not Track” or “Global Privacy Control” signal. You can also switch the counting off for your browser with the button at the bottom of this page; this saves a small cookie on your device that holds only that choice, for one year, and you can switch the counting back on the same way.

How pages are used, without cookies

To find what does not work in the shop — a button that does not answer, a form that is too long, a page that is left at the first screen — the shop observes how its pages are used with a tool built into it and run on our own servers. It sets no cookie, stores nothing on your device and sends nothing to a third party. It rests on our legitimate interest in finding such problems and fixing them.

What is noted while a page is open: how far down the page you got and how long you were active on it, where you clicked (a place on a button, a link or another element and, for a button or a link, the few words that name it), whether the page answered your click, which form you started and whether you sent it (the names of its fields only), the script errors your browser met and how fast the page loaded. A small report is sent when you leave the page or go to another one.

What is not recorded: anything you type or choose in a form, the content of the pages you read and — on account, payment and order-tracking pages — anything about your clicks (only that the page was read, and for how long). None of it is linked to your name, your email address or an account, and it uses the same daily code as the visit statistics, which can't be used to recognise you from one day to the next. The data is kept for up to 4 months and then deleted.

Your choice. As for the visit statistics, we don't observe visitors whose browser sends a “Do Not Track” or “Global Privacy Control” signal, and the button at the bottom of this page switches it off for your browser.

If we also use Microsoft Clarity — a service by Microsoft that shows us heat maps and recordings of how pages are used — it is loaded only if you accept audience measurement in the cookie banner. Microsoft then receives information about your device and browser and about how you use the pages, and sets its own cookies; see privacy.microsoft.com/privacystatement.

Cookies and similar technologies

The shop uses a few cookies and items of browser storage that it needs in order to work. They don't require your consent:

• your cart and wish list, saved in your browser;
• your language and currency choice;
• the session that keeps you signed in to your customer account, and security tokens used when you sign in;
• a record of your cookie choices, kept for six months.

Everything else described below is optional and is only loaded if you accept it.

Analytics and advertising services (only with your consent)

Depending on how the shop is set up at a given time, we may use some of the following services to measure our audience and the results of our advertising: Google (Analytics, Tag Manager and Ads), Meta (the Facebook and Instagram pixel), TikTok (the TikTok pixel) and Pinterest (the Pinterest tag), as well as other comparable tools we may add. Only the services that are switched on are used, and none of them is loaded until you have made a choice in the cookie banner.

When you accept, these services may set cookies or similar identifiers on your device and receive your IP address, information about your device and browser, the pages you view, the products you view or add to your cart, when you start checkout, and when you complete a purchase (order value, currency, products and a payment reference). The pixels and tags in your browser do not receive your name, email address, postal address or phone number; what our own server sends to Meta is described above, in “Advertising events sent from our server”. They may use this data for their own purposes, including advertising, as described in their own privacy policies:

• Google: policies.google.com/privacy
• Meta: facebook.com/privacy/policy
• TikTok: tiktok.com/legal/privacy-policy
• Pinterest: policy.pinterest.com/privacy-policy

Your choice. We rely on your consent. You can accept all, reject all, or choose by category (audience measurement, advertising); rejecting is as easy as accepting and doesn't affect your use of the shop. While these services are in use, you can change or withdraw your choice at any time from "Cookie settings" in the footer of every page. Your choice is kept for six months, after which we ask again. Withdrawing consent doesn't affect what was done before.

We may also use an audience-measurement tool that we host ourselves, which doesn't use cookies and keeps its data on our own servers.

Services that help us run the shop

To operate the shop we use service providers who process personal information for us, for example: Stripe and PayPal (payments — you enter your payment details on their pages, not ours), Resend (sending emails such as order confirmations and password links), Cloudflare (DNS, network security and, where switched on, the Turnstile check that tells people from automated programs on our forms, which may use technologies similar to cookies), our hosting provider, and our fulfilment partner (who receives what is needed to pack and ship your order, such as the items and the delivery address). They process this data to provide their service, under their own terms and privacy policies.

International transfers

We are based in the United States, and some of our service providers process data in the United States or other countries. If you are in the European Economic Area, the United Kingdom or Switzerland, your information may therefore be transferred outside your country. Where this is required, it relies on safeguards such as the EU–US Data Privacy Framework or standard contractual clauses put in place with or by these providers.

Your rights

Depending on where you live, you may have the right to access, correct, delete, or receive a copy of your personal information, and to opt out of marketing communications at any time using the unsubscribe link in our emails.

Retention

We retain personal information for as long as needed to provide the Services, comply with legal obligations, resolve disputes, and enforce our agreements.

Contact

Questions about this Privacy Policy or your rights: email [email protected] or write to Nexinv Solutions, 1209 Mountain Road Pl NE STE R, Albuquerque, NM 87110, United States.