Privacy Policy

1. Information We Collect

1.1 Personal Information You Provide

When you create an account, place an order, subscribe to our communications, or contact us, we may collect the following information directly from you:

• Identity Data: Full name, username, and title
• Contact Data: Email address, billing address, shipping address, and phone number
• Financial Data: Payment card details and billing information (processed securely through our third-party payment processors — we do not store full card numbers)
• Transaction Data: Details of products you have purchased, order history, and payment records
• Account Data: Username, password (encrypted), purchase history, and account preferences
• Communication Data: Any correspondence you send to us, including support tickets, emails, and form submissions

1.2 Information Collected Automatically

When you access our website, we automatically collect certain technical information through cookies, server logs, and similar technologies:

• Device Information: IP address, browser type and version, operating system, device type, and screen resolution
• Usage Data: Pages visited, time spent on pages, click-through rates, referring URL, and navigation paths
• Location Data: Approximate geographic location derived from your IP address
• Cookie Data: Session identifiers, preferences, and analytics data (see our Cookie Policy for details)

1.3 Information from Third Parties

We may receive information about you from third-party services, including payment processors, analytics providers, advertising networks, and identity verification services. This data is used in accordance with this Privacy Policy and the third party’s own privacy practices.

2. How We Use Your Information

We use the information we collect for the following purposes:

• Order Fulfillment: Processing and shipping your orders, managing payments, and providing order confirmations and tracking updates
• Account Management: Creating and maintaining your customer account, authenticating your identity, and managing your preferences
• Customer Support: Responding to your inquiries, resolving issues, and providing technical assistance
• Marketing Communications: Sending promotional emails, product updates, and special offers (only with your consent — you may opt out at any time)
• Website Improvement: Analyzing usage patterns to improve our website’s functionality, user experience, and content
• Security and Fraud Prevention: Detecting and preventing fraudulent transactions, unauthorized access, and other illegal activities
• Legal Compliance: Meeting our legal and regulatory obligations, including tax reporting and record-keeping requirements
• Product Development: Understanding customer needs and preferences to improve our product offerings and develop new products

3. Legal Basis for Processing

We process your personal data on the following legal grounds:

• Contractual Necessity: Processing required to fulfill our contract with you (e.g., processing orders and delivering products)
• Legitimate Interests: Processing necessary for our legitimate business interests, such as fraud prevention, website security, and business development, provided these interests do not override your rights
• Consent: Processing based on your explicit consent, such as receiving marketing communications (you may withdraw consent at any time)
• Legal Obligation: Processing required to comply with applicable laws and regulations

4. Data Sharing and Disclosure

We do not sell, rent, or trade your personal information. We may share your data with the following categories of third parties solely for the purposes described in this policy:

• Payment Processors: Stripe, PayPal, and other payment gateways that process your transactions securely
• Shipping Partners: Carriers such as USPS, UPS, FedEx, and DHL who fulfill and deliver your orders
• Analytics Providers: Google Analytics and similar platforms that help us understand website traffic and user behavior (data is anonymized where possible)
• Email Service Providers: Platforms that facilitate transactional and marketing email delivery on our behalf
• Cloud Infrastructure: Hosting and storage providers that maintain our website and databases with enterprise-grade security
• Legal and Regulatory Bodies: When required by law, court order, or governmental regulation
• Business Transfers: In connection with a merger, acquisition, or sale of assets, your information may be transferred to the acquiring entity

All third-party service providers are contractually obligated to protect your data and use it only for the specific services they provide to us.

5. Data Retention

We retain your personal information only for as long as necessary to fulfill the purposes for which it was collected, including satisfying legal, accounting, or reporting requirements. Specific retention periods include:

• Account Data: Retained for the duration of your account and up to 3 years after account closure
• Transaction Records: Retained for 7 years to comply with tax and financial regulations
• Marketing Consent Records: Retained for 3 years after your last interaction or until consent is withdrawn
• Website Analytics: Aggregated and anonymized data may be retained indefinitely for trend analysis
• Support Communications: Retained for 2 years after resolution for quality assurance and training

When data is no longer required, it is securely deleted or anonymized so that it can no longer be associated with you.

6. Data Security

We implement industry-standard security measures to protect your personal information from unauthorized access, alteration, disclosure, or destruction. These measures include:

• SSL/TLS encryption for all data transmitted between your browser and our servers
• PCI DSS-compliant payment processing through certified third-party processors
• Encrypted storage of sensitive data at rest
• Regular security audits and vulnerability assessments
• Access controls and authentication mechanisms for internal systems
• Employee training on data protection and security best practices

While we take extensive precautions to protect your data, no method of transmission or electronic storage is 100% secure. We cannot guarantee absolute security but are committed to promptly addressing any breach in accordance with applicable laws.

7. Your Rights and Choices

Depending on your jurisdiction, you may have the following rights regarding your personal information:

• Right of Access: Request a copy of the personal data we hold about you
• Right to Rectification: Request correction of inaccurate or incomplete data
• Right to Erasure: Request deletion of your personal data, subject to legal retention requirements
• Right to Restrict Processing: Request that we limit how we use your data
• Right to Data Portability: Request your data in a structured, machine-readable format
• Right to Object: Object to processing based on legitimate interests, including direct marketing
• Right to Withdraw Consent: Withdraw consent for processing at any time, without affecting the lawfulness of prior processing

To exercise any of these rights, please contact us using the details provided below. We will respond to your request within 30 days. We may need to verify your identity before processing your request.

8. California Privacy Rights (CCPA/CPRA)

If you are a California resident, you have additional rights under the California Consumer Privacy Act (CCPA) and California Privacy Rights Act (CPRA):

• Right to Know: You may request details about the categories and specific pieces of personal information we have collected about you
• Right to Delete: You may request that we delete your personal information, subject to certain exceptions
• Right to Opt-Out of Sale: We do not sell your personal information. If this practice ever changes, we will provide a clear opt-out mechanism
• Right to Non-Discrimination: We will not discriminate against you for exercising any of your CCPA/CPRA rights
• Right to Correct: You may request correction of inaccurate personal information
• Right to Limit Use of Sensitive Information: You may limit the use and disclosure of sensitive personal information

To submit a request, email us at support@npepspacetides.com or call us at +1 (518) 327-4392. We will verify your identity before processing your request and respond within 45 days.

9. International Data Transfers

NPepSpacetides is based in the United States. If you access our website from outside the U.S., please be aware that your data may be transferred to, stored, and processed in the United States, where data protection laws may differ from those in your jurisdiction. By using our services, you consent to the transfer of your information to the United States. We implement appropriate safeguards, including standard contractual clauses where applicable, to protect your data during international transfers.

10. Children’s Privacy

Our website and services are not intended for individuals under the age of 18. We do not knowingly collect personal information from minors. If we become aware that we have inadvertently collected data from a person under 18, we will take immediate steps to delete that information. If you believe a minor has provided us with personal data, please contact us immediately.

11. Third-Party Links

Our website may contain links to third-party websites, services, or applications that are not operated by NPepSpacetides. We are not responsible for the privacy practices of these external sites. We encourage you to review the privacy policies of any third-party services before providing your personal information.

12. Changes to This Privacy Policy

We may update this Privacy Policy periodically to reflect changes in our practices, technologies, or legal requirements. When we make material changes, we will notify you by updating the “Last Updated” date at the top of this page and, where appropriate, providing additional notice via email or a prominent announcement on our website. We encourage you to review this policy regularly.

13. Contact Us