Privacy Policy

Last updated: August 25, 2026

NOVALANE HOLDINGS LLC ("we," "us," "our"), operator of the OREDIUM brand, respects your privacy. This Privacy Policy explains how we collect, use, share, and protect your personal information.

1. INFORMATION WE COLLECT

We collect the following categories of personal information:

IDENTIFIERS & ORDER INFORMATION:

• Name, billing and shipping address

• Email address and phone number

• Order history and purchase details

• Account username and password (if applicable)

PAYMENT INFORMATION:

• Payment method and transaction history

• Processed by our payment providers; we do not store full credit card numbers

• Billing address and transaction amount

DEVICE & USAGE INFORMATION:

• IP address and device identifiers

• Browser type and operating system

• Pages visited and time spent on the Site

• Referring website or source

• Search terms and clicks

• Device location (if you permit)

MARKETING & TRACKING DATA:

• Cookies and similar tracking technologies

• Advertising pixels (Meta Pixel, TikTok Pixel, Google Analytics)

• Email engagement data (opens, clicks)

• Survey and feedback responses

We collect this information:

• Directly from you (when you fill out forms, create an account, or place an order)

• Automatically as you use the Site (through cookies, pixels, and analytics)

• From service providers and partners (payment processors, shipping carriers, marketing platforms)

2. HOW WE USE YOUR INFORMATION

We use your information to:

• Process, fulfill, and deliver your orders

• Provide customer support and respond to your inquiries

• Communicate about your order status and updates

• Send promotional offers, abandoned-cart reminders, and personalized marketing (where permitted)

• Analyze Site traffic and user behavior to improve our services

• Detect and prevent fraud and unauthorized transactions

• Comply with legal obligations and enforce our Terms

• Create and manage your account

• Troubleshoot technical issues

• Personalize your shopping experience

3. COOKIES & TRACKING TECHNOLOGIES

We use cookies, pixels, and similar technologies to:

• Remember your preferences and login information

• Track how you use the Site

• Deliver targeted advertising across the internet

• Measure the effectiveness of our marketing campaigns

• Analyze traffic and user behavior

COOKIE TYPES:

• Essential cookies (required for Site functionality)

• Performance cookies (analytics and optimization)

• Marketing cookies (tracking and targeted ads)

• Preference cookies (remembering your choices)

MANAGING COOKIES:

• You can manage cookie settings through your browser settings

• Most browsers allow you to refuse cookies or alert you when cookies are being sent

• You can use our cookie banner to adjust your preferences

• Note: Disabling essential cookies may affect Site functionality

We honor recognized opt-out signals, including:

• Global Privacy Control (GPC)

• Do Not Track (DNT) headers

• Other privacy preference signals recognized by law

4. HOW WE SHARE YOUR INFORMATION

We do not sell your personal information for money.

We share your information only with trusted service providers who process it on our behalf:

PLATFORM & OPERATIONS:

• Shopify (store platform and checkout)

• Hosting and cloud service providers

• Customer service and support tools

PAYMENT & FULFILLMENT:

• Payment processors (Stripe, PayPal, etc.)

• Shipping and logistics carriers

• Fraud prevention services

ADVERTISING & ANALYTICS:

• Meta/Facebook

• TikTok

• Google Analytics and Google Ads

• Other advertising and analytics platforms

DATA PROCESSING AGREEMENTS:

All service providers are bound by data processing agreements requiring them to:

• Use your data only as instructed

• Maintain confidentiality and security

• Comply with applicable privacy laws

We may also disclose your information:

• To comply with court orders, subpoenas, or legal processes

• To enforce our Terms and other agreements

• To protect our rights, privacy, safety, or property

• To prevent fraud or illegal activity

• When required by law

5. "DO NOT SELL OR SHARE MY PERSONAL INFORMATION"

Some jurisdictions (including California) treat the use of advertising cookies and pixels for behavioral targeting as a "sale" or "sharing" of personal information, even if no money is exchanged.

YOU HAVE THE RIGHT TO OPT OUT:

You may opt out of targeted advertising and cookie-based tracking by:

1. Adjusting our cookie banner settings on the Site

2. Enabling Global Privacy Control (GPC) in your browser

3. Emailing us at contact@oredium.com with "Opt-Out Request" in the subject line

We will not discriminate against you for exercising this right. You will not be charged higher prices or receive lower-quality service.

NOTE: Opting out may limit your ability to see personalized recommendations or offers.

6. YOUR PRIVACY RIGHTS BY JURISDICTION

CALIFORNIA RESIDENTS (CCPA/CPRA):

If you are a California resident, you have the right to:

• Know what personal information we collect, use, and disclose

• Delete your personal information (with limited exceptions)

• Correct inaccurate personal information

• Opt out of the sale or sharing of your information

• Limit our use of sensitive personal information

• Receive your data in a portable format

• Not face discrimination for exercising your rights

OTHER U.S. STATE RESIDENTS:

If you reside in a state with privacy laws (Virginia, Colorado, Connecticut, Utah, Texas, Oregon, Montana, Delaware, and others), you may have the right to:

• Access the personal information we collect and use

• Delete your personal information

• Correct inaccurate information

• Obtain a portable copy of your data

• Opt out of targeted advertising

• Opt out of the sale or sharing of personal data

• Opt out of automated decision-making/profiling

• Appeal a denial of your request

EUROPEAN RESIDENTS (GDPR):

If you are in the European Union or accessing from Europe, your privacy is protected under additional regulations. Contact us for our EU-specific privacy notice.

7. HOW TO EXERCISE YOUR RIGHTS

To submit a privacy request:

1. Email us at contact@oredium.com

2. Include "Privacy Request" in the subject line

3. Provide your full name and the email address associated with your account

4. Clearly state which right you're exercising

5. Include any relevant order numbers or dates

VERIFICATION:

We will verify your identity before responding to your request. We may ask for:

• Additional information about your account

• Government-issued ID

• Confirmation of recent purchases

TIMELINE:

We will respond within the timeframe required by applicable law (typically 30-45 days). If we deny your request, we will explain the reason.

APPEAL PROCESS:

If we deny your request, you may submit an appeal. We will reconsider the request and respond within 30 days.

8. EMAIL MARKETING

MARKETING EMAILS:

We may send you promotional emails about products, offers, and content (where permitted by law and your preferences).

Every marketing email will include:

• An unsubscribe link

• Our mailing address

• Clear identification that it's promotional content

UNSUBSCRIBING:

You can unsubscribe from marketing emails at any time by:

• Clicking the unsubscribe link in the email

• Emailing us at contact@oredium.com with "Unsubscribe" in the subject line

• Adjusting your preferences in your account

TRANSACTIONAL EMAILS:

We will continue to send transactional emails (order confirmations, shipping updates, password resets) even if you unsubscribe from marketing emails, as these are essential for your account.

COMPLIANCE:

All marketing emails comply with the CAN-SPAM Act and similar laws in other jurisdictions.

9. CHILDREN'S PRIVACY

The Site is not directed to children under 13, and we do not knowingly collect personal information from children under 13 (or under 16 in certain jurisdictions).

If we become aware that a child has provided us personal information:

1. We will delete that information promptly

2. We will not use it for any purpose

3. We may notify parents if required by law

If you believe a child has provided us information, contact us immediately at contact@oredium.com.

10. DATA SECURITY

We take data security seriously and use reasonable measures to protect your information:

TECHNICAL SAFEGUARDS:

• Encryption (SSL/TLS) for data in transit

• Secure databases and firewalls

• Regular security audits and updates

• Intrusion detection and prevention systems

ADMINISTRATIVE SAFEGUARDS:

• Employee training and confidentiality agreements

• Access controls and authentication

• Data minimization practices

PHYSICAL SAFEGUARDS:

• Secure facilities and access controls

• Environmental monitoring

LIMITATIONS:

No method of transmission or storage is completely secure. While we implement industry-standard security measures, we cannot guarantee absolute security. You use the Site at your own risk.

SECURITY BREACH NOTIFICATION:

If we experience a data breach affecting your personal information, we will notify you promptly as required by law, typically within 30 days.

11. DATA RETENTION

We retain your personal information only as long as necessary to:

• Fulfill the purposes described in this policy

• Comply with legal, tax, or regulatory obligations

• Resolve disputes or enforce agreements

• Protect our legal interests

RETENTION PERIODS:

• Order and transaction data: 7 years (for accounting/tax purposes)

• Account information: Until account deletion

• Marketing data: Until unsubscribe

• Cookies: As specified in cookie settings (typically 1-2 years)

• Support communications: 2 years after resolution

You may request deletion of your data at any time, subject to legal exceptions.

12. THIRD-PARTY LINKS & SERVICES

The Site may contain links to third-party websites and services. We are not responsible for:

• Their privacy practices

• Their content

• Their security

• Your interactions with them

We recommend reviewing their privacy policies before providing personal information.

13. CHANGES TO THIS POLICY

We may update this Privacy Policy at any time. Changes take effect immediately upon posting. The "Last updated" date will reflect any revisions.

Your continued use of the Site after any changes constitutes your acceptance of the revised policy. If you have concerns, please contact us.

14. CONTACT US

For any privacy questions, requests: contact@oredium.com

Email: contact@oredium.com

We typically respond to privacy inquiries within 10 business days. If you're not satisfied with our response, you may have the right to file a complaint with your local privacy authority or attorney general.