Privacy Policy

Data controller: Blacktech LLC

Email (support): [email protected]

If you have any questions or requests about this Privacy Policy or your personal data, you can reach us at the email addresses above.

We collect information in three main ways:

1. Information you provide directly to us
2. Information collected automatically when you use the Website
3. Information we receive from third parties (for example, logistics providers)

2.1 Information you provide directly

Depending on how you use the Website, we may collect:

2.2 Information collected automatically

When you use the Website, some information is collected automatically:

2.3 Information from third parties

Depending on how we operate in your region, we may receive limited information about you from:

• Logistics and delivery partners, for example status updates about your shipment or delivery attempts.
• Payment or financial providers, if and when we support electronic payments.

We use the information described above for the following purposes:

1. Provide and maintain the Services
   • Create and manage your user account
   • Authenticate you when you log in
   • Maintain your cart, wishlist, and address book
2. Process and deliver orders
   • Prepare and process your orders
   • Arrange delivery or pickup
   • Send you updates about order status and delivery
3. Customer support and feedback
   • Respond to your questions, requests, and complaints
   • Receive and act on feedback to improve our products and services
4. AI assistant and recommendations
   • Generate and display responses from the chatbot/assistant
   • Recommend products and routines based on your questions and browsing
   • Improve the assistant's quality and relevance
5. Communications
   • Send you transactional notifications (order confirmations, shipping updates, account changes)
   • Send you promotional emails about special offers or new features (where allowed by law and your preferences)
6. Security, fraud prevention, and enforcement
   • Detect, prevent, and respond to fraudulent or abusive activity
   • Protect the security and integrity of our Services and users
   • Enforce our Terms of Use and this Privacy Policy
7. Analytics and service improvement
   • Understand how the Website is used so we can improve performance and design
   • Fix bugs and maintain reliability

We do not use the information collected to create profiles for third-party advertising networks, and we do not sell your personal data.

Where applicable privacy laws (such as the GDPR or UK GDPR) apply, we rely on one or more of the following legal bases to process your personal data:

• Contract: Processing is necessary to provide the Services you request, such as creating an account, placing an order, or delivering products.
• Legitimate interests: For example, to secure our Services, prevent fraud, understand how our Website is used, and improve user experience. We only rely on this basis where our interests are not overridden by your rights and freedoms.
• Consent: For certain optional processing, such as sending marketing communications, where required by law. You can withdraw consent at any time by contacting us or using opt-out mechanisms in our emails.
• Legal obligations: To comply with applicable laws, regulations, or legal processes (for example, tax or accounting requirements concerning orders).

We do not sell your personal data.

We may share your information with:

5.1 Service providers

We work with third-party service providers who help us operate the Website and provide the Services, such as:

• Hosting and infrastructure providers
• Customer support tools and email providers
• Analytics and monitoring services

These providers only process your data on our instructions and under appropriate confidentiality and security obligations.

5.2 Logistics, delivery, and commerce partners

To fulfill your orders, we may share relevant information with:

• Delivery and courier companies (for example, your name, address, phone number, and order details)
• Other commerce or operational partners where necessary to provide the Services (for example, payment or accounting providers if applicable in your region)

We share only the minimum information necessary to perform their services.

5.3 Legal and safety reasons

We may disclose information about you:

• If required to do so by law, regulation, legal process, or governmental request
• To protect the rights, property, or safety of Naay, our users, or others
• To investigate and defend against legal claims or allegations

5.4 Business transfers

If we are involved in a merger, acquisition, restructuring, or sale of assets, your information may be transferred as part of that transaction, subject to the same or equivalent privacy protections.

Our Services may be operated from and hosted on servers located in countries other than your own. This means your information may be transferred to, and processed in, countries that may have data protection laws different from those in your jurisdiction.

Where required by law, we take steps to ensure appropriate safeguards are in place for such transfers, such as using standard contractual clauses or equivalent mechanisms.

We retain your personal information for as long as necessary to:

• Provide the Services to you
• Fulfill the purposes described in this Privacy Policy
• Comply with legal, accounting, or reporting obligations
• Resolve disputes and enforce our agreements

In practice, this generally means:

• Account data: Kept for as long as your account is active. If you request deletion or delete your account, we will delete or anonymize your personal data, subject to any legal retention requirements.
• Order and transaction records: Kept for the period required by applicable tax, accounting, and consumer protection laws.
• Feedback and support communications: Kept for a reasonable period to manage support and improve our Services.
• AI chat content and reactions: Kept as long as necessary to provide the assistant feature and to improve its quality and safety.

Where we no longer need personal information, we will delete it or anonymize it.

Depending on your location and applicable privacy laws, you may have some or all of the following rights:

• Access: Request a copy of the personal data we hold about you.
• Correction: Request that we correct inaccurate or incomplete personal data.
• Deletion: Request that we delete your personal data, subject to legal obligations.
• Restriction: Request that we restrict the processing of your personal data in certain circumstances.
• Objection: Object to processing based on our legitimate interests, where applicable.
• Data portability: Request that we provide your data in a structured, commonly used, machine-readable format, where technically feasible.
• Withdraw consent: Where processing is based on your consent (for example, certain marketing communications), you can withdraw that consent at any time.

To exercise any of these rights, please contact us using the email addresses in Section 1. We may need to verify your identity before responding to your request.

8.1 Marketing preferences and cookies

• You can opt out of marketing emails by clicking the "unsubscribe" link in any promotional email we send you.
• You can control cookies through your browser settings. Note that disabling certain cookies may affect the functionality of the Website.

Even if you opt out of marketing messages, we may still send you transactional messages related to your orders or important service updates.

The Website is designed for a general audience and is not directed to children under 13 years of age (or the equivalent minimum age in your jurisdiction). We do not knowingly collect personal information from children under that age.

If you are a parent or guardian and believe that your child has provided us with personal information without your consent, please contact us. We will take steps to delete such information as required by applicable law.

We use reasonable technical and organizational measures to protect your personal information, including:

• Encryption in transit (HTTPS/SSL)
• Secure password hashing and authentication mechanisms
• Access controls on our systems
• Regular security monitoring and updates

However, no method of transmission over the internet or method of electronic storage is completely secure. While we strive to protect your personal data, we cannot guarantee absolute security.

If you believe your account or information may have been compromised, please contact us immediately.

The Website may include links or integrations with third-party services, such as:

• Instagram (for viewing our profiles or contacting us)
• WhatsApp (for contacting our support)
• Other social media or external websites

When you interact with these third-party services, their own privacy policies apply. We are not responsible for the privacy practices of those services, and we encourage you to review their policies before using them.

We may update this Privacy Policy from time to time. When we do, we will change the "Last updated" date at the top of this page. In some cases, we may provide additional notice (for example, by showing a message on the Website or sending you an email).

Your continued use of the Website after any changes means that you accept the updated Privacy Policy. If you do not agree to the changes, you should stop using the Website and, if applicable, request deletion of your account.

If you have questions, requests, or complaints about this Privacy Policy or our handling of your personal data, please contact us:

• Email (primary support): [email protected]

We will do our best to respond to your request within a reasonable time and in accordance with applicable law.