Privacy Policy
NOOD Privacy Policy
Effective date and last updated: October 1, 2026
Contents
- Notice at collection
- A plain-language summary
- Personal information we collect
- Why we collect it
- Who we disclose it to
- Cookies, pixels and tracking
- Your rights
- How long we keep it
- Security
- Children
- Changes
- Third-party advertising and analytics
- De-identified and aggregated information
- Global Privacy Control
- Third-party links and content
- Additional state notices
- Notice to Canadian residents
- Notice to UK, EEA and Swiss residents
- International transfers
- Contact
This Privacy Policy explains how Gate Six Holdings LLC, doing business as NOOD (“NOOD,” “we,” “us”) collects, uses, discloses and retains personal information when you visit lovenood.com, buy from us, contact us, or interact with our advertising and social media. It applies to visitors in the United States, Canada, the United Kingdom and the European Economic Area. Sections 18 and 19 set out additional rights for people in the UK, the EEA and Switzerland.
1. Notice at collection
We collect the categories of personal information listed in Section 3 below. We use them for the purposes in Section 4, retain them for the periods in Section 8, and disclose them to the categories of recipients in Section 5.
We share personal information for cross-context behavioral advertising. Under California law this is treated as “sharing,” and in some circumstances as a “sale,” even though we do not receive money for it. You can direct us to stop at any time, free of charge, with no effect on your prices or service:
- Enable a Global Privacy Control signal in your browser or extension. We treat a valid GPC signal as a request to opt out of sale and sharing for that browser, automatically, without any further action from you
- Decline advertising and analytics cookies in the cookie banner shown on your first visit
- Email hello@lovenood.com with “Do Not Sell or Share” in the subject line
We do not use or disclose sensitive personal information for purposes that would require us to offer a right to limit under California Civil Code Section 1798.121. We do not collect precise geolocation, government identification numbers, biometric data, health data, or the contents of your communications. Account login credentials are used only to give you access to your own account, which is a permitted purpose.
We do not knowingly sell or share the personal information of consumers under 16.
2. A plain-language summary
- We collect what you give us at checkout, what your browser sends when you visit, and what our advertising and analytics partners observe about your visit
- We use it to fulfil orders, run the site, provide support, prevent fraud, and advertise to you
- Advertising and analytics tags do not load until you have had the chance to decline, and we honor browser opt-out signals
- You can see, correct, delete, or export your information, and you can tell us to stop sharing it for advertising
- Exercising any of these rights never changes what you pay or what you receive
3. Personal information we collect
In the 12 months before the date above, we collected the following categories. Statutory category labels are from California Civil Code Section 1798.140(v).
| Category | Examples | Source | Sold or shared? |
|---|---|---|---|
| Identifiers | Name, email, postal address, phone, IP address, cookie and device identifiers, order number | You; your browser; our advertising and analytics partners | Shared for advertising |
| Customer records (Section 1798.80) | Billing and shipping address, payment card last four digits and expiry | You; our payment processor | No |
| Commercial information | Products viewed, cart contents, purchase and return history, size and shade selected | You; your activity on our site | Shared for advertising |
| Internet or network activity | Pages viewed, referring URL, session duration, clicks, scroll depth, browser type, operating system, device type | Your browser; our analytics and advertising tags | Shared for advertising |
| Geolocation data | Country, region and city inferred from IP address. We do not collect precise geolocation from your device | Your browser; IP geolocation services | Shared for advertising at country or region level only |
| Audio, electronic and visual information | Customer service recordings and chat transcripts; photos or video you submit for reviews or user-generated content | You | No |
| Inferences | Product and category preferences, likely size, estimated lifetime value, advertising audience segments | Derived from the above | Shared for advertising |
We do not collect government identification numbers, financial account numbers, precise geolocation, biometric data, genetic data, health data, union membership, religious or philosophical beliefs, racial or ethnic origin, sexual orientation, immigration status, or the contents of your mail, email or text messages.
Payment card numbers. Full payment card numbers are collected and processed directly by Shopify Payments and are never stored on our systems.
4. Why we collect it
| Purpose | Examples |
|---|---|
| Fulfilling your order | Taking payment, shipping, returns, exchanges, order notifications |
| Operating the site | Loading pages, keeping your cart, authentication, load balancing, security |
| Customer support | Answering questions on fit, shade, sizing and orders |
| Fraud and security | Detecting fraudulent orders, chargeback defense, protecting against abuse |
| Analytics | Understanding which pages and products perform, measuring site changes |
| Marketing you asked for | Sending email and SMS where you have opted in, and only until you opt out |
| Advertising | Measuring our advertising, building audiences, and showing you relevant ads on other sites and apps |
| Legal and compliance | Tax, accounting, consumer protection, responding to lawful requests, establishing or defending legal claims |
We do not use your personal information for any purpose that is incompatible with the purpose it was collected for, and we do not collect more than we need for those purposes.
5. Who we disclose it to
We disclose personal information to the categories of recipients below. We do not disclose personal information to anyone who is not listed here.
| Recipient category | What they receive | Basis |
|---|---|---|
| E-commerce platform and hosting | Order and account data | Service provider |
| Payment processors | Payment and billing data | Service provider |
| Shipping and fulfilment | Name, address, contact, order contents | Service provider |
| Email and SMS platform | Email, phone, order and browsing data for subscribers | Service provider |
| Analytics providers | Site activity, device and identifier data | Service provider |
| Advertising platforms and ad technology | Identifiers, device data, site activity, inferences | Sharing for cross-context behavioral advertising |
| Customer support and reviews platforms | Contact details, order history, submitted content | Service provider |
| Fraud prevention | Order, device and identifier data | Service provider |
| Professional advisers, insurers, auditors | As needed | Legal basis |
| Acquirers in a merger or asset sale | As needed, subject to this policy | Business transfer |
| Law enforcement and regulators | As legally required | Legal obligation |
The named vendors in each category are listed in the table in Section 6.
Our service providers are contractually restricted to processing personal information only on our instructions and only for the purpose we engaged them for. They may not sell it, share it, or combine it with information from other sources, except as permitted by California Civil Code Section 1798.140(ag)(1).
We do not sell personal information for money. We do share it for cross-context behavioral advertising as described above, which California treats the same way for opt-out purposes.
6. Cookies, pixels and tracking
We use cookies, pixels, tags, SDKs and similar technologies. We group them into four categories:
| Category | What it does | Loads before consent? |
|---|---|---|
| Strictly necessary | Cart, checkout, authentication, security, load balancing, your cookie choices | Yes. These cannot be disabled |
| Functional | Remembering preferences, recently viewed items, support chat | Only with consent |
| Analytics | Measuring traffic and site performance | Only with consent |
| Advertising | Audience building, retargeting, conversion measurement | Only with consent |
Functional, analytics and advertising technologies do not load until you have been given the opportunity to accept or decline. In the EU, the UK and other opt-in jurisdictions, they do not load unless you accept. In the United States, they load unless you opt out, and we stop immediately when you do.
You can change your choices at any time by clearing your browser cookies for this site, which brings the banner back, or by emailing hello@lovenood.com. We honor Global Privacy Control signals automatically.
The technologies we use, and the company behind each one, are listed below. We review this list every three months.
| Technology | Company | What it does | Category |
|---|---|---|---|
| Shopify | Shopify Inc. | Runs the store, cart, checkout and payment | Strictly necessary |
| Consent manager | Pandectes | Records and applies your cookie choices | Strictly necessary |
| Google Analytics 4 | Google LLC | Measures traffic and site performance | Analytics |
| Google Ads and DoubleClick | Google LLC | Measures our advertising and builds audiences | Advertising |
| Meta Pixel | Meta Platforms, Inc. | Measures our advertising and builds audiences | Advertising |
| Pinterest Tag | Pinterest, Inc. | Measures our advertising and builds audiences | Advertising |
| Klaviyo | Klaviyo, Inc. | Email and SMS marketing, and on-site behaviour for subscribers | Functional and advertising |
| Yotpo | Yotpo Ltd. | Collects and displays product reviews | Functional |
| Videowise | Videowise Ltd. | Shoppable video player on product pages | Functional |
| Instafeed | Mintt Studio | Displays our Instagram feed | Functional |
| Posty | Posty | On-site messaging and notifications | Functional |
| Klickly | Klickly, Inc. | Affiliate and partner advertising attribution | Advertising |
| ShopMy | ShopMy Media, Inc. | Affiliate link and commission tracking | Advertising |
| AppLovin | AppLovin Corporation | Advertising audience matching and measurement | Advertising |
| AddShoppers | AddShoppers, Inc. | Cross-site audience matching for advertising | Advertising |
| Ahrefs Analytics | Ahrefs Pte. Ltd. | Measures search traffic to the site | Analytics |
This table replaces the separate cookie policy page. There is nothing to click through to.
Do Not Track. There is no accepted industry standard for DNT headers and we do not respond to them. We do honor Global Privacy Control, which is a recognized opt-out preference signal under California law.
7. Your rights
If you are in California
Under the California Consumer Privacy Act as amended by the CPRA, you have the right to:
- Know the categories and specific pieces of personal information we have collected, the sources, the purposes, and the categories of recipients
- Delete your marketing profile and contact details. We cannot delete order and transaction records, because tax and accounting law requires us to keep them for 7 years. California Civil Code Section 1798.105(d) permits this. We will tell you exactly what we deleted and what we kept
- Correct inaccurate personal information
- Opt out of sale and sharing, including through a Global Privacy Control signal
- Limit the use of sensitive personal information, where applicable
- Non-discrimination. We will never deny you goods or services, charge you a different price, or provide a different quality of service because you exercised a privacy right
You may make a request up to twice in a 12-month period, free of charge.
If you are in Virginia, Colorado, Connecticut, Utah, Texas, Oregon, Montana, or another state with a comprehensive privacy law
You have substantially the same rights to access, correct, delete, obtain a portable copy, and opt out of targeted advertising, sale and profiling. If we decline your request, you may appeal by replying to our decision or writing to hello@lovenood.com with “Appeal” in the subject line. We will respond to an appeal within 45 days, or 60 days if you are in Colorado and will tell you how to contact your state Attorney General if you disagree.
How to exercise any of these rights
Email hello@lovenood.com with “Privacy request” in the subject line. That is our designated method and the only one you need.
We confirm receipt within 10 business days, which California law requires. We then answer within 45 calendar days. If your request is complex we may take a further 45 days, and we will tell you if we need them.
Verification. To protect you, we verify your identity before acting. For most requests we match the email address or order details you provide against our records. For requests for specific pieces of personal information we require additional verification. We use the information you give us for verification only, and we delete it afterwards.
Authorized agents. You may use an authorized agent. We require written permission signed by you, and we may ask you to verify your identity with us directly. An agent holding a valid power of attorney under California Probate Code Section 4000 and following does not need to provide additional authorization.
8. How long we keep it
We keep personal information only as long as we need it for the purpose we collected it, then delete or de-identify it.
| Information | Retention period |
|---|---|
| Order and transaction records | 7 years from the order date, for tax and accounting |
| Account information | For as long as your account is open. We do not delete accounts automatically. Email us to have yours closed |
| Marketing contact details | Until you unsubscribe, then 36 months to honor your suppression |
| Customer service records | 36 months from the last contact |
| Website and advertising analytics | 14 months from collection |
| Cookie and consent records | 24 months, or until you change your choice |
| Fraud prevention records | 7 years |
Where a longer period is required by law, or where information is needed to establish or defend a legal claim, we keep it for that period and no longer.
9. Security
We use administrative, technical and physical safeguards appropriate to the sensitivity of the information, including encryption in transit and at rest, access controls on a need-to-know basis, and vendor security review. No system is completely secure, and we cannot guarantee absolute security.
10. Children
Our site is not directed to children under 13 and we do not knowingly collect personal information from them. We do not knowingly sell or share the personal information of anyone under 16. If you believe a child has provided us personal information, contact hello@lovenood.com and we will delete it.
11. Changes
We review this policy at least every 12 months. We will post any changes here and update the “Last updated” date. If we make a material change to how we use personal information we already hold, we will give notice before the change takes effect.
12. Third-party advertising and analytics
We work with advertising and analytics companies that use cookies, pixels and similar technologies to collect information about your activity on our site and on other sites and apps over time. They use it to measure our advertising, build audiences, and show you advertising that is more relevant to you.
This is the activity California treats as “sharing” for cross-context behavioral advertising. You can stop it in any of these ways:
- The cookie banner shown on your first visit, where you can decline advertising and analytics
- A Global Privacy Control signal sent by your browser, which we honor automatically
- Email to hello@lovenood.com with “Do Not Sell or Share” in the subject line
Industry opt-out tools are also available. These are operated by third parties, not by us, and they cover only participating companies:
- Network Advertising Initiative: optout.networkadvertising.org
- Digital Advertising Alliance: optout.aboutads.info
- Digital Advertising Alliance of Canada: youradchoices.ca
- European Interactive Digital Advertising Alliance: youronlinechoices.eu
- Google Analytics opt-out browser add-on: tools.google.com/dlpage/gaoptout
These tools are cookie-based. Clearing your cookies, changing browsers or changing devices will usually undo them. Opting out does not mean you stop seeing advertising. It means the advertising you see is no longer tailored using information collected about your activity.
On mobile devices, you can also use the “Limit Ad Tracking” setting on iOS or “Opt out of Ads Personalization” on Android.
13. De-identified and aggregated information
We may de-identify personal information, or aggregate it with information about other people, so that it no longer identifies you. Examples include converting an email address into a hashed value, or reporting on how many visitors viewed a product rather than which visitors.
Where we hold de-identified information, we commit that we will:
- Maintain it in de-identified form and take reasonable measures to prevent re-identification
- Not attempt to re-identify it, except where permitted by law to test whether our de-identification process works
- Contractually require anyone we give it to do the same
If we combine de-identified or aggregated information with information that does identify you, we treat the combined result as personal information under this policy.
14. Global Privacy Control
Global Privacy Control, or GPC, is a setting you can turn on in some browsers and browser extensions. It sends an automatic signal to every website you visit saying that you do not want your personal information sold or shared.
We honor GPC. When your browser sends a valid GPC signal, we treat it as a request to opt out of sale and sharing for that browser and device. You do not need to click anything, fill in a form, or give us your name. The opt-out applies from the moment we receive the signal.
You can learn how to enable GPC at globalprivacycontrol.org.
Two things to know about how it works:
- GPC is tied to the browser and device you enable it on. If you use a different browser, a different device, or private browsing, you will need to enable it there too
- If you are signed in to an account with us, we apply your opt-out to that account as well, so it follows you across devices
GPC is a different thing from a Do Not Track header. We honor GPC. We do not respond to Do Not Track, because no common standard for it was ever agreed.
15. Third-party links and content
Our site contains links to, and content from, sites and services we do not control. This includes social media platforms, payment providers, review platforms and advertisers.
When you follow a link to another site, or interact with embedded third-party content, that company collects information about you under its own privacy policy, not this one. Embedded content can collect information about you even if you do not click it.
We are not responsible for the privacy practices of these companies. We encourage you to read the privacy policy of any site you visit.
16. Additional state notices
The rights in Section 7 apply wherever your state law provides them. These notices cover points specific to particular states.
Nevada
Nevada law gives residents the right to tell a website operator not to sell certain covered information for monetary consideration to a person who will license or sell it onward. We do not sell covered information in the way Nevada defines it. If you are a Nevada resident and wish to submit a request anyway, email hello@lovenood.com with “Nevada opt-out” in the subject line. We will verify your request and respond within 60 days.
Maryland
For Maryland residents, we collect, process and share only the personal data that is reasonably necessary for the purposes described in this policy. We do not sell sensitive personal data, and we do not sell the personal data of any consumer we know to be under 18.
Nebraska
Nebraska residents have the rights described in Section 7, including the right to opt out of targeted advertising and the sale of personal data, and the right to appeal a decision we make on a request.
Texas
Texas residents have the rights described in Section 7, and may appeal a decision on a request as described there. We do not sell sensitive personal data or biometric personal data, so the specific notices Texas requires of businesses that do are not applicable to us.
17. Notice to Canadian residents
If you are in Canada, we handle your personal information in line with the Personal Information Protection and Electronic Documents Act and applicable provincial law.
- We collect, use and disclose personal information for the purposes described in this policy, with your consent or as otherwise permitted by law. Depending on the sensitivity of the information and your reasonable expectations, consent may be express or implied
- You may withdraw your consent at any time, subject to legal and contractual limits and reasonable notice. Withdrawing consent may mean we can no longer provide some services to you
- You may request access to the personal information we hold about you, and ask us to correct it if it is inaccurate
- Your personal information may be stored and processed in the United States, and may be accessible to courts, law enforcement and national security authorities there
To exercise a right or raise a concern, email hello@lovenood.com. If you are not satisfied with our response, you may contact the Office of the Privacy Commissioner of Canada.
18. Notice to UK, EEA and Swiss residents
This section applies if you are in the United Kingdom, the European Economic Area or Switzerland, and it adds to the rest of this policy. Gate Six Holdings LLC, doing business as NOOD, is the controller of your personal data.
Our lawful bases for using your data are set out below.
| What we do | Lawful basis |
|---|---|
| Take and fulfil your order | Performance of a contract, Article 6(1)(b) |
| Respond to your enquiries | Performance of a contract, or legitimate interests |
| Keep records for tax and accounting | Legal obligation, Article 6(1)(c) |
| Prevent fraud and keep the site secure | Legitimate interests, Article 6(1)(f) |
| Place non-essential cookies and similar technologies | Your consent, Article 6(1)(a) |
| Send marketing email and SMS | Your consent, withdrawable at any time |
| Advertising and analytics | Your consent |
| Improve our products and our site | Legitimate interests |
Where we rely on legitimate interests, we have assessed that our interests do not override your rights. You can ask us for details of that assessment.
Your rights. You have the right to access your personal data, to have it corrected or erased, to restrict or object to how we process it, to receive a portable copy, and to withdraw consent at any time without affecting processing already carried out. You have the right to object to direct marketing at any time, which we will always honour.
How to exercise them. Email hello@lovenood.com. We respond within one month, extendable by two further months for complex requests, and we will tell you if we extend.
Complaints. You may complain to your local supervisory authority. In the UK that is the Information Commissioner's Office. In Switzerland it is the Federal Data Protection and Information Commissioner.
Automated decision-making. We do not make decisions producing legal or similarly significant effects about you by automated means alone.
19. International transfers
We are based in the United States and our service providers are located in the United States and in other countries. Your personal information will be transferred to, stored in and processed in the United States, where data protection law may differ from the law in your own country.
Where we transfer personal data out of the UK, the EEA or Switzerland, we rely on an appropriate safeguard, ordinarily the European Commission's Standard Contractual Clauses together with the UK International Data Transfer Addendum. You can request a copy of the safeguard we rely on by emailing hello@lovenood.com.
We do not rely on your consent alone as the basis for an international transfer.
20. Contact
Gate Six Holdings LLC, doing business as NOOD For the attention of: Privacy
Email: hello@lovenood.com
Ready when you are
Explore the solutions loved by 2,000,000+ NOODists.
Shop Best-Sellers →