Last Updated: July 5, 2025
1. Introduction
Welcome to NIILAA Inc. (“we,” “us,” “our”). We are committed to protecting your personal information and your right to privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit our website niilaa.com (the “Site”) and use our services.
This policy is designed to be compliant with major international regulations, including the General Data Protection Regulation (GDPR) for our users in the European Union and the UK, the California Consumer Privacy Act (CCPA) as amended by the California Privacy Rights Act (CPRA), and Canada’s Personal Information Protection and Electronic Documents Act (PIPEDA).
Please read this privacy policy carefully. If you do not agree with the terms of this privacy policy, please do not access the site.
2. Information We Collect
We may collect information about you in a variety of ways. The information we may collect on the Site includes:
a. Personal Data You Provide to Us:
We collect personal data that you voluntarily provide to us when you:
- Fill out a "Contact Us" or service inquiry form.
- Subscribe to our newsletter.
- Engage with us for the provision of services.
The personal data we collect includes:
- Identity Data: Full Name, Company Name
- Contact Data: Email Address, Phone Number, Billing Address, Mailing Address
- Technical Inquiry Data: Any information you provide regarding your company's IT infrastructure, operational details, and service requirements when you submit a service query.
- Financial Data: Payment information for processing transactions, although this is typically processed directly by our third-party payment gateways.
b. Data Collected Automatically:
We automatically collect certain information when you access the Site, such as your IP address, browser type, operating system, access times, and the pages you have viewed directly before and after accessing the Site. This data is primarily needed to maintain the security and operation of our Site, and for our internal analytics.
3. Legal Basis for Processing Personal Data (GDPR & UK GDPR)
For individuals in the European Economic Area (EEA) and the UK, we process your personal data based on the following legal grounds:
- Consent: We will process your data for specific purposes, such as sending marketing newsletters, if you have given us clear consent to do so. You can withdraw your consent at any time.
- Contractual Necessity: We process your personal data to fulfill our contractual obligations to you, such as providing managed services, licenses, or products that you have purchased.
- Legitimate Interests: We may process your data when it is reasonably necessary to achieve our legitimate business interests, such as improving our services, administrative purposes, or preventing fraud, provided your rights and interests do not override our interests.
4. How We Use Your Information
We use the information we collect or receive for the following purposes:
- To Provide and Manage Our Services: To create and manage your account, process payments, and deliver the products and services you have requested.
- To Communicate with You: To respond to your inquiries, send you administrative information (such as changes to our terms), and provide customer support.
- For Marketing Purposes: To send you newsletters, promotional materials, and information about our products and services, provided you have opted-in to receive such communications.
- To Protect Our Site: To monitor for and prevent fraud, security breaches, and other potentially prohibited or illegal activities.
- For Analytics: To analyze website usage and trends to improve our website and service offerings.
5. Disclosure of Your Information
We do not sell your personal information. We may share information we have collected about you in certain situations:
- Third-Party Service Providers: We may share your data with third-party vendors, consultants, and other service providers who perform services for us or on our behalf and require access to such information to do that work. This includes:
- Payment Processors: For secure payment processing. Our primary processors are Stripe (for global payments) and SSLCOMMERZ (for payments from Bangladesh). We do not store or collect your payment card details. That information is provided directly to our third-party payment processors whose use of your personal information is governed by their Privacy Policy.
- Cloud Hosting Providers: To host our Site and related data.
- Analytics Companies: To help us understand the use of our Site.
- By Law or to Protect Rights: We may disclose your information if required to do so by law or in the good faith belief that such action is necessary to (1) comply with a legal obligation, (2) protect and defend the rights or property of NIILAA Inc., (3) act in urgent circumstances to protect the personal safety of users of the Site, or (4) protect against legal liability.
- Business Transfers: We may share or transfer your information in connection with, or during negotiations of, any merger, sale of company assets, financing, or acquisition of all or a portion of our business to another company.
6. Data Retention
We will only keep your personal information for as long as it is necessary for the purposes set out in this privacy policy, unless a longer retention period is required or permitted by law (such as tax, accounting, or other legal requirements).
Our policy is as follows:
- Data from service inquiries and inactive client accounts will be retained for a minimum of two years for legitimate business purposes, such as facilitating service renewals and maintaining business records.
- Notwithstanding the above, we will honor user requests for data deletion in accordance with applicable laws. Upon receiving a verifiable request, we will delete your personal information "without undue delay," and generally within one month, unless we have a specific legal reason to retain it.
7. Your Data Protection Rights
Depending on your location, you may have the following rights regarding your personal information:
a. For All Users:
- Right to Access: You have the right to request copies of the personal data we hold about you.
- Right to Rectification: You have the right to request that we correct any information you believe is inaccurate or complete information you believe is incomplete.
b. Under GDPR & UK GDPR (EEA and UK Residents):
- Right to Erasure (Right to be Forgotten): You have the right to request that we erase your personal data, under certain conditions.
- Right to Restrict Processing: You have the right to request that we restrict the processing of your personal data, under certain conditions.
- Right to Data Portability: You have the right to request that we transfer the data that we have collected to another organization, or directly to you, under certain conditions.
- Right to Object to Processing: You have the right to object to our processing of your personal data, under certain conditions.
c. Under CCPA/CPRA (California Residents):
- Right to Know: You have the right to know what personal information is being collected about you and to access that information.
- Right to Delete: You have the right to request the deletion of your personal information.
- Right to Opt-Out: We do not sell personal information, so the right to opt-out of the sale of your data is not applicable.
- Right to Non-Discrimination: We will not discriminate against you for exercising your privacy rights.
To exercise any of these rights, please contact us using the contact details provided below.
8. Security of Your Information
We use administrative, technical, and physical security measures to help protect your personal information. While we have taken reasonable steps to secure the personal information you provide to us, please be aware that despite our efforts, no security measures are perfect or impenetrable, and no method of data transmission can be guaranteed against any interception or other type of misuse.
9. Policy for Children
We do not knowingly solicit information from or market to children under the age of 13. If you become aware of any data we have collected from children under age 13, please contact us immediately.
10. Contact Us
If you have questions or comments about this Privacy Policy, or if you wish to exercise your data protection rights, please contact us at:
NIILAA Inc.
123 Main Street, Anytown, CA 91234
[email protected]
+(1) 9293 091 673