This Privacy Policy describes how NGHBRZ (“we,” “us,” or “our”) collects, uses, and protects your personal information in compliance with the General Data Protection Regulation (GDPR) and other applicable data protection laws. Please read this Privacy Policy carefully to understand our practices regarding your personal data.

1. Information We Collect: We may collect and process the following types of personal information:
   
   1. Information you provide: When you use our services or interact with us, you may voluntarily provide us with personal information, such as your name, email address, contact details, and other information necessary for the provision of our services.
   2. Automatically collected information: When you visit our Website, we may automatically collect certain information, including your IP address, device information, browser type, and usage data. We may use cookies or similar technologies to collect this information.

2. Use of Personal Information: We use the personal information we collect for the following purposes:
   
   1. To provide and improve our services: We may use your personal information to operate, maintain, and improve our services, to personalize your experience, and to respond to your inquiries or requests.
   2. Communication and marketing: We may use your contact information to send you promotional materials, updates, or newsletters. You can opt out of receiving these communications at any time.
   3. Legal obligations: We may process your personal information to comply with legal obligations, such as responding to lawful requests or orders from public authorities.

3. Legal Basis for Processing: We will only process your personal information when we have a valid legal basis under the GDPR, including:
   
   1. Consent: You have given us explicit consent to process your personal information for specific purposes.
   2. Contractual necessity: The processing is necessary for the performance of a contract between you and us or for taking pre-contractual steps at your request.
   3. Legitimate interests: The processing is necessary for our legitimate interests, such as providing and improving our services, conducting analytics, and marketing our products or services.

4. Data Sharing: We may share your personal information with third parties in the following circumstances:
   
   
   1. Service providers: We may engage trusted third-party service providers to assist us in providing and improving our services. These service providers are contractually obligated to process personal information only on our behalf and in compliance with this Privacy Policy.
   2. Legal compliance: We may disclose your personal information if required by law or in response to valid legal requests, such as court orders, subpoenas, or government investigations.
   3. Business transfers: In the event of a merger, acquisition, or sale of all or a portion of our assets, your personal information may be transferred as part of the transaction. We will notify you via email or prominent notice on our Website if your personal information becomes subject to a different privacy policy.

5. Data Transfers: If you are located outside the European Economic Area (EEA), your personal information may be transferred and processed in countries that may not have the same level of data protection laws as your jurisdiction. We will take appropriate safeguards to ensure the protection of your personal information in accordance with applicable data protection laws.

6. Data Security: We implement technical and organizational measures to protect your personal information against unauthorized access, disclosure, alteration, or destruction. However, no data transmission or storage system can be guaranteed to be 100% secure. If you have reason to believe that your interaction with us is no longer secure, please notify us immediately.

7. Your Rights: Under the GDPR, you have certain rights regarding your personal information. These include the right to:
   
   1. Access: Request access to the personal information we hold about you.
   2. Rectification: Request correction of inaccurate or incomplete personal information.
   3. Erasure: Request the deletion of your personal information, subject to legal obligations.
   4. Restriction: Request the restriction of processing of your personal information under certain circumstances.
   5. Data portability: Request to receive a copy of your personal information in a commonly used, machine-readable format.
   6. Objection: Object to the processing of your personal information for certain purposes, including direct marketing.
   7. Withdrawal of consent: If we rely on your consent for processing, you have the right to withdraw your consent at any time.

To exercise your rights or if you have any questions or concerns about our data practices, please contact us using the contact information provided below.

8. Data Retention: We will retain your personal information for as long as necessary to fulfill the purposes outlined in this Privacy Policy unless a longer retention period is required or permitted by law.

9. Changes to this Privacy Policy: We may update this Privacy Policy from time to time to reflect changes in our data practices. We will notify you of any material changes by posting the updated Privacy Policy on our Website or by sending you a notification. We encourage you to review this Privacy Policy periodically.

10. Contact Us: If you have any questions, comments, or requests regarding this Privacy Policy or our data practices, please contact us at info@nghbrz.com.

Effective Date: 16 October 2023