Privacy policy

This Privacy Policy explains what personal information NYC ERA 8. ("we", "us") collects about visitors and customers of NYCERA8 (the "Shop"), how we use and share it, and the choices you have. It is intended to comply with U.S. state privacy laws applicable to our business, including the California Consumer Privacy Act of 2018 (Cal. Civ. Code § 1798.100 et seq.) as amended by the California Privacy Rights Act ("CCPA / CPRA"), and similar state laws in Virginia (VCDPA), Colorado (CPA), Connecticut (CTDPA), Utah (UCPA), and other states with comparable rights.

1. Who we are

NYC ERA 8.
NEW YORK NY
USA
Email: [email protected]

For privacy requests, the channels above are also the official contact points.

2. Categories of personal information we collect

Identifiers: name, email address, postal address, phone number, account user name.
Commercial information: products you bought or viewed, your order history, returns history.
Internet / device information: IP address, browser user-agent, device type, pages viewed, referrer, time stamps. Collected via server logs and cookies.
Payment information: the payment method you selected and a tokenised reference returned by our payment processor. We do not store full card numbers on our systems — see Section 4.
Communications: the content of emails, contact-form messages and chat conversations you send us.
Inferences drawn from the above, e.g. product preferences to surface relevant items.

We do NOT knowingly collect "sensitive personal information" within the meaning of CCPA § 1798.140(ae) or comparable state-law definitions. If you provide such information voluntarily (e.g. in a support message), we will handle it with extra care and delete it when no longer needed.

3. How we use it

To process, ship and invoice your orders.
To create and manage your account.
To respond to your messages and provide customer support.
To detect, prevent and investigate fraud, security incidents and abuse.
To comply with our tax, accounting and other legal obligations.
With your consent, to send marketing emails about products and offers; you can unsubscribe at any time via the link in every marketing email.
With your consent, to set analytics and advertising cookies to measure and improve the Shop and our marketing.

4. Payments

Payments are processed by independent payment service providers (e.g. Stripe, PayPal, those shown at checkout). We do not see or store your full card number or CVV; we receive only a transaction result and a tokenised payment-method reference. Each payment provider has its own privacy notice that applies to its processing of your data.

5. Sharing

We share personal information only as needed to run the Shop and as described below. Each service provider is bound by contractual confidentiality and security obligations.

Service providers: hosting and infrastructure, payment processors, shipping carriers (for physical goods), email senders, customer-support tooling, analytics (with your consent).
Tax authorities and other regulators when required by law.
Legal: to comply with a subpoena, court order or other legal process; to protect our or others' rights, property or safety; to investigate or prevent fraud or abuse.
Business transfers: in connection with a merger, acquisition, financing or sale of all or part of our assets, in which case personal information may be transferred to the successor entity. We will notify you of any change in ownership that materially affects the use of your personal information.

We do not "sell" or "share" personal information for cross-context behavioural advertising within the meaning of CCPA § 1798.140(ad)(1) or (ah)(1), unless you have explicitly opted in via a third-party advertising cookie in the cookie banner.

6. Cookies and tracking

We use cookies and similar technologies that are strictly necessary for the Shop to function (cart, session, security). Other cookies — analytics, marketing, embedded content — are set only with your consent (e.g. through the cookie banner). We honour the Global Privacy Control (GPC) signal as a valid opt-out request to the extent required by applicable state law.

7. Your privacy rights

Depending on your state of residence, you may have one or more of the following rights:

Right to know / access — what personal information we have collected, the sources, purposes, and the categories of recipients.
Right to delete — request deletion of personal information we have collected from you, subject to legal-retention exceptions.
Right to correct inaccurate personal information.
Right to data portability — receive a copy in a structured, commonly used format.
Right to opt out of "sale" or "sharing" for cross-context behavioural advertising (CCPA), of "targeted advertising", or of certain "profiling" (VCDPA, CPA, CTDPA).
Right to limit use of sensitive personal information (CCPA).
Right to non-discrimination — we will not deny goods, charge different prices or provide a lesser level of service because you exercised a privacy right.
Right to appeal our decision on your request (where required by state law, e.g. VCDPA, CPA, CTDPA).

To exercise any of these rights, email [email protected]. We respond within the time required by applicable law (typically 45 days, extendable by another 45 days in complex cases). We may need to verify your identity before fulfilling a request. An authorised agent may make a request on your behalf with a written, signed authorisation that we may verify.

8. Retention

We keep personal information for as long as necessary for the purposes set out above, subject to longer retention for tax / accounting compliance (commonly up to 7 years in the U.S.), to defend or bring legal claims, or where otherwise required by law.

9. Security

We use reasonable administrative, technical and physical safeguards designed to protect personal information against loss, theft and unauthorised access, use, modification or disclosure. No internet transmission or electronic storage is 100% secure; in the unlikely event of a breach affecting your personal information, we will notify you and the appropriate regulators as required by law.

10. Children

The Shop is not directed at children under 13, and we do not knowingly collect personal information from children under 13 (see the Children's Online Privacy Protection Act, 15 U.S.C. §§ 6501–6506). If you are a parent or guardian and believe we have collected information from a child under 13, please contact us at [email protected] and we will delete it.

11. International transfers

If you access the Shop from outside the United States, you understand that your information may be transferred to, stored, and processed in the United States, which may have different data-protection laws than your country of residence.

12. Changes to this policy

We may update this policy from time to time. The "Last updated" date below indicates when it was most recently revised. Material changes will be highlighted on the Shop, or notified by email where we hold an active marketing-consent record for you.

Last updated: 2026-08-28