LATTISPEC › Legal › Privacy Notice
Privacy Notice
LattiSpec is committed to protecting your personal information. This Privacy Notice explains what data we collect, how we use it, and your rights in relation to it.
02
Information We Collect
We may collect the following categories of personal information:
- Account information — name, email address, company name, job title, phone number.
- Transaction data — purchase history, order details, invoices, shipping addresses.
- Payment information — processed securely via Stripe. We do not store full card details.
- Communications — messages sent through the Platform, support enquiries, and correspondence.
- Usage data — IP address, browser type, pages visited, time on site, referral source.
- Cookies — see Section 07 for full details.
03
How We Use Your Information
We use your personal information for the following purposes:
- To create and manage your account.
- To process orders, payments, and facilitate transactions between buyers and sellers.
- To communicate with you about your account, orders, and platform updates.
- To provide customer support and respond to enquiries.
- To improve the Platform through analytics and user feedback.
- To comply with legal obligations and enforce our Terms & Conditions.
- To send marketing communications where you have opted in (you may opt out at any time).
04
Legal Basis for Processing
Where applicable under GDPR, we rely on the following legal bases:
- Contract — processing necessary to fulfil orders and provide platform services.
- Legitimate interests — fraud prevention, platform security, and business analytics.
- Legal obligation — compliance with applicable laws and regulations.
- Consent — for marketing communications and non-essential cookies.
05
Sharing Your Information
We do not sell your personal information. We may share it with:
- Sellers/Buyers — necessary order and shipping details shared between transacting parties.
- Payment processors — Stripe, for secure payment processing.
- Shipping carriers — USPS, FedEx, DHL, and freight partners, for order delivery.
- Analytics providers — aggregated, anonymised usage data only.
- Legal authorities — where required by law or to protect our legal rights.
All third-party processors are contractually required to handle your data securely and in accordance with applicable privacy laws.
06
International Transfers
Your data may be transferred to and processed in countries outside your jurisdiction, including countries that may not have the same data protection standards as your home country.
Where we transfer data internationally, we ensure appropriate safeguards are in place, such as Standard Contractual Clauses (SCCs) approved by the relevant data protection authority.
07
Cookies
We use cookies and similar tracking technologies on the Platform. These include:
- Strictly necessary cookies — essential for the Platform to function.
- Analytics cookies — help us understand how the Platform is used (e.g. Google Analytics).
- Functional cookies — remember your preferences and settings.
You can manage your cookie preferences at any time via our Cookie Settings page.
08
Data Retention
We retain your personal data only for as long as necessary to fulfil the purposes for which it was collected, or as required by law.
- Account data — retained for the duration of your account and up to 3 years after closure.
- Transaction records — retained for 7 years for tax and accounting purposes.
- Marketing data — retained until you withdraw consent or unsubscribe.
09
Your Rights
Depending on your location, you may have the following rights regarding your personal data:
- Access — request a copy of the personal data we hold about you.
- Rectification — ask us to correct inaccurate or incomplete data.
- Erasure — request deletion of your personal data where no longer necessary.
- Portability — receive your data in a structured, machine-readable format.
- Objection — object to processing based on legitimate interests or for direct marketing.
- Restriction — request that we limit processing of your data in certain circumstances.
- Withdraw consent — where processing is based on consent, withdraw it at any time.
To exercise any of these rights, contact us at info@LattiSpec We will respond within 30 days.
10
Data Security
We implement appropriate technical and organisational measures to protect your personal data against unauthorised access, loss, or disclosure. These include encrypted data transmission (SSL/TLS), access controls, and regular security reviews.
While we take all reasonable steps to protect your data, no method of transmission over the internet is 100% secure. If you suspect a security incident involving your account, please contact us immediately.
11
Children's Privacy
LattiSpec is a business-to-business platform and is not directed at individuals under the age of 18. We do not knowingly collect personal data from minors. If you believe we have inadvertently collected such data, please contact us and we will delete it promptly.
12
Changes to This Notice
We may update this Privacy Notice from time to time to reflect changes in our practices or legal requirements. We will notify you of material changes via email or a prominent notice on the Platform before they take effect.
The “Last updated” date at the top of this page indicates when the Notice was last revised.
13
Contact & Complaints
For any questions, requests, or complaints about how we handle your personal data, please contact us:
LATTISPEC — Privacy Team
Email: info@LattiSpec
Address: [Registered address — to be confirmed]
If you are not satisfied with our response, you have the right to lodge a complaint with your local data protection authority.