namastewater™ - Sacred Source Water from Palomar Mountain

1. Introduction

namastewater™ is committed to protecting your personal data. This Privacy Policy informs you in accordance with Art. 13 and 14 GDPR (General Data Protection Regulation, EU 2016/679) and applicable US privacy laws about the nature, scope, and purpose of the processing of your personal data on www.namastewater.com.

This Privacy Policy applies to all visitors of our website, regardless of their country of residence – including individuals from the EU/EEA, Switzerland, the USA, and the United Kingdom.

Your rights at a glance: Access · Rectification · Erasure · Restriction · Data Portability · Objection · Withdrawal of Consent. Contact: info@namastewater.com

2. Data We Collect

2.1 When Visiting the Website (automatically)

IP address (anonymized after 7 days)
Browser type and version, operating system
Pages visited, time spent, click paths
Referrer URL

Legal basis: Art. 6(1)(f) GDPR (legitimate interest in the secure operation of the website)

2.2 When Placing Orders (provided by you)

Full name
Email address (for order confirmation and Stripe receipt)
Delivery address (street, city, zip code, country)
Phone number (optional)
Order details (products, quantities, prices)

Legal basis: Art. 6(1)(b) GDPR (contract performance) and Art. 6(1)(a) GDPR (consent for payment processing)

2.3 Payment Data

Credit card and payment data are processed exclusively by Stripe, Inc. We never have access to full card details. We only receive a transaction ID and payment status.

Legal basis: Art. 6(1)(b) GDPR

3. Third Parties & Data Transfers

3.1 Stripe, Inc. – Payment Processing

Stripe, Inc.
185 Berry Street, Suite 550, San Francisco, CA 94107, USA
stripe.com/privacy

We use Stripe Checkout to process online payments. The following data is transmitted to Stripe:

Name and email address (for payment receipt)
Order amount and details
Delivery country (for shipping calculation)
IP address and browser fingerprint (fraud prevention by Stripe)

Stripe is certified under the EU-US Data Privacy Framework (Adequacy Decision pursuant to Art. 45 GDPR) and certified as a payment institution under PCI DSS Level 1. Data transfers to the USA are safeguarded by Standard Contractual Clauses (SCCs) pursuant to Art. 46 GDPR.

Purpose: Contract performance (payment processing) · Legal basis: Art. 6(1)(b) + (a) GDPR

3.2 Base44 Inc. – Website Platform & Data Storage

Base44 Inc. – Technology Platform
base44.app/privacy

This website is operated on the Base44 platform. The following data is stored on Base44 servers:

Order data (name, email, delivery address, order items, amounts)
Order status and order numbers
Session data for the checkout process

Base44 acts as our data processor pursuant to Art. 28 GDPR. Data processing is based on a data processing agreement. Servers are located in the EU or in regions with an adequate level of data protection.

Legal basis: Art. 6(1)(b) GDPR (contract performance) + Art. 28 GDPR (data processing agreement)

4. Cookies & Local Storage

We use cookies and localStorage based on your explicit consent (Art. 6(1)(a) GDPR) as well as legitimate interest (Art. 6(1)(f) GDPR) for technically necessary functions.

Category	Name / Key	Purpose	Storage Duration	Legal Basis
Necessary	namastewater_cart	Shopping cart (localStorage)	Until browser deletion	Art. 6(1)(f)
Necessary	namastewater_cookie_consent_v2	Store consent status	1 year	Art. 6(1)(c) + (f)
Payment	Stripe cookies (__stripe_mid, __stripe_sid)	Fraud prevention, session management	1 year / session	Art. 6(1)(a) + (b)
Analytics	Analytics services	Usage statistics	Up to 2 years	Art. 6(1)(a)

You can adjust your cookie settings at any time via the cookie banner at the bottom of the page. Cookies can also be deleted through your browser settings.

5. Your Rights (GDPR Art. 15–21)

As a data subject, you have the following rights, which you can exercise by emailing info@namastewater.com:

Right of Access Art. 15 GDPR

You can request information about all data stored about you.

Right to Rectification Art. 16 GDPR

Inaccurate data must be corrected without delay.

Right to Erasure Art. 17 GDPR

You can request deletion of your data ("right to be forgotten").

Right to Restriction Art. 18 GDPR

Processing may be restricted in certain cases.

Data Portability Art. 20 GDPR

Receive or transfer data in a machine-readable format.

Right to Object Art. 21 GDPR

Object to processing based on legitimate interest.

Withdrawal of Consent Art. 7(3) GDPR

Consent can be withdrawn at any time without giving reasons.

Right to Lodge a Complaint Art. 77 GDPR

You may lodge a complaint with the competent data protection authority.

Competent Data Protection Authorities:
🇦🇹 Austria: Datenschutzbehörde (dsb.gv.at)
🇩🇪 Germany: Federal or State Commissioner for Data Protection
🇨🇭 Switzerland: Federal Data Protection and Information Commissioner (edöb.admin.ch)
🇺🇸 USA: Federal Trade Commission (FTC) – ftc.gov

6. Data Sharing & Sale

namastewater™ does not sell personal data to third parties. Data is only shared with:

Stripe, Inc. – Payment processing (see Section 3.1)
Base44 Inc. – Technology platform / data processor (see Section 3.2)
Authorities – when required by law
Successors – in the case of mergers or business sales

7. Data Security

We implement technical and organizational measures (TOMs) to protect your data:

SSL/TLS encryption for all data transmissions (HTTPS)
Stripe PCI DSS Level 1 – highest security standard for payments
Access restrictions on order data
Regular security reviews

8. Retention Periods

Order data: 7 years (statutory retention obligation for tax purposes)
Server logs: Max. 7 days
Cookie consent: 1 year
Stripe transaction data: As per Stripe Privacy Policy (at least 7 years for compliance)

9. Links to Third-Party Websites

Our website may contain links to third-party websites. We have no influence over their privacy practices and recommend reading their respective privacy policies.

10. Children's Privacy

Our website is not directed at children under the age of 16 (GDPR) or 13 (COPPA, USA). We do not knowingly collect data from minors. If we become aware of such data, it will be deleted immediately.

11. Changes to this Privacy Policy

This Privacy Policy may be updated when our services or the legal situation changes. The date of the current version is indicated above. In the case of significant changes, we will inform you via the website.

12. Contact & Privacy Requests

namastewater™ LLC

187 E. Warm Springs Rd., Suite B112

Las Vegas, NV 89119, USA

Phone: +1 (702) 297-6749

Fax: +1 (702) 664-0467

Email: info@namastewater.com

Attention: Walter Spatny Jr., CEO & Founder

We respond to privacy requests within 30 days (Art. 12 GDPR).

Privacy Policy

Data Controller