Privacy Policy

Effective Date: 01.01.2026
Last updated: 14.10.2026
Controller: LifeDesign Holding LLP (Canada)
Email: legal@ntnk.io
VAT (Germany): DE326278842

Applies to:

• ntnk.io (E-commerce)

• lifedesign.ac (Education & Consulting)

• justplay.space (Community & Membership)

A. What We Collect

We collect and process the following categories of data:

• Identity Data: name, email, address, phone number, billing details

• Account Data: login credentials, preferences, purchase history, access logs

• Payment Data: payment processor confirmations, transaction IDs, wallet addresses (for crypto payments)

• Technical Data: IP address, browser type, device identifiers, cookies, analytics data

• Support & Communication Data: messages, feedback, customer service requests

B. How We Use Your Data

Your data is used for the following purposes:

• Fulfilling orders and delivering physical or digital products

• Providing access to educational or consulting services

• Managing memberships, communities, and events

• Customer communication and technical support

• Fraud prevention and AML (Anti–Money Laundering) compliance (for crypto transactions)

• Analytics, performance optimization, and marketing (only with consent)

• Legal compliance (VAT, tax, accounting obligations)

C. Crypto Data Handling

When paying with crypto, we process:

• Wallet address (sender & receiver)

• Transaction ID and timestamp

• Token type and value (converted to EUR/USD for accounting)

We do not share crypto-related data with any third parties except:

• Blockchain verifiers (for transaction confirmation)

• Regulatory or legal authorities if required by law (AML/KYC obligations)

All crypto data is stored securely and used exclusively for verification, accounting, and compliance.

D. Legal Basis (GDPR)

We process your data under the following lawful bases:

• Contract necessity: To fulfill purchases or provide access to services

• Legitimate interest: To improve services, prevent fraud, and ensure platform security

• Legal obligation: To comply with VAT, accounting, and recordkeeping rules

• Consent: For newsletters, cookies, and marketing communications

E. Data Retention

F. Data Sharing & Processors

We use service providers for the particular services you use. For the NTNK storefront and customer-care forms, these include:

• Shopify – e-commerce, checkout, customer authentication, orders and returns.

• Netlify – website hosting, form processing and operational storage.

• Resend – enquiry confirmations and withdrawal acknowledgement emails.

• NTNK – Atrikom Fulfilment – warehouse handling and identification of returned goods.

Authorised staff also use our private Cockpit workspace and business communication tools to manage requests. Payment and other platform services may involve the providers already used for those services, including Stripe, PayPal, Wise, Proton, GoHighLevel and Notion. Not every provider receives every form submission.

Shopify and Netlify incorporate data-processing terms into their service agreements. Resend states that its data-processing agreement takes effect when an account is created. Their current documents describe processor responsibilities and international-transfer safeguards: Shopify DPA, Netlify DPA, and Resend DPA.

G. International Transfers

Service providers and authorised operations staff may process information outside your country, including outside the EEA. Our current Netlify site-wide form storage uses its default US storage region. Resend stores email content and delivery records in the United States; selecting a European sending region does not change that storage location. Shopify also processes data internationally as described in its data-processing terms.

The relevant provider terms describe transfer safeguards, including Standard Contractual Clauses and, where applicable, other recognised transfer mechanisms. The mechanism depends on the provider, receiving entity and applicable law. You can request further information or a copy of the relevant safeguards through our privacy contact route, subject to protection of confidential information.

H. Your Rights (GDPR / US)

You have the right to:

• Access, correct, or delete your data

• Restrict or object to processing

• Request data portability

• Withdraw consent (for marketing or cookies)

• File a complaint with your local data protection authority

For privacy requests, use our customer care form and select the privacy topic, or contact legal@ntnk.io. If you use the form, follow its email-confirmation step to send your enquiry. You may use the direct legal contact if confirmation is unavailable. We respond without undue delay and, where the GDPR applies, normally within one month. If a permitted extension is necessary, we explain the reason within that first month. We may need proportionate information to verify your identity before disclosing personal data.

I. Children

Our services are not directed to individuals under 16 years old.
If we discover that we have collected data from minors without parental consent, we will delete it immediately.

Contact form and email confirmation

When you use the NTNK contact form, we process your name, email address, selected topic, message, and any order number you choose to provide. Our hosting service also processes connection information needed to operate the website and protect it from abuse. Please do not include passwords, card details, or other sensitive information in your message.

We use Netlify to host the form and temporarily store pending enquiries. We use Resend to send confirmation emails and deliver confirmed enquiries to our support or legal inbox. Sending a message through this form does not create an account or subscribe you to marketing.

A confirmation link is valid for one hour. Your enquiry is forwarded to our team only after you open the link and select “Confirm and send”. Unconfirmed enquiries expire after one hour and are deleted by an hourly cleanup process on its next successful run. Once Resend accepts a confirmed enquiry for delivery, its message content is deleted from temporary form storage. A receipt containing no message content is kept for 24 hours to prevent duplicate delivery.

To limit unwanted messages, we keep short-lived sending-limit records derived from email addresses and connection addresses using a secret-key hash. These form-level records do not contain the original address. They expire within two days and are cleared by the cleanup process. Hosting logs and Resend delivery records have separate retention arrangements. Confirmed support enquiries in our inbox follow the support-ticket retention described elsewhere in this policy.

We process enquiries to respond to your request, including requests connected to a purchase, and to protect our services from misuse. For support, use our customer care form. The privacy contact options above and our Legal Notice remain available.

NTNK returns and withdrawal declarations

For returns from ntnk.io, Shopify handles customer sign-in. We use your authenticated customer identifier to retrieve your own orders, the items that can be returned and the status of existing returns. We process the items and quantities you select, any optional reason or note, your requested resolution, the time of your request and the reference that connects it with Shopify. The packing slip contains the return reference and selected items so our warehouse can identify your parcel.

You can also submit a withdrawal declaration without signing in. We record the name, acknowledgement email address, order or contract reference, full or partial scope, item details and declaration you provide, together with the receipt time. We send an acknowledgement to the address you provide and record its delivery status. A declaration alone does not verify your identity or give access to an order. Please do not include payment-card details, passwords or unnecessary sensitive information.

We use these records to handle your request and perform the purchase contract, meet applicable withdrawal and consumer-law obligations, and protect our legitimate interests in securing the service, preventing duplicate actions and handling claims. Where the GDPR applies, the corresponding bases are Article 6(1)(b), (c) and (f). These forms do not subscribe you to marketing.

Netlify hosts the forms and stores their operational records. Shopify provides sign-in, order and native return services. Resend delivers withdrawal acknowledgements. Authorised staff review requests in our private Cockpit workspace, which keeps encrypted operational copies and review history. Relevant item and return-reference information is used by NTNK – Atrikom Fulfilment to receive and identify returned goods. Submitting a request does not by itself confirm a refund or change stock.

The NTNK return session lasts no longer than one hour and may end sooner. Its essential session cookie is used for account access, not advertising. Expired server sessions are removed by scheduled cleanup. For withdrawal abuse prevention, we keep short-lived keyed hashes derived from email and connection addresses; the rate-limit keys contain neither original address. These keys expire within two hours and are removed in bounded hourly cleanup runs. A backlog or temporary service failure may delay removal. Provider logs and delivery records have separate retention arrangements.

Return and withdrawal evidence is retained while the request is being handled and where needed for applicable recordkeeping duties or legal claims. Routine support notes follow the support retention criteria in this policy; a legal obligation or unresolved claim may require a relevant subset to be kept longer. Deleting a login session does not delete a submitted declaration, order or refund record. You can request access, correction, restriction or erasure using the privacy contact options below; we verify identity before disclosing account information.

J. Updates

We may update this Privacy Policy from time to time to reflect legal or operational changes. The latest version is always available at: 👉 ntnk.io/privacy