Privacy Policy for OrientalBronzes.com
At OrientalBronzes.com (“we,” “our,” or “us”), your privacy is of paramount importance. We are committed to protecting the personal data of our users, customers, partners, and visitors in full accordance with applicable data protection legislation, including the General Data Protection Regulation (GDPR) and the California Consumer Privacy Act (CCPA). This Privacy Policy outlines how we collect, use, disclose, and protect the personal information you provide when accessing or using our website, services, or communicating with us.
1. Introduction
We value your trust and are transparent in how we process your personal data. This Privacy Policy serves to explain the types of personal data we collect, the legal basis for processing your data, what your rights are, and how you may exercise them.
We are committed to safeguarding personal data through robust security practices, strict confidentiality obligations, and ethical data handling.
2. Scope and Data Controller
This Policy applies to the operation of the website located at orientalbronzes.com and all associated services, platforms, or digital products offered through it. For the purposes of the GDPR, OrientalBronzes.com is the data controller of your personal information.
If you reside in California and are protected under the CCPA, we are the business entity responsible for the processing of your information.
3. Categories of Personal Data We Process
We process the following categories of personal data, depending on your interaction with our site and services:
a. Usage Data
Includes information automatically collected from your browser such as IP address, browser type and version, device identifiers, time zone setting, referring pages, interaction data, session data, pages visited, and other technical diagnostics.
b. Account Data
When you register an account or place an order, we may collect your full name, shipping and billing address, email address, and phone number.
c. Profile Data
Information you voluntarily provide such as preferences, order history, browsing behavior on orientalbronzes.com, saved favorites, and historical interactions with our services.
d. Communication Data
Includes records of communications with us such as support queries, contact forms, emails, and other information you provide when you reach out to us.
e. Technical Data
Aggregated and device-specific data, such as operating system, hardware, device type, browser plug-ins, system configuration, screen resolution, and mobile network.
f. Transaction Data
Details of purchases or attempted purchases on orientalbronzes.com, including products ordered, payment method, invoice and tax details, and shipping confirmations.
g. Preference Data
Marketing and communication preferences, subscriptions, interests related to our collections, as well as opt-in or opt-out selections relating to promotional emails or third-party communications.
4. Legal Bases for Processing
We only process your personal data when permitted by law. The primary legal bases include:
– Performance of a contract: Processing your order, shipping your purchases, managing your account.
– Consent: Sending newsletters, marketing communications, and setting non-essential cookies.
– Legal obligation: Fraud prevention, compliance with tax and accounting obligations, responding to authorities.
– Legitimate interests: Improving website performance, analyzing user behavior to enhance user experience, ensuring platform security.
For California residents, your data is processed in compliance with CCPA’s definitions of “business purposes” and “service provider obligations.”
5. Your Rights
If you are a resident of the EU, EEA, United Kingdom, or certain other jurisdictions, you have the following rights under applicable law:
– Right of Access – Request copies of your personal data we hold.
– Right to Rectification – Request correction of inaccurate or incomplete data.
– Right to Erasure – Request deletion of your personal data, subject to certain exceptions.
– Right to Restrict Processing – Ask us to suspend processing where there is a dispute or legal basis in question.
– Right to Data Portability – Receive your data in a structured format and request transmission to another controller.
– Right to Object – Object to processing where we rely on legitimate interest or where your data is used for direct marketing.
– Right to Withdraw Consent – Revoke consent at any time where processing is based on your consent.
California residents may also request:
– The categories and specific pieces of personal information collected.
– Information about categories of sources and third parties with whom your data is shared.
– Deletion of personal information collected (subject to exceptions).
To exercise any rights, please contact us at [email protected].
6. Security Measures
We use administrative, technical, and physical safeguards to protect personal data against unauthorized access, disclosure, alteration, or destruction. These measures include:
– End-to-end encryption of data in transit and at rest.
– Controlled access and role-based restrictions on personal data.
– Regular system security audits and vulnerability assessments.
– Secure backup protocols and multi-layered authentication.
– Staff privacy training and vendor security diligence.
However, no transmission or system can be guaranteed as 100% secure; therefore, we encourage users to also take suitable precautions when transmitting their confidential information online.
7. International Data Transfers
We may transfer and store your data outside of your jurisdiction, including outside the European Economic Area (EEA). Any such transfer utilizes lawful adequacy mechanisms, such as European Commission Standard Contractual Clauses or equivalent safeguards, to ensure your personal data remains protected regardless of location.
8. Data Retention
We retain personal data only for as long as necessary for the purposes outlined in this Privacy Policy. Retention periods vary based on data categories:
– Usage Data: retained for up to 12 months for analytics and security auditing.
– Account and Profile Data: retained for the lifecycle of your account and up to 6 years thereafter for legal compliance.
– Transaction Data: retained for 7 years to comply with financial and tax laws.
– Communication Data: retained for up to 24 months for support history or until requested deletion.
– Preference Data: retained until you modify or revoke preferences.
Upon expiration of the applicable retention period, your data will be securely deleted or anonymized.
9. Cookie Policy
Our website uses cookies and similar technologies to personalize your experience and analyze site traffic. Cookies fall into the following categories:
– Essential Cookies: Necessary for website functionality (e.g., shopping cart, login).
– Functional Cookies: Enable enhanced features like saved preferences.
– Analytics Cookies: Allow us to measure and improve site performance through aggregated usage insights.
– Performance Cookies: Help diagnose technical issues, enhance speed, and monitor error management.
We do not use advertising cookies or sell personal data to third-party marketers.
10. Cookie Management
Upon visiting orientalbronzes.com, you are presented with a cookie consent banner in compliance with GDPR and CCPA. You may accept, decline, or customize cookie settings at any time through our cookie management portal.
You may also configure your browser settings to decline cookies. However, essential and functional cookies are required to deliver the full functionality of our platform.
11. Children’s Privacy
Our site is not intended for children under the age of 13, and we do not knowingly collect personal data from individuals within this age group. If we become aware that data from a child under 13 has been collected following a parental report or system detection, we will promptly delete such information.
If you are a parent or guardian and believe a child has provided us with personal information, please contact us at [email protected].
12. Updates to This Privacy Policy
We may revise this Privacy Policy to reflect changes in legislation, technology, our practices, or other operational reasons. Where legally required, we will notify you via email or prominent notice on our website prior to the change taking effect.
We encourage users to periodically review this page to stay informed of how we are protecting your personal data.
13. Contact Information
If you have any questions, concerns, or requests regarding this Privacy Policy or your personal data rights, please contact us:
Email: [email protected]
We are fully committed to maintaining your privacy and adhering to applicable data protection laws. Should you have any privacy-related concerns, we invite you to contact us directly.