Privacy Policy

Data we collect

We collect the information needed to operate the storefront, respond to requests, fulfill orders, and improve the customer experience. This may include:

• Name and contact information
• Billing and shipping address
• Order, quote, and support history
• Product questions, reviews, and uploaded messages
• Browser, device, usage, and approximate location data
• Cart, checkout, account, and cookie/session data

How data is used

• Process quotes, orders, shipping, returns, refunds, and warranty support.
• Maintain account access, cart sessions, order history, and customer service.
• Answer product, compatibility, sizing, and installation questions.
• Improve storefront search, navigation, product pages, and support content.
• Measure storefront performance, advertising attribution, and conversion activity.
• Detect fraud, abuse, checkout errors, security issues, and legal compliance needs.

We do not use vague "other purposes" language as a blank check. If National Safety Mirror uses customer information, it should fit one of the listed business purposes or another purpose we clearly disclose before collecting it.

What the checkout privacy notice means

Some WooCommerce checkout notices summarize privacy use in a short sentence. For National Safety Mirror, that summary means we use checkout and account information for order processing, payment and fraud checks, shipping, support, account/order history, site security, analytics, advertising measurement, and post-purchase review requests.

It does not mean customer information is freely spread around. Service providers receive only the information needed for their role, including:

• Payment authorization, refund processing, and fraud screening
• Shipping labels, carrier tracking, and delivery support
• Hosting, caching, uptime, security, and traffic protection
• Email delivery, customer support, and post-purchase review requests
• Analytics, conversion measurement, and advertising opt-out handling

Storefront platforms and service providers

The public headless storefront is hosted by Vercel. Product, content, review, and operational workflows may use Supabase and Pulse. Checkout, account, cart, media, and order workflows are supported by our WooCommerce/WordPress backend on the secure host. The WooCommerce side is hosted behind Rocket/Cloudflare infrastructure; that means Rocket/Cloudflare fronts the WordPress origin and may process technical request data needed for hosting, security, caching, and traffic protection.

We may also share information with payment processors, shipping carriers, email systems, fraud-prevention tools, support systems, review-request tools, analytics providers, and advertising providers as needed to operate the business and fulfill customer requests.

Those providers are not authorized to use customer information for unrelated purposes on our behalf.

Analytics, advertising, and cookies

We use Google Tag Manager to manage measurement and advertising tags. Depending on the current tag-container configuration, browser settings, and privacy signals, those tags may include Google Analytics 4, Google Ads, Google DoubleClick / Google ad services, Meta/Facebook Pixel, and other conversion or remarketing tools. These services may use cookies, pixels, or similar identifiers to measure page views, product interest, cart activity, checkout activity, purchase attribution, and campaign performance.

Essential cookies support security, cart/session continuity, checkout, accounts, and site functionality. Blocking all cookies in your browser can prevent cart, checkout, account, or support features from working correctly.

Your privacy choices and Global Privacy Control (GPC)

We do not sell your personal information for money. Some advertising cookies may count as "sharing" personal information for cross-context behavioral advertising under California law (CPRA). You can opt out of this sharing by turning on a Global Privacy Control (GPC) signal in your browser, which we detect and honor automatically, or by emailing privacy@lheinc.com.

Retention, security, and contact

We retain personal information as long as reasonably needed for orders, tax and accounting records, warranties, fraud prevention, dispute resolution, and legal obligations. We use commercially reasonable safeguards, but no internet transmission or electronic storage method is guaranteed to be completely secure.

For privacy questions, access/correction/deletion requests, or account-data questions, email privacy@lheinc.com or contact National Safety Mirror at info@nationalsafetymirror.com.