Privacy Policy

Effective Date: September 2, 2026
Last Updated: September 2, 2026

1. Introduction

Northaven ("Northaven," "we," "us," or "our") respects your privacy and is committed to protecting the personal information you share with us. This Privacy Policy explains how we collect, use, disclose, retain, and safeguard your information when you visit our online store, place an order, contact our customer service team, or otherwise interact with us (collectively, the "Services").

Our store is operated by:

RONDINELLI PATRIX SILVA TOLEDO
11 Fernando Maurício Street
Lisbon, Lisbon 1950-447
Portugal
Email: support@northavenwatches.com

By accessing or using our Services, you acknowledge that you have read and understood this Privacy Policy. If you do not agree with our practices, please do not use the Services.

2. Scope of This Policy

This Privacy Policy applies to personal information we collect through our website, our customer support channels, our marketing communications, and our order fulfillment operations. It does not apply to third-party websites, payment providers, or services that we do not own or control, each of which maintains its own privacy practices.

Our Services are directed primarily to customers located in the United States. If you access our Services from outside the United States, please review Section 13 (International Data Transfers).

3. Information We Collect

3.1 Information You Provide Directly

• Identifiers and contact details: first and last name, billing address, shipping address, email address, and telephone number.
• Order and transaction information: products purchased, order value, order number, currency, order history, gift messages, and delivery instructions.
• Payment information: payment card type, the last four digits of your card, billing postal code, and transaction authorization data. We do not store full payment card numbers or card security codes on our systems; payment details are collected and processed directly by our PCI-DSS compliant payment processors.
• Account information: if you create an account, your login credentials and saved preferences.
• Customer service communications: the content of emails, contact form submissions, chat messages, warranty inquiries, and return or exchange requests, including any attachments or images you send us.
• Marketing preferences: your consent to receive email or SMS marketing, and your subsequent opt-out choices.
• User-generated content: product reviews, ratings, photographs, and testimonials you choose to submit.

3.2 Information Collected Automatically

When you visit our store, we and our service providers automatically collect certain information through cookies, pixels, tags, software development kits, and similar technologies:

• IP address and approximate geographic location derived from it (typically country, state, and city level).
• Device and browser type, operating system, screen resolution, language settings, and device identifiers.
• Referring and exit URLs, pages and products viewed, time spent on pages, scroll and click behavior, search terms entered on our site, and cart activity.
• Date and time stamps of your visits, session identifiers, and error logs.

3.3 Information From Third Parties

• Payment processors and fraud-prevention providers, who supply transaction outcomes, risk scores, and chargeback information.
• Shipping carriers and logistics partners, who provide tracking status, delivery confirmation, and address validation results.
• Analytics and advertising partners, who provide aggregated audience insights and campaign attribution data.
• Social media platforms, if you interact with our pages or click our advertisements, subject to the settings you have chosen on those platforms.

3.4 Sensitive Personal Information

We do not intentionally collect government identification numbers, financial account credentials, precise geolocation, health information, biometric data, racial or ethnic origin, religious beliefs, or information about sexual orientation. We ask that you do not send such information to us. Where payment card details are treated as sensitive personal information under applicable law, we use them solely to process your transaction, prevent fraud, and comply with legal obligations.

4. Categories of Personal Information Collected (California Disclosure)

The table below summarizes the categories of personal information we have collected in the preceding twelve (12) months, as those categories are defined under the California Consumer Privacy Act, as amended.

Category	Examples	Collected	Disclosed for a Business Purpose
A. Identifiers	Name, postal address, email address, phone number, IP address, unique online identifiers, account name	Yes	Yes
B. Customer records information (Cal. Civ. Code § 1798.80)	Name, address, telephone number, payment card information	Yes	Yes
C. Protected classification characteristics	Age, gender, national origin	No	No
D. Commercial information	Products purchased or considered, order history, purchasing tendencies	Yes	Yes
E. Biometric information	Fingerprints, faceprints, voiceprints	No	No
F. Internet or network activity	Browsing history on our site, search history, interaction with advertisements	Yes	Yes
G. Geolocation data	Approximate location derived from IP address	Yes	Yes
H. Sensory data	Audio, electronic, or visual information such as customer service recordings or submitted photos	Yes (limited)	Yes
I. Professional or employment information	Job title, employer	No	No
J. Education information	Records covered by FERPA	No	No
K. Inferences	Preference and interest profiles used to personalize offers	Yes	Yes
L. Sensitive personal information	Payment card number in combination with a security code	Yes (limited, for transactions only)	Yes (limited)

5. How We Use Your Information

We use personal information for the following business and commercial purposes:

• Order fulfillment: to process, verify, package, ship, and deliver your order; to communicate order confirmations, shipping notifications, and tracking updates; and to manage returns, exchanges, cancellations, and warranty claims.
• Customer service: to respond to your inquiries, resolve complaints, and provide support before and after purchase.
• Payment and fraud prevention: to authorize and settle transactions, verify billing information, detect and investigate fraudulent orders, prevent chargebacks, and protect against unauthorized use of payment instruments.
• Account management: to create and maintain your account and authenticate your access.
• Marketing and promotions: to send newsletters, product announcements, promotional offers, abandoned-cart reminders, and loyalty communications where permitted by law or where you have consented.
• Personalization: to recommend products, remember your preferences, and tailor content and advertising to your interests.
• Analytics and improvement: to measure site performance, understand how customers use our Services, test features, and improve our product assortment and user experience.
• Security and integrity: to protect our Services, our customers, and our business against security incidents, malicious activity, and abuse.
• Legal compliance: to comply with applicable laws, tax and customs requirements, export and import regulations, anti-money-laundering obligations, court orders, and lawful requests from public authorities; and to establish, exercise, or defend legal claims.

We do not use your personal information for automated decision-making that produces legal or similarly significant effects concerning you.

6. Legal Bases for Processing

Where required by applicable law, we process personal information on the following legal bases: performance of a contract with you (order fulfillment and customer service); our legitimate interests (fraud prevention, security, service improvement, and direct marketing to existing customers); your consent (non-essential cookies, SMS marketing, and email marketing where consent is required); and compliance with legal obligations (tax, accounting, and regulatory record-keeping).

7. Cookies and Similar Technologies

We use the following categories of technologies:

• Strictly necessary cookies, which enable core functions such as shopping cart persistence, secure checkout, session management, and fraud detection. These cannot be disabled without impairing the Services.
• Performance and analytics cookies, which help us understand traffic patterns, measure conversion rates, and diagnose technical problems.
• Functional cookies, which remember your currency, language, and display preferences.
• Advertising and targeting cookies and pixels, which allow us and our advertising partners to deliver relevant advertisements on third-party platforms and to measure their effectiveness.

You can manage cookies through your browser settings, through the cookie preference control available on our site where applicable, or through industry opt-out tools such as the Digital Advertising Alliance (optout.aboutads.info) and the Network Advertising Initiative (optout.networkadvertising.org). Disabling certain cookies may affect the functionality of the store.

Global Privacy Control. We recognize opt-out preference signals, including the Global Privacy Control (GPC), transmitted by your browser. Where we receive such a signal, we will treat it as a valid request to opt out of the sale or sharing of personal information and of targeted advertising for that browser or device.

8. How We Disclose Personal Information

We do not sell your personal information for monetary consideration. We disclose personal information to the following categories of recipients:

• E-commerce platform provider. Our store is hosted on Shopify Inc., which processes personal information on our behalf in order to operate the store, process orders, and host our data. Shopify's handling of personal information is governed by its own privacy policy, available at shopify.com/legal/privacy.
• Payment processors, including Shopify Payments, PayPal, and other authorized providers, who process your payment and perform fraud screening.
• Shipping and logistics providers, including international and domestic carriers and customs brokers, who receive the name, shipping address, telephone number, email address, and order contents necessary to deliver your package and clear customs.
• Suppliers and fulfillment partners, who receive only the information necessary to prepare and dispatch your order.
• Technology and service providers, including email and SMS platforms, customer support software, review platforms, analytics providers, hosting providers, and security vendors.
• Advertising and marketing partners, who assist us in delivering and measuring advertising campaigns.
• Professional advisors, including accountants, auditors, insurers, and legal counsel, under duties of confidentiality.
• Government authorities and law enforcement, where required by applicable law, subpoena, court order, customs regulation, or to protect our legal rights.
• Successors in a business transaction, in connection with a merger, acquisition, financing, reorganization, or sale of assets, subject to appropriate confidentiality protections.

Service providers are contractually restricted from using your personal information for any purpose other than performing services for us.

9. Sale, Sharing, and Targeted Advertising

Certain state privacy laws define "sale" and "sharing" broadly to include the disclosure of personal information to advertising partners in exchange for non-monetary value. Our use of advertising cookies and pixels may constitute a "sale" or "sharing" of identifiers, internet activity information, and inferences, or "targeted advertising" or "profiling," as those terms are defined under California, Virginia, Colorado, Connecticut, Texas, Oregon, Montana, and other state laws.

You may opt out at any time by:

• Enabling a Global Privacy Control signal in your browser;
• Using the cookie preference control on our site, where available; or
• Emailing support@northavenwatches.com with the subject line "Do Not Sell or Share My Personal Information."

We do not knowingly sell or share the personal information of consumers under sixteen (16) years of age.

10. Data Retention

We retain personal information only for as long as necessary to fulfill the purposes described in this Policy, including:

• Order and transaction records: for the duration of the customer relationship and thereafter for the period required by applicable tax, accounting, customs, and commercial law, which is typically between five (5) and ten (10) years.
• Customer service correspondence: generally up to three (3) years after resolution.
• Marketing contact data: until you withdraw consent or opt out, after which we retain a suppression record to honor your preference.
• Website analytics and cookie data: in accordance with the retention periods of the relevant technology, typically no longer than twenty-six (26) months.

When personal information is no longer required, we delete it or irreversibly anonymize it.

11. Data Security

We implement administrative, technical, and organizational safeguards designed to protect personal information against unauthorized access, disclosure, alteration, and destruction. These include TLS/SSL encryption of data in transit, encryption of stored data where appropriate, PCI-DSS compliant payment processing performed by our processors, access controls limiting employee access on a need-to-know basis, and periodic review of our security practices.

No method of transmission over the Internet or method of electronic storage is completely secure. While we strive to protect your personal information, we cannot guarantee absolute security. You are responsible for maintaining the confidentiality of any account credentials you create.

12. Order Processing and Shipping Information

Because our products are shipped internationally, order processing and delivery typically require 8 to 30 business days from the date the order is confirmed. To make delivery possible, we transmit your name, shipping address, telephone number, email address, and a description and declared value of the goods to shipping carriers, customs authorities, and, where applicable, our fulfillment partners. Customs authorities in the destination country may require this information by law, and we are obligated to provide it.

13. International Data Transfers

Our company is established in Portugal, and our service providers operate in the United States, the European Economic Area, and other jurisdictions. Consequently, your personal information may be transferred to, stored in, and processed in countries other than your country of residence, where data protection laws may differ.

Where we transfer personal information from the European Economic Area, the United Kingdom, or Switzerland to a country that has not received an adequacy decision, we rely on appropriate safeguards, including the European Commission's Standard Contractual Clauses, together with supplementary measures where necessary. You may request a copy of the relevant safeguards by contacting us at support@northavenwatches.com.

14. Your Privacy Rights

14.1 Rights Under United States State Privacy Laws

Depending on your state of residence, you may have the following rights:

• Right to know and access. To confirm whether we process your personal information and to obtain the categories and specific pieces of personal information we have collected, the categories of sources, the purposes of collection, and the categories of third parties to whom we disclosed it.
• Right to delete. To request deletion of personal information we collected from you, subject to statutory exceptions.
• Right to correct. To request correction of inaccurate personal information we maintain about you.
• Right to portability. To obtain a copy of your personal information in a portable and, where technically feasible, readily usable format.
• Right to opt out. To opt out of the sale or sharing of personal information, targeted advertising, and profiling in furtherance of decisions producing legal or similarly significant effects.
• Right to limit the use of sensitive personal information, where applicable.
• Right to non-discrimination. We will not deny you goods or services, charge you a different price, or provide a different level of quality because you exercised a privacy right.
• Right to appeal. If we decline your request, residents of Virginia, Colorado, Connecticut, Texas, Montana, Oregon, and certain other states may appeal our decision by replying to our response or emailing support@northavenwatches.com with the subject line "Privacy Appeal." We will respond to appeals within the period required by applicable law, and if the appeal is denied, we will provide information on how to contact your state Attorney General.

These rights arise under statutes including the California Consumer Privacy Act as amended by the California Privacy Rights Act, the Virginia Consumer Data Protection Act, the Colorado Privacy Act, the Connecticut Data Privacy Act, the Utah Consumer Privacy Act, the Texas Data Privacy and Security Act, and comparable laws in other states. The specific rights available to you depend on the law of your state of residence.

14.2 How to Exercise Your Rights

Submit a request by emailing support@northavenwatches.com with the subject line "Privacy Request," stating your state of residence and the right you wish to exercise.

To protect your information, we will verify your identity before fulfilling a request, typically by asking you to confirm information already associated with your account or orders, such as your order number, the email address used at checkout, and the shipping address. We will not use verification information for any other purpose.

We will respond to verifiable requests within forty-five (45) days. Where reasonably necessary, we may extend this period by an additional forty-five (45) days and will notify you of the extension and the reason for it. There is no charge for exercising your rights, unless requests are manifestly unfounded, excessive, or repetitive, in which case we may charge a reasonable fee or decline the request as permitted by law.

Authorized agents. You may designate an authorized agent to submit a request on your behalf. We may require the agent to provide proof of written authorization and may require you to verify your own identity directly with us.

14.3 California Shine the Light

California residents may request information about the disclosure of personal information to third parties for those third parties' direct marketing purposes under Cal. Civ. Code § 1798.83. We do not disclose personal information to third parties for their own direct marketing purposes. You may direct inquiries to support@northavenwatches.com.

14.4 Rights of Individuals in the European Economic Area and United Kingdom

If you are located in the EEA or the UK, you additionally have the right to object to processing based on legitimate interests, to request restriction of processing, to withdraw consent at any time without affecting the lawfulness of prior processing, and to lodge a complaint with your national supervisory authority. In Portugal, the supervisory authority is the Comissão Nacional de Proteção de Dados (CNPD).

15. Marketing Communications

Email. If you subscribe to our marketing emails or purchase from us, we may send you promotional messages. Every marketing email contains an unsubscribe link, and we honor opt-out requests promptly in accordance with the CAN-SPAM Act. Opting out of marketing does not stop transactional messages such as order confirmations, shipping notifications, and service announcements.

SMS. If you opt in to SMS marketing, message frequency varies and message and data rates may apply. Reply STOP to any message to unsubscribe and HELP for assistance. Carriers are not liable for delayed or undelivered messages. We do not sell mobile telephone numbers or SMS consent data to third parties for their own marketing purposes.

16. Children's Privacy

Our Services are intended for adults and are not directed to children. We do not knowingly collect personal information from children under the age of thirteen (13), consistent with the Children's Online Privacy Protection Act, and we do not knowingly sell or share the personal information of consumers under the age of sixteen (16). If you believe a child has provided us with personal information, please contact support@northavenwatches.com and we will delete it promptly.

17. Third-Party Links and Services

Our Services may contain links to third-party websites, plug-ins, and social media features. Clicking those links or enabling those connections may allow third parties to collect or share information about you. We do not control and are not responsible for the privacy practices of those third parties. We encourage you to review their privacy policies.

18. Do Not Track

Some browsers transmit "Do Not Track" signals. Because no uniform industry standard for interpreting these signals has been adopted, our Services do not currently respond to Do Not Track signals. We do, however, honor Global Privacy Control signals as described in Section 7.

19. Accessibility

We are committed to making this Privacy Policy accessible to individuals with disabilities. If you require this Policy in an alternative format, please contact support@northavenwatches.com.

20. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, technologies, legal requirements, or other factors. When we make material changes, we will revise the "Last Updated" date above and, where required by law, provide additional notice or obtain your consent. We encourage you to review this Policy periodically.

21. Contact Us

For questions, concerns, or requests relating to this Privacy Policy or our handling of your personal information, please contact us:

Northaven
Operated by RONDINELLI PATRIX SILVA TOLEDO
11 Fernando Maurício Street
Lisbon, Lisbon 1950-447, Portugal
Email: support@northavenwatches.com

We aim to acknowledge all privacy inquiries within five (5) business days and to resolve them within the timeframes required by applicable law.