NLS Technology Privacy Policy

About this policy

NLS Technology is the website of Biostar Technology. This policy covers information provided through nlstechnology.com, including enquiries, accounts, shopping, affiliate services and online support.

This policy applies to information handled for the NLS Technology website. It does not cover information collected independently by practitioners or other businesses through their own services.

Information we collect

The information involved depends on which parts of the website you use.

Enquiries & support

First and last name, email address, telephone number and the message you submit through the contact or affiliate enquiry forms.

Accounts

Registration and profile details, login credentials, account identifiers and information needed to provide access to your account.

Shopping & payments

Cart contents, billing and delivery addresses, order details and payment information. The payment form sends the cardholder name, card number, expiry date, security code, email and order details to our payment API for processing.

Affiliates & wallets

Referral identifiers, affiliate account and network information, commissions, transaction history and withdrawal requests. Bank details are collected when you add an account for payouts.

Newsletter

The name and email address you provide when subscribing to website updates.

Chat & voice

Your name, email, messages and chat session identifier. If you use voice input, recognised speech is sent as a chat message; your browser or its speech provider may process the audio.

Website activity

Technical information associated with website requests, such as IP address, browser and device details. Analytics can also collect page activity, referral information, session identifiers and approximate location.

Fields needed to complete a request or transaction are identified in the relevant form. Without those details, it may not be possible to create an account, respond to an enquiry or complete an order.

How information is used

• Respond to enquiries, provide product guidance and handle support requests.
• Manage accounts, carts, orders, payments and delivery information.
• Administer affiliate referrals, commissions and payout requests.
• Provide newsletter updates requested through the subscription form.
• Operate chat services and understand website usage through analytics.

Where a legal basis is required, it depends on the activity: fulfilling a contract or taking steps you request before a purchase; legitimate interests in providing support and maintaining the website; consent where required for optional communications or tracking; and applicable legal obligations for transaction records. Consent can be withdrawn without affecting earlier lawful processing.

Cookies & browser storage

The website uses cookies and browser storage for different purposes. Browser storage and records held by our services are separate.

Account, cart & referrals

Local storage holds sign-in information, saved account details, cart contents and affiliate identifiers. These entries can remain between visits until removed by the website or your browser. Signing out clears the active sign-in entries, but does not necessarily clear other stored items.

Chat & session preferences

Session storage remembers chatbot messages, contact details, voice preferences and newsletter popup state during a browser tab session. Closing the chat panel does not clear its saved conversation or delete records already sent to the chat service.

Google Analytics

Google Analytics is included in the website setup and can use cookies such as _ga to distinguish visits and measure activity. Its storage duration depends on the configured settings and your browser.

Crisp live chat

When loaded, Crisp can use cookies to maintain a chat session and associate messages with it. Loading depends on website settings or opening live chat.

You can manage cookies and site storage through your browser settings. Blocking cookies may affect sign-in, saved carts or chat and does not necessarily prevent every request to an external service. Clearing browser data does not delete information already submitted.

Services & sharing

Information submitted through website features is sent to the services that provide them. Our application API uses api-app.nlsvc.com, and the automated chat service uses api-chat.nlsvc.com.

• Payments: the checkout includes a Stax payment integration. Payment details pass through our payment API; do not send card details in contact forms or chat.
• Analytics and fonts: Google Analytics measures website activity, and Google Fonts supplies website fonts. Requests to Google services include technical connection information.
• Live chat: Crisp supports live conversations and related session information.
• Maps: the user-search map loads tiles from OpenStreetMap, which receives the connection details needed to deliver them.
• Independent services: information collected separately by other businesses is outside the scope of this website policy.

These services may process information in countries outside your location.

Retention & security

Retention depends on the type of record, the purpose of the enquiry or account, transaction requirements and any applicable legal or dispute-related obligations. Browser storage and service-provider records can have different retention periods. You can ask us about the period that applies to a particular record or request its deletion.

The published website and its application APIs use HTTPS connections. No internet service can guarantee absolute security. Protect your login details, sign out on shared devices and contact us if you suspect unauthorised use of your account.

Your privacy rights

Depending on your location and the law that applies, your rights may include:

• Access to personal information and a copy of the information held about you.
• Correction of inaccurate or incomplete details.
• Deletion, restriction of processing or a portable copy where those rights apply.
• Objection to certain processing and withdrawal of consent where processing relies on it.
• A complaint to the relevant data protection authority.

Privacy requests should include enough information to identify your account or enquiry. Identity verification may be needed before account-specific information can be released or changed. Do not email passwords, security codes or full payment details.

You can also contact us to stop newsletter or other promotional messages. This is separate from communications needed to handle an existing order or support request.

Children & sensitive information

This website presents technology products and services for professional and business use. Please do not submit patient records, scan results, medical histories or other people's sensitive information through general contact forms or chat.

If you believe a child has provided personal information, or you have sent sensitive information by mistake, contact us so the matter can be reviewed.

Policy updates

This page may be updated as website services or data practices change. The date at the top identifies the latest revision. A revised notice does not itself grant consent for a new use of personal information.

Contact Biostar Technology

For privacy questions, access requests, corrections or deletion enquiries concerning the NLS Technology website: