This Privacy & Cookie Policy explains how Nazari Ecom Solutions (“we”, “us”, “our”), operating under the brand Ninety Nine Ways (“99ways”), collects and uses personal data when you visit 99ways.io, interact with our content, or communicate with us.
Nazari Ecom Solutions is the controller of your personal data.
- Legal entity: Nazari Ecom Solutions
- Brand: Ninety Nine Ways (registered trademark of Nazari Ecom Solutions)
- Chamber of Commerce (KvK): 91552451
- Office address: Mr. Treublaan 7, 1097 DP Amsterdam, The Netherlands
- VAT Identification Number: NL004899587B87
- Contact for privacy matters: privacy[@]99ways.io
If anything in this document is unclear, you can email us at privacy[@]99ways.io
1. Scope
This Policy covers personal data we process when:
- You visit 99ways.io or any subpages (including the blog)
- You fill in a form (e.g. contact, discovery call, newsletter signup)
- You interact with embedded content (e.g. videos, maps)
- You subscribe to our newsletter or marketing communications
It does not cover data processing under a signed service agreement with clients. That is governed by the relevant contract and, where applicable, a separate Data Processing Agreement (DPA).
2. What data we collect
We collect the following categories of data. Not all categories apply to every visitor.
2.1 Data you provide directly
When you fill in a form, schedule a call, or contact us, we may collect:
- Name
- Email address
- Company name
- Role / job title
- Website URL
- Any information you provide in message fields
- Your preferences (e.g. how you heard about us, topics of interest)
If you subscribe to our newsletter, we additionally store:
- Your email address
- Your subscription status and preferences
2.2 Automatically collected data (analytics & tracking)
When you visit our website, we and our service providers automatically collect some information using cookies, pixels, scripts, and similar technologies. This may include:
- IP address (truncated or full, depending on tool configuration)
- Device information (browser type and version, operating system, screen resolution)
- Language settings
- Referrer URL (the page you came from)
- Pages visited, time spent, clicks, scrolls
- Session recordings and heatmaps (cursor movement, clicks, scroll behaviour)
- Form interactions (e.g. errors, abandons), not necessarily the content of the fields unless you submit the form
We currently use, among others:
- PostHog (EU-based instance)
- Google Analytics 4 (GA4)
- Google Tag Manager (GTM)
- Cloudflare Browser Insights
- Other tools integrated into our WordPress website and tech stack (see section 3)
The exact tools may change over time as we refine our analytics setup.
3. Tools and third-party services
Our website runs on WordPress and uses a range of plugins, scripts, and third-party services, which may process personal data as processors or independent controllers. These include, for example:
- Analytics and performance
- PostHog (self-hosted in the EU)
- Google Analytics 4
- Cloudflare Browser Insights
- Tag management
- Google Tag Manager
- Content and media
- YouTube (embedded videos)
- Google Maps (embedded maps)
- Google Fonts
- WordPress ecosystem & plugins
- Themes (e.g. Kadence)
- Plugins such as W3 Total Cache, Yoast SEO, OptinMonster, Akismet, Popup Maker, Calendly integration and others
- JavaScript frameworks & libraries
- React, Vue.js, Backbone.js, jQuery, Tailwind CSS, and related libraries used to render and enhance the site
We use these tools for purposes such as:
- Serving and securing the website
- Measuring traffic and performance
- Running forms, popups, and appointment scheduling
- Improving user experience and content
The specific tools and providers we use may change without prior notice as we improve or modify our stack. Where legally required, we will update our cookie banner and/or this Policy.
4. Legal bases for processing (GDPR)
We process personal data under the following legal bases:
- Consent
- For non-essential cookies (e.g. analytics, marketing) where required
- For newsletter subscriptions and certain marketing communications
- You can withdraw your consent at any time (see section 9)
- Legitimate interests
- To operate and secure our website
- To understand how visitors use our content (analytics)
- To maintain and improve our services and marketing
- To prevent abuse and fraud
- Contractual necessity / pre-contractual steps
- When you request a call, proposal, or other information as a prospective client
- Legal obligations
- To comply with applicable laws, tax obligations, or keep mandatory records
5. How we use your data
We use the data we collect for the following purposes:
- Operating and securing the website
- Hosting, load balancing, caching, and security
- Detecting and preventing abuse or technical issues
- Analytics & conversion optimization
- Understanding how visitors interact with pages and content
- Running and analysing experiments or A/B tests (now or in the future)
- Improving site structure, content, and user experience
- Responding to your requests
- Answering contact inquiries
- Scheduling and preparing calls
- Following up with requested information
- Marketing & communication
- Sending newsletters or updates if you subscribed
- Measuring open and click rates of emails (where applicable)
- Personalising communication based on your interests (within limits)
- Legal, compliance, and enforcement
- Protecting our rights, resolving disputes
- Responding to lawful requests from authorities where required
We do not sell personal data.
6. Cookies and similar technologies
6.1 What are cookies?
Cookies are small text files placed on your device by your browser. Similar technologies include local storage, pixels, and tags. They help the site function and allow us to understand and improve how it’s used.
6.2 Types of cookies we use
- Strictly necessary cookies
Required for the basic functioning and security of the website. These cannot be switched off in our systems and do not require consent under GDPR. - Performance and analytics cookies
Used to measure and improve the performance of our site. For example, they help us understand which pages are popular and how visitors move around the site. - Functional cookies
May be used to remember your preferences (e.g. language, cookie choices). - Marketing / targeting cookies (now or in the future)
Used to deliver or measure advertising, retargeting, or similar marketing functions. If we implement such tools, they will be reflected in our cookie consent options.
Depending on your location and the applicable law, we may request your consent for certain categories before placing them on your device.
6.3 Cookie consent and management
When you first visit our site, you may see a cookie banner asking you to accept or manage cookies. You can:
- Accept all cookies
- Reject non-essential cookies (where offered)
- Adjust your preferences for each category (where offered)
You can also manage cookies in your browser settings by blocking or deleting them. If you block certain cookies, parts of the site may not function properly.
7. Data sharing and international transfers
We may share personal data with:
- Service providers / processors
- Hosting providers, analytics providers, email service providers, security tools, CRM or marketing tools, and similar vendors who support our operations.
- These providers only process your data on our behalf and under our instructions.
- Professional advisors
- Lawyers, accountants, or consultants, where necessary and subject to confidentiality obligations.
- Authorities
- Where we are legally required to disclose information or to protect our rights.
Our primary infrastructure and our PostHog instance are located in the European Union. However, some providers (e.g. Google services, certain plugins) may process data outside the EU, including in countries that may not offer the same level of protection as the EU.
When data is transferred outside the EU/EEA, we take appropriate safeguards, such as:
- Standard Contractual Clauses (SCCs) approved by the European Commission
- Other applicable transfer mechanisms under data protection law
8. Data retention
We retain personal data only for as long as necessary for the purposes described in this Policy, including to:
- Provide you with information or services you requested
- Maintain and improve our website and analytics
- Comply with legal, accounting, or reporting obligations
Retention periods differ depending on the type of data and context, for example:
- Contact and inquiry data: typically retained while we are in active communication and for a reasonable period afterwards
- Newsletter data: retained while you remain subscribed and for a short period after you unsubscribe (to maintain suppression lists)
- Analytics data: retained according to the configuration of our analytics tools (often aggregated or pseudonymised after a period)
If you want more detail on specific retention periods, you can contact us at privacy[@]99ways.io
9. Your rights
If you are in the European Union, the UK, or in a jurisdiction with similar data protection rules, you may have some or all of the following rights regarding your personal data:
- Right of access – to know whether we process your data and obtain a copy.
- Right to rectification – to correct inaccurate or incomplete data.
- Right to erasure (“right to be forgotten”) – to request deletion of your data under certain conditions.
- Right to restriction – to restrict processing under certain conditions.
- Right to data portability – to receive your data in a structured, commonly used format and have it transmitted to another controller, where technically feasible.
- Right to object – to object to processing based on our legitimate interests, including profiling.
- Right to withdraw consent – where processing is based on your consent, you can withdraw it at any time, without affecting prior processing.
To exercise these rights, contact us at privacy[@]99ways.io We may ask you to verify your identity before responding.
You also have the right to lodge a complaint with your local data protection authority. In the Netherlands, this is the Autoriteit Persoonsgegevens.
10. Email marketing and newsletters
If you subscribe to our newsletter or marketing updates:
- We process your email address and possibly your name and preferences.
- We may measure performance (e.g. opens, clicks) to understand what content is relevant.
- The legal basis is your consent.
You can unsubscribe at any time:
- By clicking the “unsubscribe” link in any newsletter
- Or by contacting us at privacy[@]99ways.io
11. Children’s privacy
Our website and services are not directed at children under 16 years of age. We do not knowingly collect personal data from children under that age.
If you believe we may have collected data from a child under 16, please contact us at [email protected], and we will take steps to delete such data.
12. Changes to this Policy
We may update this Privacy & Cookie Policy from time to time to reflect changes in our practices, technologies, or legal requirements.
When we make material changes, we will update the “Last updated” date at the top. In some cases, we may provide additional notice (e.g. a banner or email).
13. Contact
For any questions, concerns, or requests regarding this Policy or your personal data, you can contact:
Nazari Ecom Solutions
Attn: Privacy
Mr. Treublaan 7
1097 DP Amsterdam
The Netherlands
Email: privacy[@]99ways.io
