Privacy Policy

Effective date August 19, 2026

1What this notice covers

This notice explains what Nefense Professional Corporation does with personal information when you visit our website, place an order, create an account, or write to us. Nefense, we, us and our mean that company.

We are a retailer. We sell consumer hygiene products, we do not provide health care, and we do not hold medical records.

One thing needs its own document. Some state laws define health data so broadly that it can reach what a purchase implies about a person, even at a store like ours. Section 7 explains that, and the Consumer Health Data Privacy Notice covers it in full.

2What we collect

Only what running a store actually requires:

• Contact and delivery details. Your name, email address, phone number if you give us one, and the billing and delivery addresses on your order.
• Order and payment details. What you bought, when, for how much, the discount or promotion applied, the delivery and tracking status, and the returns, replacements and refunds on the order. Your card details are entered on our checkout page and handled by our payment processor. We do not store your full card number. We see the last four digits, the card brand and whether the payment succeeded.
• Account details. Your sign-in email, a securely stored form of your password, your saved addresses, your order history, and any product plan you have set up.
• Messages you send us. Whatever you write to us: emails, review text, product questions, and the notes we make while helping you.
• How you use the site. The pages you look at, the products you view, the steps of checkout you reach, your approximate location from your network address, your device type and your browser.

We do not ask you for a Social Security number, a government identification number, biometric information, or precise location from your device. If a form on our site ever asks you for something in that list, it is a mistake, and you should tell us.

3Where it comes from

Almost all of it comes from you, when you type it into a form, place an order, or write to us. The rest comes from three places, and only these three.

• Your device. Your browser and device send technical information automatically, the way they do on any website.
• Companies that carry out part of your order. Our payment processor and our carriers give us what we need to take your payment and track your delivery. We never receive or store your full card number.
• A payment service you chose. If you paid through a wallet or a payment service, that service passes us the name and address it holds for you so we can ship the order.

We do not buy personal information about you from data brokers, and we do not build profiles from bought-in lists.

4Why we use it, and on what basis

Each use below is either something you asked us to do, something the law requires of us, or something a reasonable person would expect a store to do. Where the law says we need your consent first, we ask for it and we take no for an answer.

• To complete your order. To take your order, charge you the right amount, ship it, and tell you where it is.
• To support you. To handle a question, a return, a replacement, a refund or a warranty claim.
• To run your account. To create and secure your account, and to let you sign in.
• Because the law requires it. To keep tax and accounting records, and to meet a legal or regulatory obligation.
• To prevent fraud and abuse. To spot fraudulent orders, payment abuse, and attempts to break into accounts.
• To reach you about safety. To reach you about a product safety issue or a recall. We will contact you about safety even if you have opted out of marketing, because the alternative is leaving you uninformed about something that could hurt you.
• To improve the store. To understand which parts of the store work and which do not.
• To advertise the store, if you allow it. To measure whether our advertising works and to reach people who might want what we sell, if you allow it. Never using what you bought from us.
• To send you marketing, if you want it. To send you marketing email if you asked for it. You can tell us to stop at any time, and we stop.

5Who we share it with

We share personal information with companies that do a specific piece of work for us, and with nobody else except in the two situations at the end of this section. Each one gets only what that piece of work needs.

• Payment processing. Takes your payment and handles your card details.
• Shipping and delivery. Prints the label, carries the parcel, and confirms delivery.
• Email delivery. Sends the order confirmations, shipping notices and, if you asked for them, marketing emails.
• Customer support tooling. Runs the tools our support team uses to answer you and keep track of your question.
• Fraud prevention. Helps us spot a fraudulent order or a stolen card before it costs you or us money.
• Professional advisers. Our lawyers and accountants, when they need it to advise us.
• Advertising and analytics. Google and Meta, if you allow advertising. They receive a record of your visit and can connect it to what they already know about you. They never receive what you bought from us, for the reason in section 6.

We require every one of them, in writing, to use your information only for the work we hired them to do, to protect it, and not to keep it longer than that work needs.

The two other situations:

• When the law requires it. If a law, a court order or a lawful government request requires it. We tell you when we are allowed to tell you, and we push back on a request that looks overbroad.
• If the business changes hands. If our business is bought or merged, customer information moves with it. The buyer is bound by this notice for information collected under it, and we will tell you before anything about your information changes.

6What we do not do with your information

These are commitments, not aspirations.

• We do not sell your personal information for money.
• We do not rent, trade or otherwise hand your details to another company for that company's own marketing.
• We do not use what you bought to build or seed an advertising audience, and we do not let an advertising company infer anything about your health from it. Every product we sell is a nasal or airway product, so this is the commitment that matters most here, and it holds even when you have allowed advertising.
• We do not use a session recorder, and nothing replays your visit or records your mouse movements.

One thing we do, stated plainly rather than buried. If you allow advertising, we share your information for advertising, which state privacy law treats as sharing and in some states as a sale. It is switched off unless you turn it on, and Privacy choices in the footer is where you change your mind.

If any of this changes, we will say so in this notice before it takes effect, and where the law requires your agreement first, we will ask for it. The Cookie and Tracking Notice covers what our site stores on your device.

7Health information, and the separate notice

We are a retailer and our products are hygiene and comfort products, not treatments. We do not diagnose anything, we do not ask you about a condition, and we do not want you to tell us about one.

Even so, several state privacy laws define health data broadly, and some of them reach information that is merely inferred from something that is not health data at all. Buying a nasal or airway product is an ordinary purchase, but a broad definition can treat it as supporting an inference about someone's breathing or their respiratory health. We would rather handle that carefully than argue about whether we have to, so we treat purchase and browsing information in those categories as sensitive: we keep it inside the company, we do not use it for advertising, and we do not share it with an advertising platform.

The Consumer Health Data Privacy Notice sets out exactly what falls into those categories, what we do with it, and the rights that go with it, including the right to withdraw consent.

8Where your information is kept

We store and process personal information in the United States. If that ever changes, we will update this notice before it does and explain what protections apply to the transfer.

9How long we keep it, and why

We keep information for as long as we need it for the reason we collected it, then we get rid of it. The periods that matter to a shopper:

10How we protect it

We protect your information in the ways you would expect a careful store to. Traffic between your browser and our site is encrypted, and the information we store is encrypted as well. Access is limited to the people who need it to do their job, and we keep records of who did what. Payment card details go straight to our payment processor, so a full card number is not something we hold.

No company can promise that nothing will ever go wrong. If a breach happens that affects you, we will tell you and the authorities within the time the law requires, and we will tell you what to do about it rather than only what happened.

11Children

Our site is not directed to children under 13 and we do not knowingly collect personal information from them. An adult may buy a product for a child; when that happens, the account and the order are the adult's, and we do not ask for information about the child.

If you believe a child has given us personal information, write to support@nefense.com and we will delete it.

12Your privacy rights

Several states give their residents rights over personal information. We honor the following for anyone who asks us, wherever you live, because operating two standards would be worse for everyone.

• Know. Ask whether we hold information about you, and what categories we hold.
• Access and take with you. Get a copy of the information we hold about you, in a form you can use.
• Correct. Have something we hold about you fixed if it is wrong.
• Delete. Ask us to delete what we hold, subject to the records we are legally required to keep, which are listed in section 9.
• Opt out. Opt out of the sale or sharing of personal information, and of profiling that produces a legal or similarly significant effect. The advertising choice on our consent banner is where you do it, Privacy choices in the footer reopens it on any page, and it starts switched off. We also act on a Global Privacy Control signal.
• Appeal. Ask us to look again if we say no. Section 13 explains how.

We will not discriminate against you for exercising any of these rights. Your prices, your delivery, your returns and the help you get from us do not change because you asked us a privacy question.

13How to make a request

There is no self-service privacy portal on this site. You make a request by writing to us, and a person handles it.

1. Email support@nefense.com with the subject line "Privacy request", or write to our business address below.
2. Tell us what you want: a copy, a correction, a deletion, or an opt-out. Give us the email address you used on your order or your account so we can find you.
3. We may ask you one or two questions to be sure it is really you. We ask for the least we can, and we do not use what you send for verification for anything else.

We answer within 45 days. If a request is complicated and we need one more 45 day period, we will tell you before the first one runs out and say why.

You can appeal. If we refuse a request, or you think we handled it badly, reply to our answer and say you are appealing. Someone who was not involved the first time will look at it again and write back with the decision and the reason for it.

Someone you authorize may make a request for you. Send it from your own email address confirming who is acting for you, or have them send us written proof that you authorized them.

14Global Privacy Control and browser signals

Some browsers and extensions can send a Global Privacy Control signal, which tells a site not to sell or share your personal information. We do not sell or share personal information at all, so there is nothing for that signal to turn off here.

We are saying that plainly rather than claiming to detect the signal, because we do not want you to rely on something we have not built. If we ever start any activity a Global Privacy Control signal is meant to stop, we will recognize the signal and honor it, and we will say so in this notice first.

15If you are not happy with our answer

Tell us first: write to support@nefense.com and we will look at it again. We would rather fix it than have you chase it.

You can also complain to the attorney general of your state, or to the Federal Trade Commission. Nothing in this notice, and nothing in any agreement with us, takes away your right to do that, and we will not treat a complaint as a reason to treat you any differently.

16Changes to this document

We update this document when what we do changes, when the law changes, or when we find wording that is unclear. Every version is kept, and each one records the date it took effect.

How you find out depends on how much changed. A correction that does not change your rights is simply published. A change that does affect your rights is announced before it takes effect. A change that materially alters what you agreed to is not applied to you by silence: we ask you to accept it, and continuing to browse the site is not treated as acceptance.

If you want a copy of an earlier version, or want to know what changed and when, write to support@nefense.com and we will send it to you.

17Contact

17.1 Who to write to

One mailbox handles everything, including privacy requests. Put the reason in the subject line and it reaches the right person faster.

For a privacy request, use the subject line "Privacy request". For anything about consumer health data specifically, see the Consumer Health Data Privacy Notice, which uses the same address.