Last updated: September 23, 2026

Data Controller

The data controller for personal data collected through mybalmo.com is:

NCLT LLC

Email: info@mybalmo.com

Personal data processed

In relation to the use of the site and the services offered, we may process:

• identification and contact data, such as name, address, email, and contact details provided by the customer;
• data relating to orders, transactions, shipments, returns, and payments;
• information provided in communications with customer support;
• technical data and data relating to the use of the site, such as IP address, device, browser, and interactions with the site;
• data collected through cookies and similar technologies, in compliance with the choices expressed by the user when consent is required.

Purposes and legal bases

Personal data may be processed for:

Order management and contractual relationship
To process purchases, payments, shipments, returns, refunds, and to provide order-related assistance.
Legal basis: performance of a contract or pre-contractual measures.

Compliance with legal obligations
To comply with tax, accounting, administrative, or other applicable provisions.
Legal basis: legal obligation.

Security and fraud prevention
To protect the site, verify anomalous transactions, prevent fraud, and protect our rights.
Legal basis: legitimate interest of the controller.

Marketing
To send promotional communications or to use advertising and tracking tools when regulations require consent.
Legal basis: consent, where required.

Consent can be withdrawn at any time without affecting the lawfulness of processing based on consent before its withdrawal.

Source of data

Data may be collected:

• directly from the user;
• automatically during the use of the site;
• through providers used for the delivery of services;
• through platforms or partners, when provided for and in compliance with applicable law.

Data recipients

Data may be disclosed, within the limits necessary for their respective functions, to providers used for:

• e-commerce platform and IT infrastructure;
• payments;
• order processing and shipment;
• support;
• security and fraud prevention;
• analysis, marketing, and advertising, when permitted.

Data may also be disclosed to public authorities when required by law.

International transfers

Some providers may process personal data outside the European Economic Area.

When required by the GDPR, such transfers take place on the basis of an adequacy decision by the European Commission or through other safeguards provided for by applicable law, including standard contractual clauses.

You may request information on the applicable safeguards by writing to info@mybalmo.com.

Data retention

Personal data are retained for the period necessary for the purposes for which they were collected and, subsequently, for the period required by applicable legal obligations or necessary for the establishment, exercise, or defense of a legal claim.

When processing is based on consent, the data are processed until consent is withdrawn or until they are no longer necessary for the relevant purpose, without prejudice to any retention obligations provided by law.

Data subject rights

In the cases provided for by the GDPR, the data subject may exercise the rights of:

• access to their data;
• rectification;
• erasure;
• restriction of processing;
• objection to processing;
• data portability;
• withdrawal of consent when processing is based on consent.

Requests can be sent to:

info@mybalmo.com

The data subject also has the right to lodge a complaint with the competent supervisory authority.

Data necessary to make a purchase

The provision of data necessary for order management, payment, and delivery is required to conclude and execute the contract.

In the absence of such data, it may not be possible to process the order.

Representative in the European Union

NCLT LLC