Privacy Policy

PRIVACY POLICY

Last updated: July, 2026

NATTA operates the online store available at https://trynatta.com, together with its related pages, content, features, products, services, and communications (collectively, the “Services”). The Services are operated by Natta, doing business as NATTA (“NATTA,” “we,” “us,” or “our”).

Our store is hosted by Shopify, which provides the ecommerce platform that allows us to offer the Services to you.

This Privacy Policy explains how we collect, use, disclose, retain, and protect personal information when you visit or use the Services, place an order, create an account, sign up for marketing, submit a review, or otherwise communicate with us.

If this Privacy Policy conflicts with our Terms of Service regarding the collection, use, or disclosure of personal information, this Privacy Policy will control.

Please read this Privacy Policy carefully. By using the Services, you acknowledge that you have read and understood the practices described below.

1. PERSONAL INFORMATION WE COLLECT

“Personal information” means information that identifies you or can reasonably be linked to you. It does not include information that has been anonymized or de-identified so that it can no longer reasonably identify you.

Depending on how you interact with NATTA, where you live, and what the law permits or requires, we may collect the following categories of personal information:

Contact information
Your name, email address, telephone number, billing address, shipping address, and other delivery details.

Order and transaction information
Products you view, add to your cart, purchase, subscribe to, return, request a refund for, or cancel; order history; discounts; transaction dates; and fulfillment information.

Payment information
Payment-card details, billing information, payment method, payment authorization, transaction confirmation, and related payment information. Payments are generally processed by Shopify and other payment providers, and NATTA may not directly store complete payment-card numbers.

Account information
Your login credentials, account settings, saved addresses, subscription preferences, and account activity.

Communications
Information you provide when you contact customer support, respond to a survey, submit a return or guarantee request, participate in a promotion, or otherwise communicate with us.

Reviews and submissions
Reviews, testimonials, photographs, videos, comments, and other content you choose to submit. This may include information you voluntarily share about your sleep, wellness routine, or experience with NATTA.

Device and technical information
Your IP address, browser type, device type, operating system, network connection, device identifiers, and similar technical information.

Usage information
Information about how you browse and interact with the Services, including pages viewed, links clicked, searches, referral pages, time spent on pages, cart activity, and interactions with emails or advertisements.

Marketing and preference information
Your marketing preferences, consent choices, interests, and information used to personalize communications or advertising.

Inferences
Inferences drawn from the information described above, such as likely interests, product preferences, or shopping behavior.

2. HOW WE COLLECT PERSONAL INFORMATION

We may collect personal information from the following sources:

Directly from you
For example, when you place an order, create an account, subscribe, contact support, sign up for marketing, submit a review, or make a privacy request.

Automatically
We and our service providers may collect information through cookies, pixels, tags, software development kits, local storage, and similar technologies when you use the Services.

From Shopify and service providers
We may receive information from Shopify, payment processors, subscription platforms, fulfillment providers, shipping carriers, customer-support tools, analytics providers, advertising platforms, review providers, fraud-prevention services, and other vendors that support our business.

From business and marketing partners
We may receive information from partners, social-media platforms, affiliates, referral partners, or advertising networks, where permitted by law.

From public or third-party sources
We may receive information from public records or other lawful third-party sources for fraud prevention, verification, legal compliance, or business purposes.

3. HOW WE USE PERSONAL INFORMATION

Depending on your interaction with the Services, we may use personal information for the following purposes:

Providing and improving the Services
To operate the Website, display products, remember preferences, personalize your experience, improve navigation, analyze performance, develop products and services, and understand how customers use the Services.

Processing orders and payments
To process payment, confirm orders, fulfill purchases, arrange shipping, provide tracking, process returns and refunds, administer our money-back guarantee, and maintain transaction records.

Managing accounts and subscriptions
To create and maintain accounts, manage subscription renewals, process recurring payments, send subscription notices, and handle cancellations or changes.

Customer support and communications
To respond to questions, provide support, resolve complaints, communicate about orders, and maintain our relationship with you.

Marketing and advertising
To send promotional emails or text messages where permitted, display advertisements, measure advertising performance, and personalize marketing based on your interactions with NATTA or other websites and services.

Reviews and community content
To enable, moderate, display, and respond to reviews, testimonials, and other submissions, subject to our Terms of Service and applicable law.

Security and fraud prevention
To authenticate users, protect accounts and payments, detect and investigate fraud, prevent misuse, maintain the security of the Services, and protect NATTA, customers, and third parties.

Legal and regulatory purposes
To comply with applicable law, respond to legal process, maintain required records, enforce our policies and agreements, investigate potential violations, and establish, exercise, or defend legal claims.

Business operations
To perform accounting, auditing, analytics, research, internal reporting, corporate governance, and other legitimate business functions.

4. COOKIES AND SIMILAR TECHNOLOGIES

We, Shopify, and our service providers may use cookies and similar technologies to:

- operate essential Website functions;
- keep your cart and session active;
- remember settings and preferences;
- understand Website traffic and performance;
- prevent fraud and improve security;
- personalize content and recommendations;
- measure marketing campaigns; and
- deliver or measure targeted advertising where permitted.

Depending on your location, you may be able to manage non-essential cookies through the cookie banner or privacy controls available on the Website.

Your browser may also allow you to block or delete cookies. Blocking certain cookies may affect Website functionality.

Where legally required, we will request consent before using non-essential cookies or similar tracking technologies.

5. HOW WE DISCLOSE PERSONAL INFORMATION

We may disclose personal information for legitimate business purposes and as permitted or required by law, including:

Shopify
Our Services are hosted by Shopify. Shopify processes information about your access to and use of the Services to provide, secure, personalize, and improve its platform and consumer services.

Service providers
We may disclose information to vendors that provide payment processing, order fulfillment, shipping, cloud hosting, analytics, customer support, email or text messaging, subscription management, reviews, security, fraud prevention, accounting, and other services on our behalf.

Business and marketing partners
We may disclose information to advertising platforms, marketing partners, analytics partners, and other businesses that help us market NATTA or measure advertising, subject to applicable law and your privacy choices.

Parties you direct us to
We may disclose information when you request or authorize us to do so, such as to a shipping carrier, social-media integration, payment service, or other third party.

Affiliates
We may disclose information within our corporate group or to entities under common ownership or control.

Professional advisers
We may disclose information to lawyers, accountants, insurers, auditors, consultants, and other professional advisers where reasonably necessary.

Legal, safety, and compliance recipients
We may disclose information to courts, regulators, law-enforcement agencies, government authorities, or other parties when we believe disclosure is required by law or reasonably necessary to protect rights, safety, property, customers, or the Services.

Business transactions
We may disclose or transfer information in connection with a merger, financing, acquisition, reorganization, sale of assets, bankruptcy, or similar business transaction.

6. RELATIONSHIP WITH SHOPIFY

Shopify hosts the Services and processes personal information about your interactions with our store.

Information you submit through the Services may be transmitted to Shopify and to service providers located in countries other than your own in order to operate, secure, personalize, and improve the Services.

If NATTA enables Shopify Network Intelligence or other enhanced Shopify services, Shopify may process information from your interactions with NATTA, other merchants, and Shopify to provide enhanced services, analytics, fraud prevention, personalization, and advertising features.

In those circumstances, Shopify may act as an independent controller or business for certain processing activities and may respond directly to requests concerning its own use of your information.

You can learn more in Shopify’s Consumer Privacy Policy:

https://www.shopify.com/legal/privacy/consumers

7. TARGETED ADVERTISING, SALE, AND SHARING

Depending on the laws where you live, certain disclosures of personal information for targeted advertising or cross-context behavioral advertising may be considered a “sale” or “sharing” of personal information, even when no money is exchanged.

Where applicable, you may have the right to opt out of:

- the sale of personal information;
- the sharing of personal information for cross-context behavioral advertising; or
- processing for targeted advertising.

You may exercise available opt-out rights through the Website’s privacy settings, cookie banner, “Do Not Sell or Share My Personal Information” link, or by contacting support@trynatta.com.

Where required by law, we recognize the Global Privacy Control signal as an opt-out request for the browser or device sending the signal. If we can associate that signal with your Shopify account, the opt-out may also be applied to that account.

We do not knowingly sell or share the personal information of individuals under 16 years of age.

8. MARKETING COMMUNICATIONS

You may opt out of promotional emails by using the unsubscribe link in the message.

You may opt out of promotional text messages by following the instructions in the message, such as replying STOP, where applicable.

Even after opting out of marketing, you may continue to receive non-promotional communications concerning orders, subscriptions, account security, customer support, policy updates, or other transactions.

9. THIRD-PARTY WEBSITES AND SERVICES

The Services may contain links to websites, applications, social-media platforms, or services operated by third parties.

We do not control and are not responsible for the privacy, security, content, accuracy, availability, or practices of those third parties. Review their privacy policies before providing personal information.

Information you post in public or semi-public areas, including social media or public reviews, may be viewed and used by others.

10. CHILDREN’S PRIVACY

The Services are not intended for children, and we do not knowingly collect personal information from children under the age of majority applicable in their jurisdiction.

If you are a parent or guardian and believe a child has provided personal information to us, contact support@trynatta.com to request deletion.

As of the date of this Privacy Policy, we do not have actual knowledge that we sell or share, as those terms are defined by applicable law, personal information belonging to individuals under 16 years of age.

11. DATA SECURITY

We use administrative, technical, and organizational measures intended to protect personal information.

However, no security measure, storage system, or method of transmission is completely secure. We cannot guarantee absolute security.

Do not send sensitive or confidential information through unsecured channels. You are responsible for maintaining the confidentiality of your account credentials.

12. DATA RETENTION

We retain personal information for as long as reasonably necessary for the purposes described in this Privacy Policy, including to:

- provide the Services;
- maintain your account or subscription;
- complete transactions;
- comply with legal and tax obligations;
- prevent fraud;
- resolve disputes; and
- enforce agreements.

Retention periods vary depending on the nature of the information, the purpose of processing, legal requirements, risk, and whether the information is needed to protect our rights or the rights of others.

We may retain anonymized or de-identified information where it can no longer reasonably identify you.

13. YOUR PRIVACY RIGHTS

Depending on where you live, you may have some or all of the following rights:

Right to access or know
You may request information about the personal information we hold, use, disclose, sell, or share about you.

Right to deletion
You may request deletion of certain personal information, subject to legal exceptions.

Right to correction
You may request correction of inaccurate personal information.

Right to portability
You may request a portable copy of certain personal information.

Right to opt out
You may request to opt out of the sale or sharing of personal information or the use of personal information for targeted advertising.

Right to limit certain uses
In some jurisdictions, you may request limits on the use or disclosure of sensitive personal information.

Right to withdraw consent
Where processing is based on consent, you may withdraw consent at any time. Withdrawal does not affect processing that occurred before withdrawal.

Right to object or restrict processing
If you live in the European Economic Area, United Kingdom, or another jurisdiction providing these rights, you may object to or request restriction of certain processing.

Right to appeal
Where applicable, you may appeal a decision we make regarding your privacy request.

Right to non-discrimination
We will not unlawfully discriminate against you for exercising a privacy right.

These rights are not absolute and may be limited by applicable law.

14. HOW TO EXERCISE YOUR RIGHTS

You may submit a privacy request by emailing:

support@trynatta.com

Please include enough information for us to understand and respond to your request.

We may need to verify your identity before completing a request. Verification may require confirming information associated with your account or transaction.

Where permitted, you may authorize an agent to submit a request on your behalf. We may require proof of authorization and may verify your identity directly.

We will respond within the time required by applicable law.

15. EUROPEAN ECONOMIC AREA, UNITED KINGDOM, AND SWITZERLAND

If you are located in the EEA, United Kingdom, or Switzerland, we process personal information under one or more of the following legal bases:

Performance of a contract
To process orders, provide products, manage accounts, administer subscriptions, fulfill guarantees, and provide customer service.

Legitimate interests
To operate and improve the Services, prevent fraud, secure our business, understand customers, and market our products, where those interests are not overridden by your rights.

Consent
For certain marketing, cookies, targeted advertising, or other processing where consent is required.

Legal obligations
To comply with tax, accounting, consumer-protection, product-safety, and other legal requirements.

Protection of vital interests
In limited circumstances, where processing is necessary to protect someone’s life or physical safety.

You may have the right to access, correct, delete, restrict, or object to processing; request portability; withdraw consent; and lodge a complaint with your local data-protection authority.

If required, insert the following before publishing:

EU representative: [NAME AND CONTACT DETAILS]
UK representative: [NAME AND CONTACT DETAILS]
Data Protection Officer: [NAME AND CONTACT DETAILS, IF APPOINTED]

16. INTERNATIONAL DATA TRANSFERS

Your personal information may be transferred to, stored in, or processed in countries other than the country where you live.

Those countries may have privacy laws that differ from the laws in your jurisdiction.

Where required, we use recognized transfer mechanisms, such as adequacy decisions, contractual protections, or the European Commission’s Standard Contractual Clauses and applicable UK transfer mechanisms.

17. COMPLAINTS

If you have concerns about our privacy practices, contact us at support@trynatta.com.

Depending on where you live, you may have the right to appeal our response or lodge a complaint with your local privacy or data-protection authority.

18. CHANGES TO THIS PRIVACY POLICY

We may update this Privacy Policy to reflect changes to our practices, technologies, Services, legal obligations, or other operational reasons.

We will post the revised policy on the Website, update the “Last updated” date, and provide additional notice where required by law.

19. CONTACT US

Questions about this Privacy Policy, our privacy practices, or your privacy rights may be directed to:

NATTA
Operated by: Natta
Website: https://trynatta.com
Email: support@trynatta.com


For applicable data-protection laws, the data controller responsible for your personal information is:

Natta