Privacy Policy

Last Updated: September 6, 2026

Ennoki ("Ennoki", "we", "us", "our") operates the website ennoki.com. This Privacy Policy explains what personal information we collect when you visit our site or place an order, how we use it, who we share it with, and the choices and rights you have. By using our website you agree to the practices described here.

1. Information We Collect

Information you give us

• Identity and contact details — first and last name, billing address, shipping address, email address and phone number.
• Order information — the products you buy, order value, delivery preferences and any notes you add at checkout.
• Payment information — card type, last four digits and billing address. Full card numbers are entered directly into our PCI-DSS compliant payment processor and are never stored on our servers.
• Correspondence — messages you send to contact@ennoki.com, support tickets, warranty and return requests, and product reviews you submit.
• Marketing preferences — whether you have opted in to our newsletter or SMS updates.

Information collected automatically

• Device and browser data — IP address, browser type and version, operating system, screen resolution and language.
• Usage data — pages viewed, products viewed, time on page, referring URL, and the search terms that brought you to us.
• Cookies and similar technologies — see section 4 below.

2. How We Use Your Information

• To process, fulfil and deliver your orders, including freight deliveries that require an appointment call.
• To take payment, screen for fraud and verify billing details.
• To send transactional messages — order confirmations, shipping and tracking notifications, delivery scheduling and back-order updates.
• To provide customer support and handle returns, cancellations and warranty claims.
• To improve our catalogue, site performance and product recommendations.
• To send marketing emails where you have opted in — you can unsubscribe at any time from the link in any message.
• To meet legal, tax and accounting obligations and to enforce our Terms of Service.

3. Legal Bases for Processing

Where a legal basis is required, we rely on: performance of a contract (to fulfil your order), our legitimate interests (to secure the site, prevent fraud and improve our service), your consent (for marketing and non-essential cookies), and compliance with a legal obligation (tax and record-keeping).

4. Cookies and Tracking

We use cookies and similar technologies to keep your cart intact, remember your preferences, measure traffic and — where you consent — to serve relevant advertising.

Cookie categories we use:

• Strictly necessary — cart, checkout, session security. These cannot be switched off.
• Performance and analytics — aggregated statistics about how the site is used.
• Functional — remembering your region, currency and recently viewed products.
• Advertising — measuring campaign performance and showing you relevant ads on other platforms.

Most browsers let you refuse or delete cookies through their settings. Blocking strictly necessary cookies will prevent checkout from working.

5. Who We Share Information With

We do not sell your personal information for money. We share it only with parties who need it to run the business:

• Payment processors — to authorise and settle transactions.
• Carriers and freight companies — to deliver your order and to schedule curbside appointments.
• Suppliers and manufacturers — where an item ships directly from their warehouse or where a warranty claim must be raised with them.
• Technology providers — hosting, email delivery, analytics and customer-support tooling.
• Professional advisers and authorities — where required by law, court order, or to protect our rights, property or safety.

If Ennoki is involved in a merger, acquisition or sale of assets, your information may be transferred as part of that transaction. We will notify you before your information becomes subject to a different privacy policy.

6. Data Retention

Order and transaction records are kept for as long as required by tax and accounting law. Marketing data is kept until you unsubscribe. Support correspondence is kept while it may be relevant to a warranty or dispute. After that, data is deleted or anonymised.

7. Security

Our site is served over TLS/SSL encryption. Access to customer data is restricted to staff who need it. Payment card data is handled entirely by our processor. No system is completely secure — if you believe you have found a vulnerability, please see our Report a Security Issue page.

8. Your Privacy Rights

Texas residents (TDPSA)

Ennoki is based in Texas. Under the Texas Data Privacy and Security Act you may confirm whether we process your data, access it, correct it, obtain a portable copy, delete it, and opt out of targeted advertising, sale of personal data, or certain profiling. You may appeal a refused request by replying to our decision.

California residents (CCPA/CPRA)

You may request disclosure of the categories and specific pieces of personal information we have collected, request deletion or correction, opt out of the sharing of personal information for cross-context behavioural advertising, and limit the use of sensitive personal information. We will not discriminate against you for exercising these rights.

Other US states and international visitors

Residents of Virginia, Colorado, Connecticut, Utah, Oregon, Montana and other states with comparable laws have substantially similar rights. Visitors in the EEA and UK may also object to processing and lodge a complaint with their supervisory authority. Our site is intended for customers in the United States; if you order from outside the US your data will be processed in the US.

How to exercise your rights

Email contact@ennoki.com with the subject line "Privacy Request". We may ask you to verify your identity — normally by confirming an order number or the email address on file. We respond within 45 days and may extend once where the request is complex. An authorised agent may act for you with written permission.

9. Do Not Track

Browsers may send a "Do Not Track" signal. There is no common industry standard for responding to it, so our site does not currently change its behaviour in response, other than honouring Global Privacy Control opt-out signals where the law requires.

10. Children

Our site is not directed to children under 16 and we do not knowingly collect their personal information. If you believe a child has provided us with data, contact us and we will delete it.

11. Third-Party Links

Our pages may link to manufacturer sites, carrier tracking portals and other third parties. Their privacy practices are their own and are not covered by this policy. Review their policies before providing personal data.

12. Changes to This Policy

We may update this policy to reflect changes in our practices or the law. The revised version is posted on this page with a new "last updated" date. Material changes will be communicated by email where we hold your address.