Privacy policy

Last updated: June 2026

This Privacy Policy explains how HDM Digital LLC (doing business as "Netmantos") ("we", "us", "our") collects, uses, and protects your personal data when you visit netmantosfc.com or contact us through any of our channels.

By using this website, you acknowledge that you have read and understood this policy.

1. Who we are

HDM Digital LLC is a limited liability company organised under the laws of the State of New Mexico, United States.

Data Controller: HDM Digital LLC
Contact: contact@netmantosfc.com

For the purposes of the General Data Protection Regulation (Regulation (EU) 2016/679, "GDPR") and the UK GDPR, HDM Digital LLC is the data controller of personal data collected through this website. For the purposes of the California Consumer Privacy Act, as amended by the California Privacy Rights Act (collectively, "CCPA"), HDM Digital LLC is the business responsible for the processing of personal information described below.

2. What data we collect

Data you provide directly:

Contact details: name, email address, phone number
Shipping and billing address
Order details: products purchased, customisation details (name, number), delivery notes
Messages you send us via email, WhatsApp, or contact forms

Data collected automatically:

Device and usage data: IP address, browser type, operating system, pages visited, time and date of visit
Approximate location data derived from IP address
Cookies and similar technologies (see Section 8)

We do not intentionally collect special category data such as health, biometric, or government identifier information from our customers. We do not knowingly collect personal data from children under the age of 16 (under 13 in the United States).

3. Why we collect your data and the legal basis

Purpose	Legal basis (GDPR / UK GDPR)
Processing and fulfilling your order	Performance of a contract
Sending order confirmations and shipping updates	Performance of a contract
Handling returns, exchanges, and complaints	Performance of a contract / Legal obligation
Responding to questions and support requests	Legitimate interests
Fraud prevention and transaction verification	Legitimate interests / Legal obligation
Tax, accounting, and record-keeping	Legal obligation
Marketing communications	Consent. You may opt out at any time.

4. How we share your data

We share your data only with trusted service providers who help us operate our business, including:

E-commerce platform: Shopify Inc. (host of this online store)
Payment processing: Shopify Payments, operated by Stripe Inc., a PCI-DSS Level 1 certified provider. We do not store, see, or access your card details at any point.
Shipping and fulfilment partners: postal carriers and last-mile delivery partners required to deliver your order
Customer communication tools: email service providers, WhatsApp Business, and helpdesk software
Analytics and advertising: measurement and attribution tools (only with your consent, where required)

These providers act as data processors and are bound by appropriate data protection agreements. We do not sell your personal data to third parties. We do not share your personal data with third parties for cross-context behavioural advertising without your consent.

We may also disclose data when required by law, court order, or to protect our legal rights, prevent fraud, or enforce our Terms of Service.

5. Data Security

We take the security of your personal data seriously. We implement industry-standard technical and organisational measures to protect your information, including:

Encryption: SSL/TLS encryption protects data during transmission between your browser and our site.
Secure Payments: Payment processing is handled exclusively by Shopify Payments (operated by Stripe Inc.), a PCI-DSS Level 1 certified provider. We do not store, see, or access your card details at any point.
Access Control: Access to personal data is strictly limited to personnel who need it to perform their duties.
Fraud monitoring: automated and manual review of orders to detect suspicious activity.

6. International data transfers

HDM Digital LLC is established in the United States. When you place an order from the European Union, the European Economic Area, the United Kingdom, or any other jurisdiction outside the United States, your personal data may be transferred to and processed in the United States and other countries where our service providers operate (including Canada).

Where personal data is transferred outside the EU/EEA or the UK, we rely on appropriate safeguards as required by the GDPR and UK GDPR, including the European Commission's Standard Contractual Clauses (SCCs) and, where applicable, the UK International Data Transfer Addendum. Copies of these safeguards are available on request at contact@netmantosfc.com.

7. How long we keep your data

Order and invoice records: retained for the period required by applicable tax and commercial law (typically 5-10 years depending on jurisdiction)
Customer support messages: kept for up to 3 years from the date of your last contact
Marketing data: until you withdraw consent or opt out, and no longer than 2 years from your last interaction
Fraud prevention logs: kept for up to 5 years as required to detect and prevent recurring fraudulent activity

8. Cookies

We use cookies and similar technologies to enable essential site functions, remember your preferences, and measure performance. You can manage your cookie preferences through our cookie banner or your browser settings. For more information on the cookies we use and how to control them, refer to our cookie management tool on this site.

9. Your rights

If you are based in the EU/EEA or the UK (GDPR / UK GDPR), you have the following rights:

Access: request a copy of the personal data we hold about you
Rectification: ask us to correct inaccurate or incomplete data
Erasure: request deletion of your data where there is no legitimate reason for us to continue processing it
Data portability: receive your data in a structured, commonly used, machine-readable format
Object or restrict: object to or request restriction of certain processing activities
Withdraw consent: where processing is based on consent, you may withdraw it at any time without affecting the lawfulness of prior processing
Lodge a complaint with the competent data protection supervisory authority (in the EU, the supervisory authority of your country of residence; in the UK, the Information Commissioner's Office at ico.org.uk)

If you are a resident of California or another U.S. state with comprehensive privacy laws (CCPA / CPRA and equivalent state statutes), you have the following rights:

Right to know what personal information we collect, use, disclose, or sell about you
Right to delete personal information we have collected from you, subject to certain exceptions
Right to correct inaccurate personal information
Right to opt out of the sale or sharing of personal information (we do not sell or share personal information for cross-context behavioural advertising)
Right to limit the use of sensitive personal information
Right to non-discrimination for exercising your privacy rights

To exercise any of these rights, contact us at contact@netmantosfc.com. We will respond within 30 days (45 days for CCPA requests, extendable once with notice). We may need to verify your identity before processing your request.

10. Children's privacy

Our website and products are not directed at children. We do not knowingly collect personal data from children under the age of 16 (under 13 in the United States). If you believe a child has provided us with personal data, please contact us and we will promptly delete it.

11. Changes to this policy

We may update this policy from time to time to reflect changes in our practices or for legal reasons. We will notify you of any significant changes by posting the new policy on this page and updating the "Last updated" date at the top. We encourage you to review this page periodically.