Privacy policy

PRIVACY POLICY

1. General Provisions

1.1. This Policy describes what personal data we collect, how and on what grounds we process it, as well as your rights under GDPR, CCPA/CPRA, and other applicable EU and U.S. acts.

1.2. The Platform may additionally be governed by the User Agreement, Public Offer and other documents. If special terms in those documents differ from this Policy, the special terms shall apply.

1.3. By using the Platform, you confirm that you have read this Policy and agree to it in full. If you do not agree, please stop using the Platform.

2. Categories of Data We Collect

3. Sources of Data

• directly from the user during registration, order placement, or when contacting support;
• from partner providers of payment and analytics services on the basis of concluded agreements;
• automatically through cookie files and SDKs of third-party tools (for details, see Section 6).
   

4. Legal Grounds for Processing

We process data only when one or more lawful grounds exist:

• performance of a contract with the user;
• compliance with legal obligations (tax/accounting records, KYC/AML);
• our "legitimate interest", for example — fraud prevention, protection of the rights of the Platform;
• your voluntary consent (cookie banner, marketing mailings).

5. Transfer and Disclosure of Information

5.1. Within the group of companies. Access to data may be granted to employees and affiliated organizations of NPPRTEAM on a "need-to-know" basis.

5.2. Third-party services. We engage:

• payment processors (for example — CloudPayments, Stripe);
• web analytics tools (Google Analytics);
• hosting and cloud service providers.

Transfers are carried out under an agreement containing EU Standard Contractual Clauses (SCCs) or equivalent mechanisms.

5.3. Cross-border transfers. Data may be processed outside your jurisdiction. By using the Platform, you give explicit consent to such transfer.

Limitation of liability. The Platform is not responsible for the actions of third parties to whom the user independently discloses their data (see clause 8 of the General Platform Rules).

6. Cookie and Other Tracking Technologies

6.1. We use:

• session cookie (for example — PHPSESSID) to maintain authorization;
• persistent cookie to remember preferences;
• pixels and analytics SDKs

6.2. On your first visit, a banner is displayed where you can accept or reject optional cookie.

7. Retention Period

Data is retained for as long as required for the purposes specified in Section 2, or longer if required by law (for example — 5 years for accounting documents). After the retention period expires, the data is deleted or anonymized.

8. Security and Limitation of Liability

8.1. We use encryption, access control, and incident monitoring.

8.2. However no method of data transmission over the Internet guarantees absolute security. To the maximum extent permitted by law, NPPRTEAM.SHOP excludes liability for unauthorized access by third parties that occurs outside our reasonable control.

9. Rights of Data Subjects

10. Changes

We may update the Policy from time to time. Material changes are published on this page at least 10 days before they take effect. Continued use of the Platform after the effective date means acceptance of the updated version.

11. Contacts

For any questions related to the processing of personal data, please contact: