The website (the “Site”) and the brand NUS (collectively the “Services”) are operated by Pao&Co, LLC (“NUS,” “we,” “our”). This Privacy Policy describes how collects, uses, and discloses your Personal Information when you visit or make a purchase from the Site. The service may provide features such as email services, messaging services, social media, e-commerce, and / or other messaging or communication services designed to allow you to access relevant products, services and content via the website and online store (each a “Communication Service” and collectively “Communication Services”).

We take your privacy seriously and your privacy concerns are important. This privacy policy outlines how we handle and process your personal information, whether a visitor, Main account user of our Service. If you have any more questions or concerns about how we are processing your personal data, or you would like to know more about how to exercise your rights. You can reach out to us by emailing
Our store is hosted on Shopify Inc. They provide us with the online e-commerce platform that allows us to sell our products and services to you.

Your data is stored through Shopify’s data storage, databases and the general Shopify application. They store your data on a secure server behind a firewall.


By visiting, accessing or using the website, you acknowledge this Privacy Policy and agree to be bound by its terms herein and the Terms of Use provided on the websites and mobile application. If there is anything stated herein that you do not understand or have additional questions about, please email any inquiry to If at any time you do not agree to our Privacy Policy and the information provided, please do not use the website or related products and Services.

We reserve the right to update or change this Privacy Policy by posting such changes or updates to the websites. Amendments, changes, or modifications to this Privacy Policy will be posted at this URL and will be effective the date when posted. It is your responsibility to thoroughly review any such changes, modifications or updates and check the websites and mobile application from time to time to be sure you understand all terms and conditions, agreements, and policies of the Services, that you are in compliance with them and that you will adhere to them at all times. You will be able to ascertain if the Privacy Policy has been updated by reviewing the last updated date provided at the beginning of this Policy. Your continued use of the Services after the posting of any amendment, change, or modification shall represent your acceptance of the updated privacy policy.


We strive to take important precautions with user personal data and information. When you visit the Site, we collect certain information about your device, your interaction with the Site, and information necessary to process your purchases. We may also collect additional information if you contact us for customer support. In this Privacy Policy, we refer to any information that can uniquely identify an individual (including the information below) as “Personal Information”. See the list below for more information about what Personal Information we collect and why.

The following is a brief summary of the categories of personal information that might be found in the User account data that we collect from our Users, so you can know, at a glance, what we’re talking about. 

We collect and process your personal information:

  • When you visit our websites, or make a request to receive information about our products and Services;
  • When you contact our Customer Support Team;
  • When you sign up for a NUS e-commerce account, and/or when otherwise using our Services;
  • When you visit our e-commerce store at As you browse the store, we collect information about the individual web pages or products that you view, what websites or search terms referred you to the store site, and information about how you interact with the e-commerce store site. 
  • When you make a purchase or attempt to make a purchase through the e-commerce site.  
We call this personal information User Account Data. This data might be in different forms, and we might process or use it for different reasons or purposes. Depending on the way you interact with us, we might collect or process the following categories of personal information, and utilize it the following reasons:
  • We collect Identifiers, like your name, email address, address (including Country), billing address, shipping address, other personal information you provide voluntarily, when you sign up or use our Services and to do things like verify who you are (your identity), and communicate or connect with you. These are shared with our processor Shopify.
  • We also collect Commercial type information when we keep track of the Services that you use or purchase from us, our customer relationship management, marketing and our communications history about those services. These are shared with our processor Shopify.
  • We collect Financial information (payment card information) on the e-commerce site. When you make a purchase or attempt to make a purchase through the e-commerce website, we collect payment information such as credit card information.
  • We collect Internet and other electronic online activity information, such as communications metadata, as you visit, browse, or otherwise use our websites or our Services. This communications metadata may be information and data about how you browse our websites and what aspects of our Service you use, or it may be your User usage data as you send communications or other messages over our Service.
  • We also collect Geolocation data when you use our Services. This could be your location based on your IP address or by the GPS location information from a Users smartphone or other mobile device.  

More specifically, within these categories, we will ask you for certain kinds of personal information (“Personal Information”) to provide the Services you request. This information includes:

  • YOUR ACCOUNT INFORMATION - You can create a personal account with us, whether for the website/e-commerce site. Using a username and password designated by you, you may access your account online at any time to add, delete, or modify your information. By creating an account, you authorize us to collect and store your name, email address, address (including Country), and other Personal Information that you may provide, while using our Services or otherwise. With regards to the e-commerce site, we collect certain information from you, including your name, billing address, shipping address, payment information (including credit card numbers, email address, and phone number. We can assure you, that the Personal Information supplied by you is not used for any purpose other then as we have outlined for you in this Privacy Policy. If you ever decide to use a public computer to access your account, we strongly recommend that you log out at the conclusion of your session. Although your data may still be stored with us, by doing so will help make sure that your information will not be accessible to anyone from that computer.
  • EMAIL LIST – When you send a sign-up inquiry or if you create an account with us, you may be given an option to be added to our promotional email list. Regardless of whether you select this option, your Personal Information will never be shared with or sold to third parties. Consistent with federal CAN-SPAM laws, if you do not wish to receive promotional emails, you can opt-out of receiving promotional emails simply, and at any time. If you want to be removed from our promotional email list, kindly email us at and be sure to include your full name and email address in the message, or simply click the “unsubscribe” button located at the bottom of the emails we send you. We may still send you necessary administrative notices, however.
We share your Personal Information with service providers to help us provide our services and fulfill our contracts with you, as described above. For example: 
  • We use Shopify to power our online store. You can read more about how Shopify uses your Personal Information on their website.
  • We may share your Personal Information to comply with applicable laws and regulations, to respond to a subpoena, search warrant or other lawful request for information we receive, or to otherwise protect our rights.


We do not sell, share, or trade your Personal Information gathered with our Services with any third parties, except as described herein or with your consent. We do not participate in or contribute to cooperative databases, which could give other companies access to such Personal Information.

We may need to disclose your Personal Information if legally required to do, including, but not limited to:
  • Cooperating with law enforcement investigations or other legal proceedings, 
  • Protecting against unauthorized or misuse of the Services, 
  • Protecting our rights and limiting our legal liability, or 
  • Protecting the rights, safety or property of users of the Services or the public.  
Also, we may disclose your Personal Information to outside companies and/or individuals that assist us to bring you the products and services we offer and to create, maintain, and operate our Services. For example, we may work with these third parties to:
  • Manage a database of customer information. 
  • Assist us in distributing emails.
  • Assist with direct marketing and data collection
  • Provide data storage and analysis.
  • Provide fraud prevention.
  • Provide customer service.
  • Provide messaging services.
  • Provide e-commerce services.
  • Process payment information, and 
  • Provide additional services designed to assist us in developing and running our Services and increasing our business potential. We require that these outside companies each agree to keep data shared with them confidential and to use the data only to perform their obligations to us.  

In addition, if we experience a business change, such as a merger, acquisition by another company or business, or the sale of all or a portion of our assets, your Personal Information will likely be among the assets transferred.  


As described above, we use your Personal Information to provide you with targeted advertisements or marketing communications we believe may be of interest to you. For more information about how targeted advertising works, you can visit the Network Advertising Initiative’s (“NAI”) educational page here.

You can opt out of targeted advertising by visiting the following websites FacebookGoogleBingAdditionally, you can opt out of some of these services by visiting the Digital Advertising Alliance’s opt-out portal here.



Pursuant to the General Data Protection Regulation (“GDPR”), if you are a resident of the European Economic Area (“EEA”), we process your personal information under the following lawful bases:

  • Your consent;
  • The performance of the contract between you and the Site;
  • Compliance with our legal obligations;
  • To protect your vital interests;
  • To perform a task carried out in the public interest;
  • For our legitimate interests, which do not override your fundamental rights and freedoms;
  • Retention.

When you place an order through the Site, we will retain your Personal Information for our records unless and until you ask us to erase this information. For more information on your right of erasure, please see the ‘Your rights’ section below.


If you are a resident of the EEA, you have the right to object to processing based solely on automated decision-making (which includes profiling), when that decision-making has a legal effect on you or otherwise significantly affects you.   
We do not engage in fully automated decision-making that has a legal or otherwise significant effect using customer data. Our processor Shopify uses limited automated decision-making to prevent fraud that does not have a legal or otherwise significant effect on you.
Services that include elements of automated decision-making include:

  • Temporary denylist of IP addresses associated with repeated failed transactions. This denylist persists for a small number of hours.
  • Temporary denylist of credit cards associated with denylisted IP addresses. This deny list persists for a small number of days.


Through your use of our Services, we may also collect certain types of non-personally identifiable information from you (“NPII”). Importantly, NPII is not associated with you as an individual. More specifically, NPII is measured anonymously and only in the aggregate. During a normal, regular visit to our websites, no personal information is collected. We may, however, collect certain information that does not identify you, such as information from your computer’s web browser, or other information about the aggregate number of visits to a specific web page. This might also include cookies, which are tiny data tags that track where you go, and help navigate you back to other pages. This information also helps us see which pages require attention.

Let’s talk in more detail about cookies. As mentioned above, our websites may use cookies. A cookie is a small piece of information, a tiny data tag as mentioned above, sent by a website that is saved on your computer’s hard drive by your computer’s browser. These cookies help us remember you when you come back to the websites. Cookies also contain information to enhance and personalize your experience and to collect websites statistical data, such as which websites pages are visited, the ISP’s (Internet Service Provider’s) domain name and the URL addresses of the websites you visited immediately before coming to and immediately after leaving the websites. The information in these cookies lets us track your “clickstream” activity (i.e., the paths as taken by users of the websites as they move or “click” around from page to page) to allow us to better serve our users by revealing to us which portions of the websites are the most popular or visited. Importantly, cookies do not contain Personal Information. To assist, you may disable cookie settings on your browser. Please visit your browser’s help instructions to learn how to do so.   

We may also use “pixel tags” (sometimes also referred to as “web beacons” or “clear gifs”), which are tiny graphic images, on the websites. These pixel tags help us analyze Users’ online websites behavior and measure the effectiveness of the websites and our marketing and advertising. We may also use other types of analytical tools to evaluate our websites performance using aggregated data which, importantly, contains no Personal Information. We work with other service providers that help us collect, track, and analyze this information.   

Cookies, pixel tags, web beacons, and / or other analytical type tools that we might use on our websites may collect information about your visit, including the web pages you view, the various features you use, any links you click, and other actions you take in regards to the websites. This data may include your computer’s Internet protocol (IP) address, your operating system, your web browser type, date and time information, and other technical information about your computer. We may also track certain other information about the identity of the websites you visited just prior to coming to the websites. We do not otherwise track any information about your use of other websites.   

We may use cookies, pixel tags, and/or other analytical tools in our emails to track how you interact with those messages, such as when you receive, open, or click on a link contained in an email message from us. We may use “Log files” to track actions occurring on the ecommerce site, and collect data including your IP address, browser type, Internet service provider, referring/exit pages, and date/time stamps.   

We may also work with some businesses that use certain tracking technologies to send advertisements on our behalf across the Internet. These businesses may collect information about your visits to the websites and your interactions with our advertising, marketing, and other communications, but, importantly, no Personal Information is shared with them.   

We may also combine the NPII collected through cookies, pixel tags, web beacons, and other analytical tools with other information we may have gathered from you. This data may be used to improve our Services and websites, to personalize your online experience, to determine the effectiveness of advertising, to help us deliver information to you, and for other internal business purposes.
GDPR - If you are a resident of the EEA, you have the right to access the Personal Information we hold about you, to port it to a new service, and to ask that your Personal Information be corrected, updated, or erased. If you would like to exercise these rights, please contact us at

Your Personal Information will be initially processed in Ireland and then will be transferred outside of Europe for storage and further processing, including to Canada and the United States. For more information on how data transfers comply with the GDPR, see Shopify’s GDPR Whitepaper here.
CCPA - If you are a resident of California, you have the right to access the Personal Information we hold about you (also known as the ‘Right to Know’), to port it to a new service, and to ask that your Personal Information be corrected, updated, or erased. If you would like to exercise these rights, please contact us at   

If you would like to designate an authorized agent to submit these requests on your behalf, please contact us at   


You can control and manage cookies in various ways. Please keep in mind that removing or blocking cookies can negatively impact your user experience and parts of our website may no longer be fully accessible.
The length of time that a cookie remains on your computer or mobile device depends on whether it is a “persistent” or “session” cookie. Session cookies last until you stop browsing and persistent cookies last until they expire or are deleted. Most of the cookies we use are persistent and will expire between 30 minutes and two years from the date they are downloaded to your device.
Most browsers automatically accept cookies, but you can choose whether or not to accept cookies through your browser controls, often found in your browser’s “Tools” or “Preferences” menu. For more information on how to modify your browser settings or how to block, manage or filter cookies can be found in your browser’s help file.

Additionally, please note that blocking cookies may not completely prevent how we share information with third parties such as our advertising partners. To exercise your rights or opt-out of certain uses of your information by these parties, please follow the instructions in the “Behavioral Advertising” section above.

Please note that because there is no consistent industry understanding of how to respond to “Do Not Track” signals, we do not alter our data collection and usage practices when we detect such a signal from your browser. Currently, our websites do not respond to a web browser’s Do-Not-Track signals. 


We try our best, and strive to keep your Personal Information safe, secure, and private. We have implemented commercially reasonable electronic, physical, and administrative steps to maintain the security of Personal Information collected. Some of our steps include limiting the number of people who have physical access to database servers, as well as utilizing electronic security systems, as well as certain password protections that guard against unauthorized access.

Unfortunately, despite our earnest efforts, the transmission of personal information and other data over the Internet cannot be guaranteed to be 100% safe and secure. While we strive to use every reasonable means to ensure the security of information you transmit through the Services, we cannot promise or guarantee that such personal information and other data will not be intercepted by third parties. We will, however, to the best of our ability, prosecute any fraudulent or unauthorized transactions to the fullest extent permitted by law.

While visiting the website, you may link to websites operated by certain third parties; or you may have come to our websites using a link found on another website. This does not, in any way, mean that we endorse, support, or otherwise approve of these websites or the goods or services they might provide. We do not make any warranties or representations about any site that may be linked to our websites. Such other websites are wholly independent of us, and we have no control whatsoever over, or the responsibility for, their information, products or activities.
In addition, our privacy practices may be different from those of these other linked websites. If you provide Personal Information or data at one of those websites, you are subject to the privacy policy of the websites operator, not our Privacy Policy. Please be sure you understand the other site’s privacy policy prior to providing Personal Information.

You will receive email messages from us only if you have consented to receive them. If you do not want to receive these email messages from us you may click on the “unsubscribe” link you can locate at the bottom of any email message sent by us to you. Kindly allow us ten (10) business days from when the request was received by us to complete the removal, because some of our promotions may already have been in process prior to your submitted request. Be advised, as long as you have an account with us we will continue to email you administrative information related to your use of our service. These service-related email messages, generated during our ordinary course of business, will continue as long as you have a user account, even if you asked not to receive any commercial emails.


Common Internet scams are known as “spoofing” or “phishing.” These types of scams occur when you receive an email from what appears to you to be a legitimate source requesting Personal Information or other data from you. Please be aware that we will never send you any emails requesting you to verify any Personal Information. If you do receive an email that appears to be from us requesting such data or personal information from you, DO NOT respond to the email, and DO NOT click on any links present in the email. Instead, please immediately forward the email to us at as we will investigate instances of possible Internet fraud.  


The Services are only meant for those individuals that are 18 and older. You can only use the service if you are 18 and older. The Services are not meant for children, and we will not knowingly collect any Personal Data from children under the age of 13 without receiving verified parental consent. We will remove from our files any Personal Data of anyone we discover to be under 13 years old. We are concerned about the safety of all children when they use the Internet, and we understand that children may not comprehend all the provisions within our Privacy Policy or be able to make informed decisions about the choices that are made available to adult users of the websites.

By using the Services, you hereby authorize us to disclose any of your Personal Information pursuant to administrative and judicial proceedings as well as to law enforcement or other government agencies if we believe the disclosure is appropriate or necessary. You also authorize and consent to the disclosure of Personal Information if we deem the disclosure appropriate or necessary in the event of an investigation of illegal or improper conduct in connection with the Services, such as misrepresentation, fraud, intellectual property infringement, or other activity that may put us at risk for liability.


We ask that you do not send us any proprietary or confidential information through email or otherwise. Any materials, information, suggestions, comments or ideas sent to us will be considered non-confidential, and by submitting them to us, you are granting us the absolute right to use, modify, transmit, reproduce, distribute and display the proprietary or confidential information for any purpose whatsoever, with no payment or other compensation to you. However, be advised we will not use your name unless we are compelled by law to identify the origin of the information, materials, suggestions, comments, or ideas, or unless we first obtain your permission.


We may freely assign this Privacy Policy, and all of its provisions, or any of our rights and/or obligations hereunder, as indicated in our Terms of Use.

For more information about our privacy practices, if you have questions, or if you would like to make a complaint, please contact us by e-mail at  

If you are not satisfied with our response to your complaint, you have the right to lodge your complaint with the relevant data protection authority.

Last Update: Jan 18, 2021