Privacy Policy

Last Updated: Jan 18, 2026

1. Introduction

Welcome to Nandly ("we," "our," or "us"). We are committed to protecting your personal information and your right to privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit our website www.nandly.com and use our services.

If you have any questions or concerns about this policy or our practices regarding your personal information, please contact us at arun@duesta.com.

Registered Address:

618, 4th B Main, 6th A Cross, OMBR Layout, Banaswadi

2. Information We Collect

We collect information that you provide directly to us, information we obtain automatically when you use our services, and information from third-party sources.

2.1 Information You Provide

When you use our website, we may collect:

Contact Information: Name, email address, phone number, and mailing address
Account Information: Username, password, and account preferences
Communications: Information you provide when you contact us or participate in surveys

2.2 Information Collected Automatically

When you access our website, we automatically collect certain information about your device and usage:

Device Information: IP address, browser type, operating system, device identifiers
Usage Data: Pages viewed, time spent on pages, links clicked, and navigation paths
Location Data: General geographic location based on IP address
Cookies and Tracking Technologies: We use cookies, web beacons, and similar technologies to collect information about your browsing activity

3. How We Use Your Information

We use the information we collect for the following purposes:

Provide and Maintain Services: To operate our website and deliver the services you request
Process Transactions: To process payments and fulfill orders
Account Management: To create and manage your account
Communications: To send you updates, newsletters, marketing materials, and respond to inquiries
Personalization: To customize your experience and provide tailored content
Analytics: To understand how users interact with our website and improve our services
Security: To detect, prevent, and address technical issues and fraudulent activity
Legal Compliance: To comply with applicable laws, regulations, and legal processes

4. Legal Basis for Processing (GDPR)

If you are located in the European Economic Area (EEA), our legal basis for collecting and using your personal information depends on the data concerned and the context in which we collect it:

Consent: You have given us permission to process your information for specific purposes
Contract: Processing is necessary to fulfill our contractual obligations to you
Legal Obligation: Processing is required to comply with applicable laws
Legitimate Interests: Processing is necessary for our legitimate business interests, provided these do not override your rights

5. Cookies and Tracking Technologies

We use cookies and similar tracking technologies to enhance your experience on our website.

5.1 Types of Cookies We Use

Essential Cookies: Necessary for the website to function properly and enable core features such as user authentication and account access
Analytics Cookies: Help us understand how visitors use our website through Google Analytics
Advertising Cookies: Used to deliver relevant advertisements and measure campaign effectiveness

5.2 Managing Cookies

You can control cookies through your browser settings. Please note that disabling certain cookies may limit your ability to use some features of our website.

For more information about Google Analytics and how to opt-out, visit: https://tools.google.com/dlpage/gaoptout

6. Third-Party Services

We use the following third-party services that may collect, process, or store your information:

Google Analytics: For website analytics and usage statistics
Payment Processor: [PAYMENT_GATEWAY_NAME] for secure payment processing
Email Service Provider: [EMAIL_SERVICE_NAME] for sending communications and newsletters
Advertising Partners: For displaying advertisements on our website

These third parties have their own privacy policies governing their use of your information. We encourage you to review their privacy practices.

7. Data Sharing and Disclosure

We do not sell your personal information to third parties. We may share your information in the following circumstances:

Service Providers: With trusted third-party vendors who perform services on our behalf (payment processing, email delivery, hosting, analytics)
Business Transfers: In connection with a merger, acquisition, or sale of assets
Legal Requirements: When required by law, court order, or government request
Protection of Rights: To protect our rights, property, safety, or those of our users or the public
With Your Consent: When you have given us permission to share your information

8. Data Security

We implement appropriate technical and organizational measures to protect your personal information against unauthorized access, alteration, disclosure, or destruction. These measures include:

Encryption of data in transit using SSL/TLS protocols
Secure servers and regular security assessments
Access controls limiting employee access to personal data
Regular security training for personnel

However, no method of transmission over the internet or electronic storage is 100% secure. While we strive to protect your information, we cannot guarantee its absolute security.

9. Data Retention

We retain your personal information for as long as necessary to fulfill the purposes outlined in this Privacy Policy, unless a longer retention period is required by law.

Account Data: We retain your account information for [DATA_RETENTION_PERIOD] after account closure or [DATA_RETENTION_PERIOD] of inactivity, unless you request earlier deletion.

Marketing Data: If you unsubscribe from marketing communications, we will retain minimal information to honor your opt-out preference.

10. Your Rights and Choices

Depending on your location, you may have the following rights regarding your personal information:

10.1 General Rights

Access: Request a copy of the personal information we hold about you
Correction: Request correction of inaccurate or incomplete information
Deletion: Request deletion of your personal information
Objection: Object to our processing of your personal information
Restriction: Request restriction of processing your information
Portability: Request transfer of your information to another service provider
Withdraw Consent: Withdraw consent where processing is based on consent

10.2 How to Exercise Your Rights

To exercise any of these rights, please contact us at arun@duesta.com. We will respond to your request within a reasonable timeframe as required by applicable law.

10.3 GDPR Rights

If you are located in the EEA, you have additional rights under the General Data Protection Regulation (GDPR):

Right to lodge a complaint with your local data protection authority
Right to object to processing based on legitimate interests
Right to data portability in a structured, machine-readable format

Data Protection Contact: arun@duesta.com

11. International Data Transfers

Your information may be transferred to and processed in countries other than your country of residence, including India and other jurisdictions where our service providers operate. These countries may have data protection laws that differ from those in your country.

When we transfer personal information internationally, we implement appropriate safeguards to protect your data, including:

Standard Contractual Clauses approved by regulatory authorities
Ensuring service providers adhere to recognized data protection frameworks
Implementing additional security measures for cross-border transfers

For transfers from the EEA, we ensure compliance with GDPR requirements through appropriate transfer mechanisms.

12. Children's Privacy

Our website is not intended for children under the age of 18. We do not knowingly collect personal information from children under 18. If you are a parent or guardian and believe your child has provided us with personal information, please contact us immediately.

We take special care to protect the privacy of children. If you are under 18 years of age, please obtain parental consent before using our services or providing any personal information. Parents and guardians can contact us at arun@duesta.com to review, modify, or delete their child's information.

12.1 Children's Health Information

We recognize that health information of minors requires special protection. If we collect health information from individuals under 18:

We obtain verifiable parental or guardian consent before collecting such information
Parents and guardians have the right to review, modify, or delete their child's health information
We limit collection to information reasonably necessary to provide healthcare services
We do not condition a child's participation in activities on disclosure of more health information than is necessary

Parents or guardians can contact us at arun@duesta.com to exercise their rights regarding their child's information.

13. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, technology, legal requirements, or other factors. We will notify you of any material changes by:

Posting the updated policy on this page with a new "Last Updated" date
Sending an email notification to registered users
Displaying a prominent notice on our website

We encourage you to review this Privacy Policy periodically. Your continued use of our services after changes are posted constitutes your acceptance of the updated policy.

14. Contact Us

If you have questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us:

Email: arun@duesta.com
Phone: +91 98863 66079
Address: