PowerNest LLC — Privacy Policy
Effective Date: August 19, 2025

Welcome to PowerNest LLC (“PowerNest,” “we,” “our,” or “us”). We value your trust and are committed to protecting your privacy. This Privacy Policy describes how we collect, use, disclose, and safeguard personal information in connection with our websites, products, and services. It also explains your rights and choices under applicable laws including the U.S. California Consumer Privacy Act (CCPA), the General Data Protection Regulation (GDPR), and other international frameworks.

1. Information We Collect

We collect information when you interact with PowerNest LLC websites or services, including when you register, purchase, or communicate with us.
a. Personal Information
• Full name
• Email address
• Phone number
• Billing and shipping addresses
• Payment details (processed securely through PCI-DSS compliant gateways)
• Business and tax information for merchant verification
b. Non-Personal Information
• Browser type, device ID, and operating system
• IP address and geolocation approximation
• Pages visited, time on site, and referring URLs
• Aggregated analytics data
c. Cookies and Tracking
We use cookies and similar technologies to enhance user experience, analyze traffic, and deliver personalized content. You can control cookies through browser settings. For details, see our Cookie Policy.

2. How We Use Information

We use collected information to:
• Process orders and deliver services (contractual necessity)
• Provide customer support and technical assistance
• Send transactional emails and important updates
• Improve site performance and user experience
• Send marketing communications (only with your consent)
• Verify identity and prevent fraud (legal obligation)
• Comply with tax, accounting, and AML/KYC requirements
Legal Bases for Processing (EEA/UK Users):
Contractual necessity, legitimate interests, consent, and legal obligations.

3.Financial Data and Payment Security

All payments are processed through reputable third-party gateways (e.g., Stripe, PayArc, MerchantOne, Nuvei, Beyond Bancard, Netevia, ACH, Paya). We do not store full card numbers or CVV codes.
Transactions are encrypted using SSL/TLS and handled in accordance with PCI-DSS standards.
We retain transaction records as required for audit and regulatory purposes (typically up to seven years).

4. Data Sharing and Disclosure

We never sell personal information. We may share data with:
• Payment processors and acquiring banks for transaction settlement and risk assessment
• Fraud-prevention and AML/KYC partners for compliance verification
• Technology vendors for hosting, analytics, and CRM support
• Regulatory authorities when required by law
All third parties operate under binding data-protection agreements and use data only for authorized purposes.

5.International Data Transfers

Personal data may be processed in the United States and other jurisdictions where our partners operate. When transferring data from the EEA/UK, we use Standard Contractual Clauses (SCCs) or other lawful mechanisms to ensure adequate protection.

6. Data Retention

We retain personal data only as long as necessary to fulfil the purposes described herein or as required by law. When data is no longer needed, it is securely deleted or anonymized.

 7. Data Security

PowerNest LLC implements administrative, technical, and physical safeguards to protect data from unauthorized access, alteration, or loss, including firewalls, encryption, and regular security audits. Our security program meets or exceeds PCI-DSS and industry best practices.

8. Your Rights and Choices

Your Rights and Choices
Depending on your location, you may have rights to:
• Access a copy of your data
• Correct inaccurate information
• Request deletion (“Right to be forgotten”)
• Restrict or object to processing
• Request data portability
• Opt out of marketing communications
Requests may be submitted to contact@powernesttech.com or by mail to our registered address. We will verify identity before fulfilling requests.

9. California Privacy Rights (CCPA/CPRA)

California residents may request disclosure of personal information categories collected, the sources, and purposes of use. We do not sell or share personal information for monetary gain. To exercise rights, email contact@powernesttech.com.

10. Children’s Privacy

Our services are not directed to children under 13. We do not knowingly collect data from minors. If a parent believes a child has provided data, please contact us for immediate deletion.

11. Data Breach Response

In the event of a data breach, PowerNest LLC will notify affected individuals and applicable authorities within statutory time frames (72 hours under GDPR) and take prompt corrective measures.

12. Automated Decision-Making and Profiling

We do not use automated decision-making or profiling that produces legal effects on individuals. If introduced, we will notify users and offer opt-out mechanisms.