Privacy Policy.

1. Who we are and what this policy covers

This Privacy Policy explains how NatalizSoft ("NatalizSoft", "we", "us") handles personal information when you visit natalizsoft.com, create an account, place an order, request a quote or otherwise contact us. By using the site you acknowledge the practices described here.

2. Information we collect

• Information you give us: name, company, email address, phone number, shipping address, account password (stored only as a salted cryptographic hash), order contents, delivery notes, and the content of enquiries you send.
• Information collected automatically: IP address, browser and device type, pages requested, date and time, and referring URL, recorded in server and security logs.
• Cookies: strictly necessary first-party cookies only. See our Cookie Policy.
• We do not collect payment card numbers on this website, and we do not knowingly collect sensitive personal information.

3. How we use information

Where the GDPR or UK GDPR applies, our legal bases are performance of a contract, our legitimate interests in operating and securing our business, compliance with legal obligations and, where required, your consent.

• To process, fulfil, invoice and support your orders and quote requests.
• To create and secure your account and authenticate you.
• To communicate with you about orders, service issues and enquiries.
• To detect, investigate and prevent fraud, abuse and security incidents.
• To comply with legal, tax and accounting obligations and to enforce our terms.

4. How we share information

We do not sell personal information and we do not share it for cross-context behavioural advertising. We disclose information only to:

• Service providers who act on our instructions, such as cloud hosting, shipping carriers, payment and invoicing providers and email delivery services, under confidentiality and data-protection obligations.
• Professional advisers, insurers and auditors where reasonably necessary.
• Authorities or other parties when required by law, legal process or to protect the rights, property or safety of NatalizSoft, our customers or others.
• A successor entity in connection with a merger, acquisition or sale of assets, subject to this policy.

5. Data retention

We keep order and invoicing records for as long as required by tax and accounting law, typically seven years. Account information is kept while your account is active. Enquiries are kept for up to 24 months. Abandoned carts are deleted after 60 days, and sign-in sessions expire after 14 days. Security logs are retained for a limited period and then deleted or aggregated.

6. Security

Personal information is encrypted in transit using TLS and encrypted at rest using customer-managed encryption keys. Our database is not reachable from the public internet, access is restricted on a least-privilege basis and security-relevant activity is logged. No method of transmission or storage is completely secure, so we cannot guarantee absolute security. See our Security page for details.

7. Your privacy rights

Depending on where you live, including California (CCPA/CPRA), Virginia, Colorado, Connecticut, Utah and other US states, and the EEA, UK and Switzerland, you may have the right to:

• Know and access the personal information we hold about you.
• Correct inaccurate information.
• Delete your information, subject to legal retention requirements.
• Obtain a portable copy of your information.
• Object to or restrict certain processing, and withdraw consent where processing is based on consent.
• Not be discriminated against for exercising your rights.
• Appeal a decision we make about your request and lodge a complaint with your data protection authority or state attorney general.

8. How to exercise your rights

Email privacy@natalizsoft.com from the address associated with your account or order. We will verify your identity before acting and respond within the period required by applicable law (generally 30 to 45 days). Authorised agents may submit requests with proof of authority.

9. International transfers

Our services are hosted in the United States. If you access the site from outside the United States, your information will be transferred to and processed in the United States, where data protection laws may differ from those in your country. Where required, we rely on appropriate safeguards for such transfers.

10. Children

This site is intended for business customers and adults. We do not knowingly collect personal information from children under 16. If you believe a child has provided us with information, contact us and we will delete it.

11. Do Not Track and Global Privacy Control

We do not track visitors across third-party websites and do not use advertising cookies, so there is no tracking to opt out of. We honour Global Privacy Control signals to the extent applicable.

12. Changes to this policy

We may update this policy from time to time. The "last updated" date shows when it was most recently revised. Material changes will be highlighted on this page.

13. Contact

Questions about privacy can be sent to privacy@natalizsoft.com.