Privacy policy.

Infinite Trade Group Inc. operates the NELY8 website and storefront. Depending on applicable law and the processing activity, Infinite Trade Group Inc. is the organization responsible for the personal information described in this policy.

Business address: 447 Madison Ave, Paterson, NJ 07524, USA
Privacy and support email: info@nely8usa.com
Website: https://nely8usa.com

• Contact and support information: name, email address, optional order number, selected inquiry subject, message, and photographs or other information a person chooses to send by email.
• Account, checkout, and order information: email, account-session, profile, address, order-history, contact, delivery, billing, order, tax, transaction, fulfillment, return, refund, and order-issue information processed through Shopify-hosted Customer Accounts, checkout, and configured commerce providers.
• Product and cart information: products, variants, quantities, prices, availability, and a Shopify cart identifier.
• Payment information: payment details are processed through Shopify’s hosted checkout and configured payment providers. The NELY8 Next.js storefront does not directly receive or store complete payment-card details.
• Communications: messages and related delivery records generated when a person contacts NELY8 or NELY8 responds.
• Security and request information: request metadata needed to operate and protect the website. The Contact form temporarily uses a request IP address and submitted email address to create one-way-hashed rate-limit keys. Raw IP addresses and email addresses are not used as Upstash Redis keys.

NELY8 uses optional Shopify-hosted Customer Accounts and guest checkout remains available. The storefront does not operate a separate local customer database, local order-history database, or custom authentication service.

NELY8 does not currently collect birth dates or identity documents for checkout age verification, and no automated age-verification system is implemented.

• Directly from a person during Shopify-hosted account sign-in, checkout, a support request, a return or order-issue request, or another communication.
• From Shopify when providing hosted Customer Accounts or when the storefront retrieves catalog, inventory, cart, checkout, and order-related information.
• Automatically through the strictly necessary cart cookie and normal request handling needed to operate and protect the website.
• From payment providers, shipping carriers, and other commerce providers when needed to process or support a transaction.

• Provide and secure the storefront and maintain a Shopify cart.
• Process, confirm, fulfill, support, cancel, return, or refund an order.
• Calculate or support taxes, shipping, payments, and transaction records.
• Answer product, shipping, return, order-issue, customer-support, and privacy inquiries.
• Deliver Contact form submissions to NELY8 Customer Care.
• Prevent spam, misuse, fraud, and security incidents.
• Maintain records needed for business operations, disputes, accounting, tax, or other applicable obligations.
• Enforce approved store policies and protect customers, NELY8, and service providers.

Certain contact, delivery, billing, and payment information is required to process an order. If the required information is not provided, Shopify checkout may be unable to complete the transaction. Information marked optional in the Contact form is not required to submit a general support request.

The headless storefront uses a first-party cookie named nely8_cart. It contains the identifier used to retrieve a Shopify cart between page loads. It does not contain complete payment-card details or a customer password.

• The cookie is HTTP-only.
• It uses SameSite=Lax and is marked Secure in production.
• It applies across the website and has a configured maximum lifetime of 30 days.
• It may be cleared earlier if the cart becomes stale or is removed.

NELY8 does not currently use a separate analytics provider, advertising pixel, email-marketing platform, or behavioral-profiling tool in the headless storefront.

• Shopify: product catalog, inventory, cart, hosted Customer Accounts, hosted checkout, order processing, and configured commerce services.
• Resend: delivery of Contact form messages to NELY8 Customer Care.
• Upstash Redis: short-lived, pseudonymous rate-limit counters used to protect the Contact form from abuse.

Information may also be disclosed to payment providers, shipping carriers, professional advisers, authorities where legally required, and other providers needed to complete, secure, or support a transaction.

NELY8 has not installed a separate advertising or behavioral-profiling provider in the headless storefront.

• The nely8_cart cookie has a configured maximum lifetime of 30 days.
• Contact form rate-limit keys stored in Upstash Redis expire after approximately one hour.

For other information, NELY8 keeps information only as long as reasonably necessary for the purpose for which it was collected and for applicable legal, tax, accounting, fraud-prevention, dispute, and security requirements. The applicable period varies according to the type of information and the reason it is processed.

Infinite Trade Group Inc. is located in the United States, and the initial storefront serves customers in the United States and United Kingdom. Information may therefore be processed in or transferred to countries outside the customer’s country, including the United States, depending on provider infrastructure and configuration.

Depending on the customer’s state and whether a law applies to NELY8, a customer may have rights concerning access, correction, deletion, portability, or opting out of certain processing, and may have a right to appeal a decision. These rights are subject to legal conditions and exceptions.

Subject to applicable conditions and exceptions, UK individuals may have rights of access, correction, erasure, restriction, objection, and data portability. Where processing relies on consent, consent may be withdrawn without affecting processing that was lawful before withdrawal. The exact rights available depend in part on the lawful basis for processing.

UK individuals may also have the right to complain to the UK Information Commissioner’s Office.

Privacy questions and requests may be emailed to info@nely8usa.com or mailed to:

Infinite Trade Group Inc.
NELY8 Privacy
447 Madison Ave
Paterson, NJ 07524
USA

Do not include payment-card details in a privacy request. NELY8 may need to verify a requester’s identity as permitted or required by applicable law.

Customers must be at least 18 years old to place an order through NELY8, including orders for men’s grooming products, accessories, and sexual-wellness products.

NELY8 does not currently use automated age-verification technology and does not collect birth dates or identity documents through the storefront for that purpose. NELY8 does not intend the storefront for children. Nothing in this section limits applicable consumer or privacy rights.

NELY8 uses measures intended to protect the storefront, including server-only commerce and email credentials, an HTTP-only cart cookie, server-side Contact form validation, same-origin checks, spam controls, and rate limiting. Access to providers and Shopify must also be managed using appropriate account and permission controls.

No transmission or storage system can be guaranteed to be completely secure.

The NELY8 headless storefront does not make decisions based solely on automated processing that produce legal or similarly significant effects. Shopify and configured payment or fraud-prevention services may perform automated checks within their services.

NELY8 uses Shopify-hosted Customer Accounts for optional passwordless sign-in, profile and address management, and order-history access. Shopify processes the account information and account-session data needed to provide those features. Guest checkout remains available. The NELY8 Next.js storefront redirects customers to Shopify for the account experience and does not operate a separate local authentication service, customer database, or order-history store.

NELY8 may update this policy when its services, providers, settings, data practices, or legal obligations change. The effective date and last-updated date will identify the current version.