Privacy Policy

N&M Products ("we," "our," or "us") operates the website at https://nmproductsusa.com. This Privacy Policy explains what information we collect when you visit our site, how we use it, and what choices you have.

Effective date: April 14, 2026. Previous version: N/A (first published version).

We collect information in two ways:

Information you provide. When you fill out the callback request form on our site, you provide: your name, phone number, email address (optional), home address and city, preferred language, best time to call, and an optional message. You also check a consent box confirming you agree to be contacted.

Information collected automatically. When you visit our site, we and our service providers automatically collect standard server logs (IP address, browser type, referring page, pages visited, time of visit). We also use cookies and similar technologies — see our Cookie Policy for details.

We do not collect payment information, government ID, or health information.

We use the information you provide to:

- Contact you about your water test appointment request
- Schedule and confirm appointments
- Answer questions you have asked us
- Improve our website based on aggregated, anonymized usage data

We do not sell, rent, or share your personal information with third parties for their own marketing purposes.

For visitors in the European Economic Area or United Kingdom: our legal basis for processing your contact form submission is your explicit consent (you checked the consent box). For analytics, our legal basis is legitimate interest (improving a publicly available website) — you may opt out at any time using the cookie preferences link in our footer.

For all other visitors, we rely on applicable local law and your voluntary submission of the form.

- Vercel (hosting + analytics) — Vercel hosts our website and provides anonymous usage analytics. Vercel may process data on servers in the United States. Privacy policy: https://vercel.com/legal/privacy-policy
- Resend — We use Resend to deliver email notifications when you submit our callback form. Resend processes your name and contact details to route the email. Privacy policy: https://resend.com/legal/privacy-policy
- Google Analytics 4 — Only loaded if you consent to analytics cookies. Collects anonymized page-view data. IP address is anonymized before storage. Privacy policy: https://policies.google.com/privacy
- Cal.com — Our appointment booking widget embeds Cal.com. If you use the booking widget, Cal.com's own privacy policy applies. Privacy policy: https://cal.com/privacy
- Google Maps — We embed a Google Maps iframe on our contact page to show our service area. Google may set cookies. Privacy policy: https://policies.google.com/privacy

We use functional, analytics, and (in the future) marketing cookies. For a full list and controls, see our Cookie Policy. You can manage your preferences at any time using the "Cookie preferences" link in our site footer.

Depending on where you live, you may have the right to:

- Access the personal data we hold about you
- Correct inaccurate information
- Delete your data (right to be forgotten)
- Opt out of sale of your data (we do not sell data, but you have the right regardless)
- Data portability — receive your data in a structured, machine-readable format

To exercise any of these rights, contact us at the details in the "Contact Us" section below. We will respond within 30 days.

[TODO — legal review required: California residents may have additional rights under the CCPA/CPRA. Texas residents under the TDPSA. Confirm with counsel which state-specific disclosures apply.]

Our website is not directed to children under 13 years of age. We do not knowingly collect personal information from children. If you believe a child has provided us with personal information, please contact us and we will delete it promptly.

Callback form submissions: [TODO — confirm retention period with owner, e.g., "retained for 12 months after the appointment date and then securely deleted."] Analytics data: retained per the defaults of the analytics providers listed above.

We take reasonable technical and organizational measures to protect the information we collect — including encrypted connections (HTTPS), access controls on our systems, and reputable third-party infrastructure. No method of transmission over the internet is 100% secure; we cannot guarantee absolute security.

Our website is hosted on Vercel infrastructure, which may be located in the United States. Resend and Google also process data in the United States. If you are accessing our site from outside the US, your data may be transferred to and processed in the US.

We may update this Privacy Policy from time to time. When we do, we will update the effective date at the top of this page. Continued use of the website after the update constitutes acceptance of the new policy.

If you have questions about this policy or want to exercise your data rights, contact us at:

N&M Products
[TODO: address — see CLAUDE.md §11]
Email: [TODO: email — see CLAUDE.md §11]
Phone: [TODO: phone — see CLAUDE.md §11]