Privacy Policy for Kiridyes.com
1. Introduction
At Kiridyes.com, we are committed to safeguarding your privacy and ensuring the protection of your personal data. We uphold the highest standards of data privacy and security, in full compliance with applicable data protection laws, including the General Data Protection Regulation (GDPR) and the California Consumer Privacy Act (CCPA). This Privacy Policy outlines how your information is collected, used, stored, and protected when you visit or interact with our website.
2. Scope of Policy and Data Controller Role
This Privacy Policy applies to all users of Kiridyes.com and any associated services, including but not limited to the browsing of products, creation of user accounts, and interactions through communication channels. Kiridyes.com is the data controller for the purposes of applicable data protection law, meaning we determine the purposes and means of processing your personal data.
If you have any questions about this Policy or how we handle your personal information, you may contact us at: [email protected].
3. Categories of Data Processed
When you interact with Kiridyes.com, we may collect and process the following categories of personal data:
a) Usage Data:
Information about how you use our website, such as pages visited, time spent, referral paths, IP address, browser type, geolocation, and device identifiers.
b) Account Data:
Data provided during registration or account creation, such as full name, residential or business address, email address, and telephone number.
c) Profile Data:
Details relating to your user preferences, purchase history, saved items, browsing behavior, wishlists, and other personal interests expressed on the site.
d) Communication Data:
Records of your interactions with us via email, contact forms, or live chat, including support queries and message content.
e) Technical Data:
Device-specific information, such as operating system type/version, system settings, language preferences, and other configuration data.
f) Transaction Data:
Details concerning orders and purchases on our platform, including billing and shipping addresses, order history, payment tokenized information (e.g., last four digits of credit card), and delivery status.
g) Preference Data:
Information about your chosen marketing consents, communication settings, product category interests, and related behavioral choices.
4. Legal Bases for Processing
We process your personal data pursuant to the following lawful bases under data protection law:
– Performance of a Contract: Data processing necessary for fulfilling contractual obligations, such as order processing, delivery, and customer service.
– Legitimate Interests: Data processing to secure and enhance our website’s functionality, improve user experience, and prevent fraud or misuse, provided your rights do not override such interests.
– Consent: Where we rely on your explicit consent, particularly for marketing emails, analytics tracking, and the placement of non-essential cookies.
– Legal Obligations: Where required, we process and retain data necessary to comply with applicable legal and regulatory obligations.
5. Your Rights
You have the following rights concerning your personal data:
– Right of Access: You may request a copy of the data we hold about you.
– Right to Rectification: You may request corrections to your personal data if inaccurate or incomplete.
– Right to Erasure: Also known as the “right to be forgotten,” you may request that we delete your data under certain conditions.
– Right to Restriction: You may request that we limit processing of your data in specific circumstances.
– Right to Data Portability: You may request that we send a copy of your data to another organization, in a structured, machine-readable format.
– Right to Object: You may object to processing based on legitimate interests or receiving direct marketing.
– Right to Withdraw Consent: Where processing is based on your consent, you may withdraw that consent at any time.
To exercise any of the above rights, please contact us at [email protected].
6. Security Measures
We maintain rigorous technical and organizational measures to protect your personal data, including:
– Data encryption in transit and at rest.
– Access controls to limit internal data access.
– Secure servers and firewalls to prevent unauthorized access.
– Routine data backups to ensure integrity and availability.
– Staff training on privacy and cybersecurity practices.
7. International Data Transfers
Where your personal data is transferred outside your country of residence, we ensure that such transfers are conducted in accordance with applicable legal requirements. For users in the EU/EEA, standard contractual clauses approved by the European Commission are used to safeguard cross-border transfers. Appropriate safeguards are implemented to maintain an equivalent level of data protection regardless of the location of the data processor.
8. Data Retention
We retain personal data only for as long as necessary to fulfill the purposes for which it was collected, including the following general retention periods:
– Usage Data: Up to 12 months for analytics and security monitoring.
– Account and Profile Data: As long as the user account remains active.
– Communication Data: Up to 24 months for service history and quality improvements.
– Transaction Data: Up to 7 years for tax, legal, and regulatory purposes.
– Preference Data: Until consent is withdrawn or the account is terminated.
After expiration of the retention period, data is securely deleted or anonymized.
9. Cookie Policy
Our website uses cookies to improve user experience and analyze website traffic. Cookies are small data files stored on your device that help us deliver website functionality, tailor experiences, and optimize service delivery. We use the following categories of cookies:
– Essential Cookies: Necessary for core site functions like navigation, session management, and security.
– Functional Cookies: Improve usability by remembering choices and preferences.
– Analytics Cookies: Collect aggregated usage data to improve website performance.
– Performance Cookies: Help monitor error reports and load speeds to improve functionality.
10. Cookie Management and Compliance
By continuing to use Kiridyes.com, you consent to our use of non-essential cookies, subject to opt-out mechanisms provided. Where legally required by the GDPR or CCPA, we obtain your consent before deploying certain types of cookies. You can manage your cookie preferences through website settings or by modifying browser configurations to reject or remove cookies.
For California residents, your right to opt-out of sale or sharing of your personal data is honored in accordance with the CCPA. We do not “sell” personal information as defined by the CCPA.
11. Children’s Privacy
Kiridyes.com does not knowingly collect or solicit personal data from children under the age of 13. If we become aware that such data has been collected without verified parental consent, we will take appropriate steps to delete it. If you believe a child under 13 has provided us with personal information, please contact us at [email protected].
12. Policy Updates and Notifications
We reserve the right to update this Privacy Policy to address changes in legal obligations, technology, or business operations. Any significant changes will be communicated via notices on our website or through direct communication channels, where applicable. Continued use of Kiridyes.com constitutes acceptance of the revised Policy.
13. Contact Us
For questions, requests, or concerns regarding this Privacy Policy or our data processing practices, please contact:
Email: [email protected]
Kiridyes.com is committed to full compliance with applicable data protection laws and maintaining your trust by safeguarding your personal data. If at any time you have questions about how your information is handled, we encourage you to reach out.