Privacy Statement

At Nathenley, accessible from www.nathenley.com, the privacy of our visitors and customers is one of our top priorities. This Privacy Statement outlines the types of information we collect, how we use it, and the rights you have in connection with your personal data. By using our website, you agree to the terms of this Privacy Statement.

1. Information We Collect

We collect a variety of information to provide and improve our services:

a. Personal Identification Information
When you place an order, sign up for our newsletter, or contact us, we may collect personal information such as:

• Full name

• Email address

• Phone number

• Shipping and billing addresses

• Payment information (processed securely by third-party gateways)

b. Non-Personal Information
We also collect data that does not personally identify you, including:

• Browser type

• Device information

• IP address

• Referring URL

• Pages visited

• Time spent on our website

c. Cookies and Tracking Technologies
We use cookies and similar technologies to enhance your browsing experience, remember preferences, analyze traffic, and serve relevant advertisements. Cookies are small data files stored on your device.

You may choose to disable cookies through your browser settings; however, some features of the website may not function properly as a result.

2. How We Use Your Information

We use the collected information for a variety of purposes:

• To process and fulfill your orders

• To communicate with you regarding your purchases or account

• To provide customer support

• To personalize your experience on our website

• To improve our products, services, and user experience

• To send marketing emails and promotional offers (only if you opt-in)

• To detect fraud or abuse

• To comply with legal obligations

Your information will never be sold or rented to third parties. We only share your information with trusted service providers (e.g., payment processors, shipping carriers) who assist in operating our business and are contractually bound to protect your data.

3. Legal Basis for Processing (GDPR Compliance)

If you are located in the European Economic Area (EEA), our legal basis for collecting and using your personal information will depend on the context. We will generally collect personal data from you only:

• Where we need the personal data to perform a contract with you

• Where the processing is in our legitimate interests and not overridden by your rights

• Where we have your consent

• Where we are legally obligated to do so

4. Data Retention

We retain your personal information only for as long as necessary to fulfill the purposes outlined in this policy unless a longer retention period is required or permitted by law. When we no longer need your information, we will delete or anonymize it.

5. Security of Your Information

We implement a variety of security measures to maintain the safety of your personal data:

• SSL encryption for data transmission

• Regular malware scanning

• Restricted access to personal data on a need-to-know basis

While we take all reasonable steps to secure your data, no method of transmission over the internet or method of electronic storage is 100% secure. Therefore, we cannot guarantee absolute security.

6. Your Data Rights

Depending on your jurisdiction, you may have the following rights concerning your personal data:

a. Right to Access
You can request a copy of the personal data we hold about you.

b. Right to Rectification
You can request that we correct any inaccurate or incomplete data.

c. Right to Erasure ("Right to Be Forgotten")
You may request that we delete your personal data, subject to legal and contractual obligations.

d. Right to Restrict Processing
You can request us to restrict the processing of your data under certain conditions.

e. Right to Data Portability
You may request a copy of your personal data in a structured, machine-readable format.

f. Right to Object
You can object to the processing of your personal data where it is based on legitimate interests, or direct marketing.

To exercise any of these rights, please contact us at [email protected].

7. Third-Party Services

We may use third-party services, including but not limited to:

• Payment gateways (e.g., PayPal, Stripe)

• Shipping providers (e.g., FedEx, DHL)

• Marketing platforms (e.g., Mailchimp)
  These providers have their own privacy policies, and we recommend reviewing them.

Links on our website may lead to external sites. We are not responsible for the content or privacy practices of those websites.

8. Children's Privacy

Our website is not intended for children under the age of 16. We do not knowingly collect personal information from minors. If you believe we may have collected such data, please contact us immediately.

9. International Data Transfers

We may transfer your personal data to countries outside your jurisdiction, including to servers located in the United States or other countries where our service providers are located. By using our services, you consent to such transfers.

We will ensure appropriate safeguards are in place to protect your data, in accordance with applicable data protection laws.

10. Email Marketing and Opt-Out

If you sign up for our newsletter, we may send you promotional emails about new products, offers, and updates. You can opt out at any time by clicking the "unsubscribe" link in any email or by contacting us at [email protected].

11. Changes to This Privacy Statement

We reserve the right to update this Privacy Statement at any time. When we do, we will revise the “Last Updated” date at the bottom of the page. We encourage users to check this page frequently to stay informed about how we are protecting their information.

Your continued use of the website after changes have been posted signifies your acceptance of the revised policy.