This Privacy Policy describes how NATTAUP (the “Site” or “we”) collects, uses, and discloses your Personal Information when you visit or make a purchase from the Site.
When you purchase from our store, we collect personal information you provide, such as your name, address, email address, and payment details (including credit card numbers, billing address, and phone number) as part of the transaction process.
When you browse our store, we automatically collect your computer’s IP address, browser version, operating system, time zone, and cookie information to analyze your browsing behavior and optimize your site experience.
Email Marketing (where applicable): With your permission, we may send you emails about new products, promotions, and other updates.
When you provide personal information to complete a transaction, verify your credit card, place an order, arrange delivery, or process a return, you implicitly consent to our collection and use of such information for those specific purposes only.
If we collect personal information for secondary purposes (e.g., marketing), we will either request your explicit consent directly or provide you with an opportunity to opt out.
If you change your mind after opting in, you may withdraw your consent for us to contact you or continue collecting, using, or disclosing your information at any time by contacting us at:
Email: support@nattaup.com
We may disclose your personal information in the following cases:
- As required by law or to comply with legal procedures;
- In response to subpoenas, search warrants, or other lawful requests for information;
- To protect our rights, property, or the safety of our users;
- If you violate our Terms of Service.
Our store is hosted on Shopify Inc., which provides the e-commerce platform for selling our products and services. Your data is stored securely via Shopify’s data storage, databases, and applications on servers protected by firewalls.
Payment Security: If you use a direct payment gateway, Shopify stores your credit card data encrypted under the Payment Card Industry Data Security Standard (PCI-DSS). Transaction data is retained only as long as necessary to complete the transaction and is then deleted.
We may share your information with third-party providers (e.g., logistics, marketing, analytics) solely to the extent necessary for them to perform their services. Some providers (e.g., payment gateways, advertising platforms) have their own privacy policies; we recommend reviewing these to understand how your data is handled.
Note: If a provider is located in a different jurisdiction, your information may be subject to the laws of that jurisdiction (e.g., the U.S. Patriot Act).
We take reasonable precautions and follow industry best practices to protect your personal information from unauthorized access, use, disclosure, alteration, or destruction:
- Credit card information is encrypted during transmission via Secure Sockets Layer (SSL) and stored with AES-256 encryption;
- We comply with PCI-DSS standards and other recognized industry security standards.
We use cookies to enhance your browsing experience. Below are the main cookies we use and their functions:
| Name |
Function Description |
| _session_id |
Stores session information (e.g., referrer, landing page) |
| _secure_session_id |
Ensures secure navigation through the storefront |
| cart |
Stores cart contents with a 2-week persistence |
| storefront_digest |
Determines access to password-protected pages |
| Name |
Function Description |
| _shopify_visit |
Records visit counts (persists for 30 minutes) |
| _shopify_uniq |
Counts visits by individual customers (expires next day midnight) |
| Google Analytics |
Analyzes site usage to optimize user experience |
You may disable cookies via your browser settings, though this may affect site functionality. For third-party advertising cookies, opt out via:
Digital Advertising Alliance Opt-Out Portal:
http://optout.aboutads.info/
The Site is not intended for individuals under 18 years old. We do not knowingly collect personal information from children. If you are a guardian and believe we have collected your child’s information, contact us to request deletion using the details above.
You have the right to access, correct, delete, or port your personal information. Exercise these rights by contacting us. Your information may be transferred outside the EEA (e.g., to Canada or the U.S.) for storage, with transfers complying with GDPR standards.
You have the right to know about the personal information we hold, request its deletion or portability, and designate an authorized agent to act on your behalf.
We reserve the right to update this Privacy Policy at any time. Material changes will be posted on the Site and effective immediately. We will notify you of significant updates to ensure you are aware of how we collect, use, and disclose your information.
For requests to access, correct, or delete your personal information, or for any questions or complaints, contact us at:
Email: support@nattaup.com
This Policy applies to all users of NATTAUP and is governed by our company’s interpretation. By using the Site, you acknowledge and agree to these terms.
