PRIVACY POLICY

1. Introduction

At nadirusta.com, we are deeply committed to safeguarding your privacy and the protection of your personal data. We operate with transparency, integrity, and a strong dedication to upholding data protection rights under the General Data Protection Regulation (“GDPR”), the California Consumer Privacy Act (“CCPA”), and other applicable data privacy laws. This Privacy Policy outlines how we collect, use, disclose, and protect your personal information to ensure a secure and privacy-respecting experience when accessing and interacting with our website and services.

2. Scope of the Policy and Data Controller Role

This Privacy Policy applies to all users accessing nadirusta.com and covers all data processing activities carried out through the website, including data collected via forms, cookies, and third-party integrations. For the purposes of relevant data protection laws, nadirusta.com is the “Data Controller” for all personal information collected from website visitors, customers, and users of our online platforms and services. Questions or requests regarding this Privacy Policy or your personal data should be directed to [email protected].

3. Categories of Personal Data Processed

We may collect and process the following categories of personal data:

a. Usage Data
This includes information automatically collected during your visit to nadirusta.com, such as your IP address, browser type, device identifiers, pages visited, referring URLs, access times, and session durations.

b. Account Data
Collected when you register or create an account, including your full name, email address, contact number, billing or shipping address, and password information (in hashed form).

c. Profile Data
Information you provide or generate through use of our services, including user preferences, purchase history, behavioral patterns, saved items, and service usage metrics.

d. Communication Data
Details you provide in correspondence with us, including support inquiries, contact form submissions, phone communications, and customer service interactions.

e. Technical Data
Device-specific data such as model identifiers, operating system versions, language settings, and browser configurations.

f. Transaction Data
Details of transactions made through nadirusta.com, including product orders, delivery addresses, payment confirmations (note: credit card data is processed by secure third-party providers and not stored by us), and order history.

g. Preference Data
Your expressed marketing preferences, consents to receive communications, interest categories, and opt-in/opt-out statuses.

4. Legal Bases for Processing Personal Data

We process your personal data using one or more of the following lawful bases, as outlined under applicable privacy laws:

– Consent: Where you have freely given informed, specific, and unambiguous consent to the processing of your data.
– Contract: When processing is necessary for the performance of a contract or to take steps at your request prior to entering into one.
– Legal Obligation: When we are required to process your information to comply with legal obligations.
– Legitimate Interests: Where processing is necessary for our legitimate interests or those of a third party, provided such interests are not overridden by your fundamental rights and freedoms.

5. Your Rights

We respect your rights under GDPR and CCPA, and you may exercise the following:

– Right of Access: Request confirmation and access to personal data we hold about you.
– Right to Rectification: Request correction of inaccurate or incomplete data.
– Right to Erasure (‘Right to be Forgotten’): Request deletion of your data under certain conditions.
– Right to Restrict Processing: Request to limit the processing of your personal information.
– Right to Data Portability: Obtain your personal data in a structured, commonly used format to move to another service provider.
– Right to Object: Object to processing based on legitimate interest or direct marketing.
– Right Not to Be Subject to Automated Decision-Making: Avoid profiling or automated decisions that significantly affect you.

To exercise any of these rights, please contact us at [email protected]. We may require identity verification before processing your request.

6. Security Measures

nadirusta.com employs robust security practices designed to protect your personal data from loss, unauthorized access, or misuse. These include:

– Secure Socket Layer (SSL) encryption
– Role-based access control protocols
– Regular system backups and security patching
– Staff training in data protection and secure handling procedures
– Use of security monitoring tools

7. International Data Transfers

When transferring personal data outside the European Economic Area (EEA), we ensure such transfers comply with applicable regulations through:

– Standard Contractual Clauses approved by the European Commission
– Implementation of appropriate safeguards
– Partnering only with trusted third-party processors who maintain strong data protection standards

Users in other jurisdictions, including the United States, acknowledge that their data may be processed outside of their local area in jurisdictions that may not provide the same level of data protection.

8. Data Retention

We retain personal data only for as long as necessary:

– Usage Data: Up to 12 months for analytics and diagnostics
– Account Data: As long as the user maintains an active account and up to 3 years after closure
– Profile Data: Up to 3 years following the last engagement
– Communication Data: Up to 2 years for customer support purposes
– Technical Data: 12 months, typically anonymous and aggregated
– Transaction Data: Up to 7 years for financial and legal compliance
– Preference Data: Maintained until the user changes or withdraws consent

Once retention periods expire, data is securely deleted or anonymized.

9. Cookie Policy

We use cookies and similar tracking technologies to enhance your browsing experience on nadirusta.com. Cookies help us understand site usage, deliver personalized content, remember preferences, and gather analytics data. Types of cookies used include:

– Essential Cookies: Required for site functionality (e.g., authentication, security)
– Functional Cookies: Remember your settings and preferences
– Analytics Cookies: Collect usage and performance data to improve site experience
– Performance Cookies: Monitor system performance and bug reporting

10. Cookie Management and GDPR/CCPA Compliance

Visitors to nadirusta.com are given meaningful choice and control over cookie use through our cookie banner, which complies with GDPR and CCPA guidelines. You may manage cookie settings via your browser settings or through the cookie preference panel provided on our website.

California residents may further opt out of the “sale” of personal information as defined under the CCPA. We do not sell personal data in exchange for monetary consideration, but if data sharing constitutes a “sale” under the CCPA, you may opt out by using the Do Not Sell My Info link or contacting us.

11. Protection for Children

nadirusta.com does not knowingly collect, process, or solicit information from individuals under the age of 13. If we learn that we have inadvertently collected such data from a child without verified parental consent, we will delete that information promptly. Parents or guardians who believe their child has submitted personal data may contact us at [email protected].

12. Policy Updates

We may update this Privacy Policy to reflect changes in our legal obligations, service offerings, technologies, or business practices. Updates will be posted on this page, and we may inform you through other appropriate communication channels where required by law. Continued use of nadirusta.com following such updates constitutes your acceptance of the revised policy.

13. Contact Us

If you have any questions or concerns about this Privacy Policy, your personal data, or how we ensure your privacy is protected, you may contact us at:

Email: [email protected]

We are dedicated to ensuring our compliance with all applicable privacy laws and to maintaining your trust. Your data privacy matters, and we encourage you to reach out with any inquiries or feedback.