Data Controller

Nalu Research is the controller responsible for personal information processed through this website and in connection with customer accounts, orders, and customer communications.

For privacy questions or requests, contact us at [email protected].

Information We Collect

Depending on how you interact with Nalu Research, we may collect:

• Contact information, including your name, email address, phone number, and shipping address.
• Account-request and account information provided during registration, review, or verification.
• Order details, purchase history, transaction status, and customer-support communications.
• Device, browser, IP address, and website-use information collected through cookies or similar technologies.

How We Use Information

We may use personal information to:

• Review account requests and manage account access.
• Process, fulfill, ship, and support orders.
• Communicate about your account, order, support request, or policy updates.
• Help maintain website security, prevent fraud, and enforce our Terms & Conditions and Acceptable Use Policy.
• Improve website functionality, customer experience, and internal operations.
• Comply with applicable legal, tax, accounting, regulatory, and recordkeeping obligations.

Lawful Bases for Processing

Where the General Data Protection Regulation (“GDPR”) applies, we process personal information only where a lawful basis exists. Depending on the circumstances, this may include:

• Performance of a contract or steps taken at your request before entering into a contract, including account review, order processing, payment, and shipping.
• Compliance with legal obligations, including tax, accounting, fraud-prevention, and recordkeeping requirements.
• Our legitimate interests in operating, securing, improving, and protecting our website, services, customers, and business.
• Your consent, where consent is required or requested, including for certain non-essential cookies or communications.

Payment Information

Payment transactions are processed through the payment method or provider presented at checkout. Nalu Research does not request payment-card details by email. Payment providers may collect and process information according to their own privacy policies and terms.

How We Share Information

Nalu Research does not sell personal information. We may share information only as reasonably necessary with service providers that help us operate the website, process payments, fulfill orders, provide shipping or communication services, maintain security, or comply with legal obligations.

We may also disclose information where required by law, legal process, or a valid government request, or where reasonably necessary to protect the rights, safety, property, or security of Nalu Research, our customers, or others.

Cookies & Similar Technologies

Our website uses cookies and similar technologies to provide essential functions such as account access, cart functionality, checkout, security, and session management. We may also use these technologies to understand website performance and general usage.

Where required by applicable law, consent is requested before non-essential cookies are placed. You may control cookies through your browser settings; however, disabling certain cookies may affect account, cart, checkout, or other website functions.

International Data Transfers

Nalu Research operates from the United States. If you access our website or provide information from outside the United States, your information may be transferred to, stored, and processed in the United States or other locations where our service providers operate.

Where the GDPR applies, we will use appropriate safeguards for international transfers when required, such as contractual protections recognized under applicable data-protection law.

Data Retention

We retain personal information only for as long as reasonably necessary for the purposes described in this policy, including account administration, order fulfillment, customer support, security, dispute resolution, and legal, tax, accounting, or recordkeeping requirements.

Security

Nalu Research uses reasonable administrative, technical, and operational safeguards intended to protect personal information. However, no online system, transmission, or storage method can be guaranteed completely secure.

Your Privacy Rights

Depending on your location and applicable law, you may have the right to request access to, correction of, deletion of, or restriction of processing of your personal information. You may also have the right to object to certain processing or request data portability.

Where processing is based on consent, you may withdraw consent at any time. Withdrawal does not affect the lawfulness of processing completed before consent was withdrawn. We may need to verify your identity before responding to a request.

GDPR Complaints

If you are located in the European Economic Area, United Kingdom, or another jurisdiction with similar rights, you may have the right to lodge a complaint with your local data-protection supervisory authority. We encourage you to contact us first so we can try to resolve your concern directly.

Third-Party Links

Our website may contain links to third-party websites or services. Nalu Research is not responsible for the privacy practices, content, or security of those third-party sites. Please review their privacy policies before providing information to them.

Policy Updates

We may update this Privacy Policy from time to time. The revised version will be posted on this page with an updated effective date. Continued use of the website after changes are posted is subject to the revised policy.