Privacy Policy for nanhtatetin.com
Effective Date: 17th September 2024
Welcome to nanhtatetin.com, operated by Soe Du Ya (“we,” “us,” or “our”). We are committed to protecting your privacy and ensuring the security of any personal information you provide to us. This privacy policy outlines how we collect, use, share, and store your information, in accordance with the General Data Protection Regulation (GDPR) and other applicable data protection laws.
By accessing and using our website, you agree to the terms outlined in this policy.
1. Data We Collect
We collect various types of personal data from you to provide our services and improve your user experience. This data includes:
- Personal Information: Name, email address, phone number, billing and shipping address.
- Financial Information: Payment details when you purchase from us.
- Technical Data: IP address, browser type, and other analytics data (through cookies and tracking technologies).
- Communication Preferences: Your marketing and communication preferences.
We do not collect or process any special categories of personal data (e.g., health information, political opinions) unless explicitly necessary and permitted by law.
2. How We Collect Your Data
We collect personal data in several ways, including:
- When you make a purchase: Information is collected when you fill out forms on our website or place an order for products.
- Through cookies and tracking technology: Cookies collect information about your browsing habits on our website. You can adjust your browser settings to refuse cookies if you prefer.
- Direct communication: We may collect information when you contact us by email or through other communication channels.
3. How We Use Your Data
We use the data we collect from you for the following purposes:
- To process your orders: Including payment processing, order confirmation, and shipping.
- To provide customer support: Helping with any inquiries, complaints, or feedback.
- To improve our website: Analyzing user behavior to enhance your experience.
- For marketing purposes: Sending promotional emails or newsletters with your consent.
- To comply with legal obligations: Any mandatory disclosures to regulatory bodies.
4. Legal Basis for Processing Personal Data
Under the GDPR, we must have a valid legal basis for processing your personal data. We rely on the following grounds:
- Consent: When you sign up for newsletters or accept our cookies.
- Contract: When you purchase our products and we process your data to fulfill that contract.
- Legal obligation: When necessary for tax, regulatory, or law enforcement requirements.
- Legitimate interest: For improving our website, ensuring security, and understanding our customer base.
5. Data Sharing and Disclosure
We do not sell, trade, or rent your personal data to third parties. However, we may share your data with trusted third parties under the following conditions:
- Service providers: For tasks such as payment processing, shipping, and analytics (e.g., Stripe, PayPal).
- Legal compliance: When required by law or if we believe in good faith that such disclosure is necessary to protect our rights or comply with a legal obligation.
- Business transfers: If we are involved in a merger, acquisition, or sale of assets, your data may be transferred to the new entity.
We ensure that any third parties with whom we share your data adhere to strict confidentiality and security measures in compliance with GDPR.
6. Data Retention
We will retain your personal data only as long as necessary to fulfill the purposes outlined in this policy, including:
- Transaction data: Retained for a period required by tax and accounting laws (usually 6 years).
- Marketing data: Retained until you withdraw your consent for marketing communications.
After these periods, we securely delete or anonymize your data.
7. Your Rights under GDPR
As a data subject, you have the following rights under the GDPR:
- Right to access: Request a copy of the data we hold about you.
- Right to rectification: Correct any incomplete or inaccurate data.
- Right to erasure (Right to be forgotten): Request that we delete your data when it is no longer necessary for the purposes for which it was collected.
- Right to restrict processing: Ask us to limit the processing of your data under certain circumstances.
- Right to data portability: Request the transfer of your data to another service provider.
- Right to object: Object to the processing of your data based on legitimate interests or for direct marketing purposes.
- Right to withdraw consent: You can withdraw your consent to process your personal data at any time (e.g., opt-out of marketing emails).
To exercise these rights, please contact us at [email protected]. We will respond to your request within one month as required by law.
8. Security Measures
We take your privacy and data security seriously. We have implemented the following security measures:
- Encryption: Your financial and personal data are encrypted and protected during transmission using SSL (Secure Socket Layer) technology.
- Access Control: Only authorized personnel have access to your personal data.
- Regular Monitoring: We regularly review our systems for vulnerabilities and apply necessary updates to maintain security.
9. International Data Transfers
Since we are based in the United Arab Emirates and our customers may be located around the world, your personal data may be transferred to, and processed in, countries other than your own. These countries may have different data protection laws.
Where applicable, we ensure that data transfers are protected by appropriate safeguards, such as standard contractual clauses or other mechanisms permitted under the GDPR.
10. Cookies and Tracking Technologies
We use cookies and similar tracking technologies to enhance your experience on our website. These technologies allow us to:
- Analyze website traffic
- Personalize content
- Provide social media features
You can manage your cookie preferences through your browser settings. However, please note that disabling cookies may affect your ability to use certain features of our website.
11. Changes to This Privacy Policy
We may update this privacy policy from time to time to reflect changes in our practices or legal obligations. Any changes will be posted on this page, and we will notify you via email or a prominent notice on our website if the changes are significant.
12. Contact Us
If you have any questions or concerns regarding this privacy policy or how we handle your data, please contact us at:
Soe Du Ya
Email: [email protected]
Address: Al Barsha – Al Barsha 1, Dubai, United Arab Emirates