Privacy Policy

Introduction

At NamoLock, we are committed to protecting your privacy and ensuring the security of your personal information. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit our website or use our smart lock solutions and services.

Information We Collect

Personal Information

We may collect personal information that you provide directly to us, including:

• Name and contact information (email address, phone number, mailing address)
• Hotel or business name and details
• Account credentials and login information
• Payment and billing information
• Communication preferences

Automatically Collected Information

When you use our products and services, we may automatically collect:

• Device information (IP address, browser type, operating system)
• Usage data (pages visited, time spent, clicks)
• Lock access logs and timestamps
• System performance and diagnostic data
• Cookies and similar tracking technologies

Hotel and Guest Information

For our hotel lock systems, we may process:

• Guest check-in and check-out times
• Room access records
• Digital key issuance and usage
• Security event logs

How We Use Your Information

We use the collected information for the following purposes:

• Service Delivery: To provide, maintain, and improve our smart lock systems and software
• Customer Support: To respond to your inquiries and provide technical assistance
• Security: To monitor and enhance the security of our products and prevent unauthorized access
• Analytics: To understand how our services are used and improve user experience
• Communication: To send you updates, security alerts, and marketing communications (with your consent)
• Compliance: To comply with legal obligations and enforce our terms of service
• Product Development: To develop new features and improve existing functionality

Data Sharing and Disclosure

We may share your information in the following circumstances:

Service Providers

We may share data with third-party service providers who assist us in:

• Cloud hosting and data storage
• Payment processing
• Customer support services
• Analytics and performance monitoring
• Contact form submissions (handled by Web3Forms)

Business Transfers

In the event of a merger, acquisition, or sale of assets, your information may be transferred to the acquiring entity.

Legal Requirements

We may disclose information when required by law, court order, or government regulation, or to protect our rights and safety.

With Your Consent

We may share information with third parties when you have given us explicit consent to do so.

Data Security

We implement industry-standard security measures to protect your information:

• End-to-end encryption for data transmission (TLS 1.3)
• Secure cloud storage with encryption at rest (AES-256)
• Regular security audits and vulnerability assessments
• Access controls and authentication protocols
• Employee training on data protection practices
• Incident response procedures

While we strive to protect your personal information, no method of transmission over the Internet or electronic storage is 100% secure.

Data Retention

We retain your personal information for as long as necessary to:

• Provide our services to you
• Comply with legal obligations
• Resolve disputes and enforce our agreements
• Maintain security and fraud prevention records

Access logs and security events are typically retained for 90 days unless required longer for security investigations or legal purposes.

Your Rights and Choices

Depending on your location, you may have the following rights:

• Access: Request access to the personal information we hold about you
• Correction: Request correction of inaccurate or incomplete information
• Deletion: Request deletion of your personal information
• Portability: Request a copy of your data in a portable format
• Objection: Object to certain processing of your information
• Restriction: Request restriction of processing in certain circumstances
• Withdraw Consent: Withdraw consent for processing where we rely on consent

To exercise these rights, please contact us at [email protected].

Cookies and Tracking Technologies

We use cookies and similar technologies grouped into three categories. You can change your preferences any time using the Cookie Settings link in our footer.

Necessary cookies

Required for core site functions like form submission, session management, and security. These cannot be disabled because the site won't work properly without them.

Analytics cookies

We use Google Analytics 4 with IP anonymization to understand which content is useful and improve the site. These cookies only load if you opt in. They collect aggregated, anonymized data — no personal identifiers.

Marketing cookies

Currently not in use. Reserved for future advertising pixels (e.g. Meta, LinkedIn) if we add them. They will only load with your explicit consent.

You can also control cookies through your browser settings. Blocking necessary cookies may affect the functionality of our website. Your consent choice is stored locally on your device for 365 days.

International Data Transfers

Your information may be transferred to and processed in countries other than your country of residence. We ensure appropriate safeguards are in place to protect your information in accordance with this Privacy Policy.

Children's Privacy

Our services are not directed to individuals under the age of 18. We do not knowingly collect personal information from children. If you believe we have collected information from a child, please contact us immediately.

Third-Party Links

Our website may contain links to third-party websites. We are not responsible for the privacy practices of these external sites. We encourage you to review their privacy policies.

Changes to This Privacy Policy

We may update this Privacy Policy from time to time. We will notify you of any material changes by:

• Posting the new Privacy Policy on this page
• Updating the "Last updated" date
• Sending you an email notification (for significant changes)

GDPR Compliance (European Users)

If you are located in the European Economic Area (EEA), you have additional rights under the General Data Protection Regulation (GDPR):

• Right to be informed about data collection and use
• Right to access your personal data
• Right to rectification of inaccurate data
• Right to erasure (right to be forgotten)
• Right to restrict processing
• Right to data portability
• Right to object to processing

India DPDP Act 2023 Compliance

If you are an Indian resident, your personal data is processed in accordance with the Digital Personal Data Protection Act, 2023:

• Right to access your personal data
• Right to correction and erasure
• Right to grievance redressal
• Right to nominate another individual in case of death or incapacity

CCPA Compliance (California Users)

If you are a California resident, you have rights under the California Consumer Privacy Act (CCPA):

• Right to know what personal information is collected
• Right to know if personal information is sold or disclosed
• Right to opt-out of the sale of personal information
• Right to deletion of personal information
• Right to non-discrimination for exercising CCPA rights

Contact Us

If you have questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us: