GDPR Compliance

Last updated: September 29, 2026

Netalith is committed to complying with the General Data Protection Regulation (GDPR) for users within the European Union (EU) and European Economic Area (EEA). This document outlines how we collect, process, protect, and manage personal data.

Netalith operates this website and acts as the data controller responsible for your personal data. Netalith is based in Vietnam and provides software development, eCommerce integration, AI-powered tools, and related services to a global audience. For any data protection question or to exercise your rights, contact us using the details in the "Contact for GDPR Requests" section below.

1. Legal Basis for Processing

We process personal data only where we have a lawful basis to do so:

Contractual necessity — to deliver a product or service you requested
Your consent — for example, non-essential cookies
Legitimate interest — to secure, operate, and improve our services
Legal obligation — for example, accounting and tax records

2. Personal Data We Process

Identity and contact data (name, email, phone, company)
Billing and payment information
Technical and usage data (IP address, device, browser, pages visited)
Cookie identifiers

3. Your Rights Under GDPR

Right to be informed
Right to access
Right to rectification
Right to erasure (“right to be forgotten”)
Right to restrict processing
Right to data portability
Right to object
Right to withdraw consent
Rights related to automated decision-making and profiling

4. Data Storage & Retention

We retain data only as long as necessary to provide services or comply with legal requirements. Inactive accounts may be deleted after 30 days, while billing and tax records are kept for the period required by law.

5. Cookies & Tracking

We use cookies for analytics, security, and performance enhancement. You may disable cookies in your browser settings.

6. Third-Party Processors

We share data with trusted third-party providers only as needed to operate our services, under contractual data-protection obligations. These include payment processors, cloud hosting providers, and AI-processing providers.

7. International Data Transfers

Some of these processors may be located outside the EEA. Where personal data is transferred internationally, we rely on appropriate safeguards — such as Standard Contractual Clauses or an adequacy decision — to ensure your data remains protected in accordance with the GDPR.

8. Automated Decision-Making & Profiling

We do not make decisions producing legal or similarly significant effects about you based solely on automated processing.

9. Data Protection & Security

Netalith uses encryption, secure servers, and strict access controls to protect user data.

10. Data Breach Notification

In the event of a personal data breach that is likely to result in a risk to your rights and freedoms, we will notify the competent supervisory authority within 72 hours of becoming aware of it, and inform affected users without undue delay where required by the GDPR.

11. Right to Lodge a Complaint

If you are located in the EU or EEA, you have the right to lodge a complaint with your local data protection supervisory authority if you believe your personal data has been handled unlawfully.

12. Contact for GDPR Requests

To exercise any GDPR rights, contact:

Email: [email protected]
Support form on website

Netalith responds to GDPR requests within 30 days, as required by law.