Privacy Policy | Neural Deep Network LTD

1. Controller and scope
Neural Deep Network LTD, company number C114166, Malta. Customer support: work@neuraldeep.net. Correspondence: DiHubMT, Zone 3, Central Business District, Triq L-Intornjatur, Birkirkara CBD 3050, Malta.
We are the controller for personal data used to operate our website, shop, customer relationships and orders where we are the seller. This notice covers these activities. Separately operated apps, third-party sellers and external agent platforms have their own privacy notices; check the notice supplied with the relevant service.

2. Information and purposes
We process information you give us, including names, contact details, billing and delivery addresses, order records, support correspondence and account information. Custom-design orders may include uploaded files, images, dimensions and instructions. Website and checkout services also process technical information such as IP addresses, device/browser details, security logs and cookie identifiers. Payment providers process payment credentials and send payment-status and transaction information needed to administer orders.

We use necessary data to answer your request, enter into and perform the purchase contract, provide access, produce and deliver goods, and handle support and refunds. We process accounting and legally required records to meet legal obligations. Security, fraud prevention and proportionate business administration rely on legitimate interests where appropriate, balanced against your rights. Marketing and non-essential tracking rely on consent where required; you may withdraw consent without affecting previous lawful processing.

3. Required information
Information needed to process an order, payment or delivery must be supplied for that transaction to proceed. Optional marketing consent is separate from purchasing. Avoid uploading unnecessary personal data, sensitive information or third-party confidential material.

4. Recipients and agent purchases
Wix provides website and ecommerce infrastructure. Stripe or another payment provider identified in the payment flow processes payments and may act as an independent controller for its own regulatory, security and fraud-prevention functions. Delivery carriers, production partners, hosting/IT providers and professional advisers receive information needed for their role. Authorities may receive information where legally required.

If you order through an agent or machine-payment integration, the platform may send us your selected items, order instructions, contact/delivery details, payment authorisation references and transaction status. We use those details for the order and related support. The external platform's own collection and handling of conversations and data are governed by its privacy notice. This website notice does not constitute consent to unrelated model training; any such processing needs its own disclosed purpose and lawful basis.

5. International transfers
Providers may process data outside the EEA. Where required, transfers must rely on an applicable adequacy decision or appropriate safeguards such as the European Commission's standard contractual clauses and any necessary supplementary measures. Contact us for information about the safeguards relevant to your transaction.

6. Retention and security
We retain order and accounting records for applicable tax, accounting and legal-retention periods. Support and dispute records are retained while needed to resolve the matter and defend relevant legal claims. Account and uploaded project data are retained while needed to supply the service and for agreed project obligations, then deleted or anonymised subject to required records and backup cycles. Security logs are kept only as long as necessary for security investigations and proportionate prevention. Marketing details are retained until consent is withdrawn or the list is no longer needed; a minimal suppression record may be retained to respect an opt-out. Ask us for the period applicable to a particular record. We use appropriate safeguards and limit access according to role; no online service can promise absolute security.

7. Your rights
Subject to legal conditions, you may request access, correction, erasure, restriction and portability, object to processing based on legitimate interests, and withdraw consent. We normally respond within one month; a lawful extension may apply and will be explained. Necessary identity checks are proportionate. You may complain to Malta's Information and Data Protection Commissioner at https://idpc.org.mt or another competent supervisory authority.

8. Cookies and communications
Necessary cookies support functions such as security, sessions and checkout. Non-essential analytics, advertising and optional functionality must be controlled by the applicable consent choice where required. Browser controls can remove cookies, but some shop functions may stop working. Marketing unsubscribe requests can be made through the message's unsubscribe option or work@neuraldeep.net. Transactional order and security communications remain separate. Merely reading or accepting this notice is not marketing consent.

9. Automated systems and changes
Payment providers may use automated fraud/security checks under their own notices. Contact us if a blocked order needs assistance. Any additional solely automated decision with legal or similarly significant effects requires the disclosures and safeguards applicable to that processing. Material changes will be communicated appropriately; this notice's date identifies the current version.