Privacy Policy

Last updated: 2 September 2026

1. Introduction

Nibbana, Inc. and its affiliates (“Nibbana”, “we”, “our” or “us”) take the privacy and protection of personal information seriously. By visiting our website or using our services, you acknowledge and accept the practices outlined in this Privacy Policy. It explains what information is collected from or about you, how and why we collect it, how it is used and protected, and what choices you have with regard to this information.

2. Information covered by this policy

“Information” means any and all information we receive from or about you, whether collected directly or indirectly, manually or automatically. It may include (i) information you provide when visiting our website (the “Site”) or using our services or platform (the “Services”); (ii) information collected about you, your business, and your use of the Services; and (iii) information we receive about you from third parties.

Information is divided into two distinct categories:

“Non-Personal Information” means Information which does not personally identify a person.

“Personal Information” means Information relating to a natural person that can be used to identify that individual directly or indirectly, such as names, addresses, email addresses, and telephone numbers, together with other non-public information associated with them.

3. Acceptance of terms

We obtain and use Information in accordance with this Privacy Policy, and will ask for your consent before using Personal Information in a way not described here.

By using our Services, visiting our Site, or submitting Information to us, you consent to the collection, use, disclosure, storage, transfer and processing of your Information as described in this Privacy Policy. Your Information may be processed in the country where it was collected and in other countries, where the laws governing processing may be less stringent than those in your own country. If you do not agree with this Privacy Policy, please do not use our Site, platform, or Services.

4. How we obtain and collect your personal information

We collect Personal Information from you:

Directly, through our business interactions and communications with you — when you register with us, contact us, send feedback, use our Services, or complete surveys.
Indirectly, when you interact with our Site or Services, such as your browsing activity. We collect this Personal Information using the technologies described in the section on ‘Cookies’ below and in our Cookies Policy.

5. What kinds of personal information we collect

We collect the following kinds of Personal Information:

When the organization you represent becomes a customer, or you become a user of our Services, we may collect: your first and last names; address; country of residence; your company and/or personal email address; your telephone number; your company name; your job title; your company’s industry; general information about your interest in our products and services; information provided when you correspond with us; your marketing preferences; and information we obtain from third party sources.

Whenever you contact us or respond to our communications, we receive your contact details and any other Personal Information you choose to provide, and we use such Information to fulfil your request.

6. What this website collects

This section describes the Personal Information our Site, https://nibbana.com, collects. Our Site is a static website; it does not embed any social media widgets nor videos; its fonts are served from our own domain rather than a third party; and the only third-party service it loads — Google Analytics — loads solely after you accept analytics cookies (See Section 7 below). Until you accept analytics cookies, the Site will not make any third-party requests for Information.

The only Personal Information collected by our Site is:

What you send us through the contact form: your name and email address, optionally your phone number and company, and the content of your message.
Your IP address and the time of submission, recorded alongside the message so we can investigate abuse of the form.
Analytics, but only if you accept them: pages viewed, approximate location derived from IP, referring website, and general device and browser type. If you decline the analytics cookies, none of this will be collected.

We use these details to respond to your enquiry, and, where relevant, to continue a business conversation you have started.

The Site does not ask for and does not collect government-issued identification, date of birth, nationality, or payment details.

7. How we use cookies

We store and retrieve information on and from your browser using cookies and similar technologies. Analytics cookies are set only if you accept them; strictly necessary cookies are always set. The full list of cookies, including what each one does and how long it lasts, is included in our Cookies Policy, where you may also change your choice at any time.

8. Bot protection

The Nibbana contact form is protected by Cloudflare Turnstile, which checks that submissions come from a person rather than an automated script. Turnstile receives your IP address and basic browser signals to perform that check.

9. Non-personal information

Non-Personal Information may be collected, processed, and used in accordance with applicable law. Generally, Non-Personal Information is used for our own internal purposes — improving the Services and the Site, improving customer service, and improving our content and offerings.

10. What we do with the personal information we collect

Personal Information you submit to us, or that we obtain, is used:

to create and manage the business relationship;
to provide and support our Services to the organization you represent;
to respond to requests that you make;
to communicate with you about our Services and send you related notifications;
to operate, maintain and improve the features and performance of our Site and Services;
to bill you and resolve fee disputes;
to comply with our legal and regulatory obligations;
to monitor compliance with our contractual terms of use;
to enhance security, prevent fraud or abuse, and combat spam and other security risks;
to facilitate and communicate about events in which we participate;
to protect our business and to enforce and exercise our rights.

We may create anonymized information from Personal Information by removing what makes the Information personally identifiable. We may use such anonymized information for internal purposes, such as analyzing usage patterns, and the anonymized information is treated as Non-Personal Information.

11. Lawful bases for our use of your personal information

We rely on your consent and on our legitimate business interests as the legal bases for processing your Personal Information. Specifically, we use your Personal Information when necessary (a) to perform our obligations under a contract with you; (b) to comply with our legal obligations; and (c) for our legitimate interests or those of others, for example, ensuring the security of our Site or Services. When we rely on our legitimate business interests, we carry out a balancing test to confirm they are not outweighed by your interests or fundamental rights.

If we are relying on your consent and you later change your mind, you may withdraw your consent by contacting us at the address in Section 21, and we will stop processing your Personal Information.

12. Marketing

We may use your Personal Information to send you updates about our Services when it is in our legitimate business interests to do so, and we will obtain your consent when the law requires it. We do not add people who submit the Nibbana contact form to marketing lists on the basis of that submission alone. To stop receiving marketing communications, you may contact us at the address in Section 21.

13. Security and confidentiality

We have put in place commercially reasonable and appropriate physical, electronic, and managerial measures designed to prevent Personal Information from being lost, accessed, or used unlawfully. Even with these measures, we cannot guarantee the security of Personal Information, and by using our Services or Site you acknowledge this. We will notify you and any applicable regulator of a data security breach when legally required to do so.

14. With whom we share your information

Except as described in this Privacy Policy, we do not disclose your Personal Information to third parties unless you ask or authorize us to do so. We use the following service providers:

Microsoft Azure — website hosting and delivery of the Nibbana contact form emails.
Cloudflare — domain name services, content delivery, and bot protection on the Nibbana contact form.
Google LLC — website analytics, provided you have accepted analytics cookies. How Google uses data it processes for sites that use its services is described at policies.google.com/technologies/partner-sites.

We may also disclose Personal Information to our affiliates, who are required to honor this Privacy Policy; to your employer and colleagues within the organization you represent; and to any legal, regulatory, or governmental body to which we are required to disclose it. We grant our service providers no independent right to use your Information beyond providing their service to us.

We do not sell your Personal Information; we do not rent or lease it; and we do not share it for advertising.

If Nibbana were to go through a business transition, such as a merger, acquisition, or sale of all or part of its assets, your Personal Information will likely be among the assets transferred, and any acquirer may continue to use your Personal Information as set out in this Privacy Policy.

We may disclose Personal Information where we believe in good faith that it is necessary to comply with relevant laws, to respond to court orders, subpoenas or warrants, to respond to an emergency, or to protect and defend Nibbana’s rights or property.

15. Links to other websites

Our Site may contain links to other websites we do not own or control. Providing such a link does not signify our endorsement. We do not review and are not responsible for their privacy policies, terms, content, or how they handle any Information you give them. You should review the privacy policy of any website you visit.

16. Accessing, correcting, or deleting your personal information

You may ask us to correct, amend, or delete Information we hold about you where it is inaccurate, within reason and in accordance with applicable law. Before acting on a request, we may need to verify your identity. Subject to applicable law, we may decline requests that are unreasonable, risk the privacy of another individual, are excessively repetitive, or would require significant technical modification to our systems. You may contact us using the details in Section 21.

17. Your rights

UK and EU data protection law distinguishes organizations that process Personal Information for their own purposes (“Data Controllers”) from those processing it on behalf of others (“Data Processors”). When we act as a Data Controller, UK and EU residents have the right:

to be informed about our collection and use of your Personal Information;
to access the Personal Information we hold about you;
to have incomplete or inaccurate information corrected;
to ask us to delete or otherwise dispose of your Personal Information;
to restrict our processing of your Personal Information;
to object to our using it for a particular purpose;
in some circumstances, to ask us to transfer it to another organization in a portable, re-usable format.

We will respond within a reasonable period, and in any event within one month unless we tell you we are entitled to longer. Some Personal Information may be exempt from such requests, for example, where we must keep it to comply with our own legal obligations or to establish, exercise, or defend legal claims; we will tell you if an exception applies.

18. How long we keep your personal information

We keep Personal Information for as long as necessary for the purposes for which it was collected. The retention period depends on the nature and sensitivity of the data, the purpose it was collected for, applicable legal requirements, and whether we need it to exercise or defend legal rights.

19. Transfer of information

We may transfer Information, including Personal Information, to recipients in countries other than the one in which it was collected, including countries outside the UK and the EEA. Nibbana is based in the United States, and our service providers named in Section 14 process data in the United States. Those countries may not have the same data protection laws as the country in which you are located. When we transfer Personal Information collected in the UK or EEA to countries outside those areas, we take appropriate measures to ensure it remains adequately protected, which may include entering into UK and European Commission approved standard contractual clauses.

20. Changes to this policy

We may change this Privacy Policy from time to time by posting a new version on our Site. The new version becomes effective on the date it is posted, as shown at the top of the Privacy Policy. Your continued use of our Site or Services constitutes acceptance of any changes, so please check this page from time to time.

21. How to contact us

You may contact us if you have any questions about this Privacy Policy or the Information we hold about you, to exercise any of your rights, to withdraw your consent, or to make a complaint, at the following address:

Nibbana, Inc.
350 Seventh Avenue, Suite 308, New York, NY 10001
Email: nibbana@nibbana.com