Privacy Policy

Last updated: September 2026

This Privacy Policy explains how HDM Digital LLC (doing business as "Netmantos") ("we", "us", "our") collects, uses, and protects your personal data when you visit netmantosfc.com or contact us through any of our channels.

By using this website, you acknowledge that you have read and understood this policy.

1. Who we are (Data Controller)

HDM Digital LLC (doing business as "Netmantos") is a limited liability company organised under the laws of the State of New Mexico, United States. For the purposes of the GDPR and the UK GDPR, HDM Digital LLC is the data controller of personal data collected through this website.

Contact: contact@netmantosfc.com

2. What data we collect

Data you provide directly:

• Contact details: name, email address, phone number
• Shipping and billing address
• Order details: products purchased, personalisation details (name, number), delivery notes
• Messages you send us via email, or contact forms

Data collected automatically:

• Device and usage data: IP address, browser type, operating system, pages visited, time and date of visit
• Location data: approximate geolocation derived from IP address
• Cookies and similar technologies (see Section 8 below)

We do not intentionally collect special category data such as health or biometric information.

3. Why we collect your data and the legal basis

4. How we share your data

We share your data only with trusted service providers who help us operate our business, including:

• E-commerce and payment platforms (Shopify and integrated payment gateways like Stripe)
• Shipping carriers and fulfilment providers
• Customer communication tools

These providers act as data processors and are bound by appropriate data protection agreements. We do not sell your personal data to third parties.

We may also disclose data when required by law or to protect our legal rights.

5. Data Security

We take the security of your personal data seriously. We implement industry-standard technical and organizational measures to protect your information, including:

• Encryption: SSL/TLS encryption protects data during transmission between your browser and our site.
• Secure Payments: Payment processing is handled exclusively by Stripe, a PCI-DSS Level 1 certified provider. We do not store, see, or access your card details at any point.
• Access Control: Access to personal data is strictly limited to those who need it to perform their duties.

6. International data transfers

Your data may be processed in countries outside the EU/EEA, including Canada and the United States, where Shopify Inc. and its service providers operate. In such cases, we implement appropriate safeguards to ensure your data remains protected in accordance with GDPR requirements.

7. How long we keep your data

• Order and invoice records: retained for as long as required by applicable law (typically 5-10 years depending on jurisdiction)
• Customer support messages: kept for up to 3 years from the date of your last contact
• Marketing data: until you withdraw consent or opt out, and no longer than 2 years from your last interaction

8. Cookies

We use cookies and similar technologies to enable essential site functions, remember your preferences, and measure performance. You can manage your cookie preferences through our cookie banner or your browser settings. For more information on the cookies we use and how to control them, refer to our cookie management tool on this site.

9. Your rights under the GDPR

If you are based in the EU/EEA or UK, you have the following rights regarding your personal data:

• Access: Request a copy of the personal data we hold about you.
• Rectification: Ask us to correct inaccurate or incomplete data.
• Erasure: Request deletion of your data where there is no legitimate reason for us to continue processing it.
• Data portability: Receive your data in a structured, commonly used, machine-readable format.
• Object or restrict: Object to or request restriction of certain processing activities.
• Withdraw consent: Where processing is based on consent, you may withdraw it at any time without affecting the lawfulness of prior processing.

To exercise any of these rights, contact us at contact@netmantosfc.com. We will respond within 30 days.

You also have the right to lodge a complaint with the competent data protection supervisory authority. In the European Union, this is the supervisory authority of your country of residence; the list of national authorities is published by the European Data Protection Board at edpb.europa.eu. UK residents may contact the Information Commissioner's Office (ICO) at ico.org.uk.

10. Mobile app (iOS and Android)

We offer a mobile app that mirrors this store. The app is built and operated on our behalf by FoxAppy, acting as a data processor. When you install and use the app, we process:

• Device and push data: device model, operating system version, app version, language, and a push notification token issued by Apple or Google. The token identifies your device so notifications can be delivered, and does not identify you by name.
• App activity: products viewed, items added to the cart, orders placed, and screens visited inside the app. We use this to run the service, recover abandoned carts, and measure how the app is used.
• Account and order data: the same data described in Section 2, when you sign in or place an order through the app.

The legal bases are the same as in Section 3: performance of a contract for orders and account features, legitimate interests for security and app analytics, and consent for push notifications.

Push notifications. They are optional. You choose whether to allow them when the app first asks, and you can turn them off at any time in your device settings, under Notifications. Turning them off does not affect your ability to use the app or place an order.

Data shared with the platforms. Apple and Google process the push token to route notifications to your device, and receive standard install and crash data through their app stores. FoxAppy processes app data solely to operate the app on our behalf, under a data protection agreement.

Deleting your data. You can uninstall the app at any time, which stops all notifications. To request deletion of your account and the data linked to it, write to contact@netmantosfc.com as described in Section 9.

11. Changes to this policy

We may update this policy from time to time to reflect changes in our practices or for legal reasons. We will notify you of any significant changes by posting the new policy on this page and updating the "Last updated" date at the top. We encourage you to review this page periodically.

12. Contact

Email: contact@netmantosfc.com