LEGAL & COMPLIANCE

Privacy Policy

Effective Date: August 11, 2026 | Version 2.0 | NACTRO3D Sri Lanka

SYSTEM VERIFIED

security 1. Overview & Commitment

At NACTRO3D (accessible via nactro3d.com.lk ), we are committed to protecting the privacy, security, and confidentiality of our customers and website visitors.

This Privacy Policy explains how NACTRO3D ("we", "us", or "our") collects, uses, stores, discloses, and protects personal data when you visit our website, create an account, request a custom 3D model quotation, communicate with us, or purchase our 3D-printed products.

badge 2. Information We Collect

We may collect personal and technical information when you interact with our application, place an order, request a quotation, or contact us.

A. Account & Identity Data Full Name, Email Address, Contact Phone Number, and account authentication information. If you authenticate using Google Sign-In, we may receive your name, email address, and Google account identifier made available through the authentication service. We do not request or access your Google account password.

B. Address Book & Shipping Data Recipient Name, Contact Phone Number, Street Address, City, District/State, Postal Code, and delivery-related information required to fulfil your order.

C. Orders & Custom Model Requests Order history, purchased items, scale variants, pricing, delivery preferences, custom 3D model specifications, description notes, and customer-provided reference images or design files.

D. Technical & Device Information IP addresses, browser information, operating system information, request information, payment webhook logs, and other technical or security-related logs may be processed for security, diagnostics, and service reliability.

settings_suggest 3. How We Use Information

inventory_2 Order Processing & Fulfillment Manufacturing 3D-printed products, managing product and scale availability, preparing invoices, packaging, and arranging courier delivery.

mail Service Communications Sending verification codes, password reset codes, order confirmations, invoices, quotation notifications, and relevant delivery or order-status communications.

lock Account Authentication Verifying sign-in credentials, managing authenticated sessions, protecting accounts, and preventing unauthorized access.

support_agent Customer Support & Quotations Processing custom 3D model quotation requests and providing customer support through available communication channels, including email and WhatsApp.

gavel 4. Legal Basis & Lawful Grounds

We process personal data for purposes connected with operating NACTRO3D and providing our services. Depending on the circumstances, processing may be based on:

Contractual Necessity: Processing required to create and fulfil orders, arrange delivery, provide requested services, and manage customer accounts.
Consent: Where consent is required for a particular processing activity, we will request consent in an appropriate manner.
Legal Obligations: Processing required to comply with applicable legal, accounting, tax, regulatory, or other lawful requirements.
Legitimate Interests: Protecting our systems, preventing fraud or abuse, maintaining service reliability, and protecting our business and customers.

credit_card 5. Payments & Payment Information

Online Card Payments (PayHere): Online card payments are processed through the PayHere Payment Gateway. NACTRO3D does not intentionally store complete payment card numbers, CVV/security codes, or card PINs in its application database.

Payment card information is entered through the payment provider's secure payment flow. NACTRO3D may receive transaction references, payment status information, order identifiers, and other information required to confirm and reconcile a payment.

Bank Transfer Payments: Where bank transfer payment is offered, customers may be required to provide transaction or payment-reference information so that NACTRO3D can verify and reconcile the relevant order.

hub 6. Third-Party Service Providers

To operate our e-commerce platform and provide requested services, we may use selected third-party service providers.

1. PayHere Payment Gateway

Processes online payment transactions and provides payment status and transaction notifications required to confirm orders.

2. Google Identity Services

Provides authentication services when customers choose Google Sign-In.

3. Cloud Infrastructure & Hosting

Cloud infrastructure providers, including Render where applicable, host application services and supporting database infrastructure.

4. Courier & Logistics Partners

Relevant recipient and delivery information may be provided to courier or logistics providers where necessary to deliver an order.

5. Email / SMTP Services

Transactional email services may be used to deliver account verification messages, password-reset messages, invoices, order confirmations, and other service communications.

cookie 7. Cookies & Browser Storage

NACTRO3D may use essential browser storage technologies required for website functionality, authentication, shopping-cart functionality, security, and user preferences.

Local Storage: May be used to retain application-related information such as authentication/session information, shopping-cart data, and interface preferences.
Essential Cookies: May be used for authentication, security, session management, and application functionality.
Advertising Trackers: NACTRO3D does not intentionally use third-party advertising networks or behavioural advertising trackers as part of the core website experience.

Disabling essential cookies or browser storage may affect certain website functions, including authentication, shopping-cart functionality, or checkout.

share 8. When We May Share Information

We do not sell, rent, or trade your personal information. We may share or provide access to information where reasonably necessary for operating our services, including:

With courier and logistics providers to deliver your orders.
With payment providers to process and verify transactions.
With hosting, authentication, email, and infrastructure providers required to operate our services.
Where disclosure is required or permitted by applicable law, court order, law enforcement, or regulatory authority.
Where reasonably necessary to protect NACTRO3D, our customers, systems, or services from fraud, abuse, unauthorized activity, or cyber threats.

public 9. International Data Processing

NACTRO3D operates primarily in Sri Lanka. However, some third-party service providers used to operate our website may process or store personal information outside Sri Lanka.

This may include cloud infrastructure, authentication services, payment services, email services, or other technical providers. Where applicable, we aim to use appropriate service providers and safeguards consistent with applicable data protection requirements.

lock 10. Data Security

We implement reasonable technical and organizational safeguards designed to protect personal information against unauthorized access, alteration, disclosure, accidental loss, misuse, or destruction.

Data transmitted between your browser and our services is protected using HTTPS/TLS encryption.
Account passwords are securely hashed using BCrypt before storage.
Database connections and application credentials are protected using access controls and secure configuration practices.
Administrative access to customer information is restricted to authorized NACTRO3D personnel and systems.

No internet transmission or electronic storage system can be guaranteed to be completely secure. We therefore cannot guarantee absolute security of personal information.

schedule 11. Data Retention

We retain personal information only for as long as reasonably necessary for the purposes for which it was collected, including providing services, fulfilling orders, maintaining customer records, resolving disputes, preventing fraud, maintaining security, and complying with applicable legal, accounting, or regulatory obligations.

Account and customer information may be retained while an account remains active or while necessary to provide requested services. Certain transaction, financial, or legal records may need to be retained after account deletion where required or permitted by law.

Temporary verification information may expire automatically according to the application's security configuration.

verified_user 12. Privacy Rights

Subject to applicable law and relevant exceptions, you may have rights relating to your personal information, including:

Access: Request access to personal information held about you.
Rectification: Request correction of inaccurate or incomplete information.
Deletion: Request deletion of personal information where applicable.
Withdrawal of Consent: Withdraw consent where processing is based on consent, subject to applicable limitations.
Other Applicable Rights: Exercise other rights available under applicable data protection law.

These rights may be subject to legal exceptions and requirements. For example, certain transaction or financial records may need to be retained where required by law.

delete_forever 13. Account & Data Deletion Requests

If you wish to request deletion of your NACTRO3D account, customer profile, or saved address information, contact us using your registered email address:

support@nactro3d.com.lk

We may request reasonable information to verify your identity before processing a deletion request. Deletion requests will be handled within a reasonable period, subject to applicable legal, financial, security, and operational requirements.

child_care 14. Children's Privacy

NACTRO3D products and services are intended for adult customers and collectors. We do not knowingly solicit personal information from children in circumstances where doing so would be prohibited by applicable law.

If you believe that a child has provided personal information to NACTRO3D inappropriately, please contact us so that we can review the matter and take appropriate action.

notifications 15. Service Communications

We may send transactional communications that are necessary to provide requested services. These may include verification codes, password-reset messages, order confirmations, invoices, quotation notifications, delivery updates, and important account or security notifications.

NACTRO3D does not intentionally send unsolicited spam or sell customer information for third-party marketing purposes.

open_in_new 16. Third-Party Websites & Services

Our application may contain links, redirects, or integrations with third-party services, including payment portals and communication services such as WhatsApp.

Third-party services operate according to their own terms, privacy policies, and security practices. NACTRO3D is not responsible for privacy practices or content on third-party websites that we do not control.

update 17. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our services, technology, data-processing practices, or applicable legal requirements.

Updated versions will be published on this page together with a revised Effective Date.

We encourage you to review this page periodically so that you remain informed about how NACTRO3D handles personal information.

contact_support 18. Contact Us

If you have questions, concerns, or requests regarding this Privacy Policy or the way NACTRO3D handles personal information, please contact us:

NACTRO3D Engineering & Collectibles

Location: Kaduwela, Western Province, Sri Lanka

Email: support@nactro3d.com.lk

Phone / WhatsApp: +94 77 321 0141

Website: nactro3d.com.lk

This Privacy Policy describes NACTRO3D's current personal-data practices and should be read together with the NACTRO3D Terms of Service and Return & Refund Policy.