1. Introduction
Welcome to Charmingnydistri. We are committed to protecting your personal data and respecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit our website charmingnydistri.world and purchase our products.
This policy complies with the General Data Protection Regulation (GDPR), the California Consumer Privacy Act (CCPA), and other applicable data protection laws.
2. Data Controller Information
The data controller responsible for your personal data is:
- Company Name: Charmingnydistri
- Address: 501 N Mildred Rd, Cortez, CO 81321, United States
- Email: connectuse@charmingnydistri.world
3. Information We Collect
3.1 Personal Data You Provide
We collect personal data that you voluntarily provide when you:
- Place an order through our website
- Create an account
- Subscribe to our newsletter
- Contact our customer support
- Participate in surveys or promotions
This may include:
- Full name
- Email address
- Phone number (if provided)
- Shipping and billing address
- Payment information (processed securely by third-party payment processors)
- Any messages or communications you send us
3.2 Automatically Collected Data
When you visit our website, we may automatically collect certain information, including:
- IP address
- Browser type and version
- Device information
- Operating system
- Pages visited and time spent on pages
- Referring website or source
- Cookie data (see our Cookie Policy for details)
4. Legal Basis for Processing (GDPR)
We process your personal data based on the following legal grounds:
- Contract Performance: Processing necessary to fulfill orders and provide services you request.
- Consent: Where you have given explicit consent for specific purposes (e.g., marketing communications).
- Legitimate Interests: Processing necessary for our legitimate business interests, such as fraud prevention and website security.
- Legal Obligation: Processing necessary to comply with legal requirements.
5. How We Use Your Information
We use the collected information for the following purposes:
- Processing and fulfilling your orders
- Sending order confirmations and shipping updates
- Providing customer support and responding to inquiries
- Improving our website and products
- Sending marketing communications (with your consent)
- Preventing fraud and ensuring website security
- Complying with legal obligations
- Analyzing website usage to enhance user experience
6. Data Sharing and Disclosure
We may share your personal data with:
- Service Providers: Third-party companies that help us operate our business (payment processors, shipping carriers, email service providers).
- Legal Requirements: When required by law, court order, or governmental authority.
- Business Transfers: In connection with a merger, acquisition, or sale of assets.
We do not sell, rent, or trade your personal information to third parties for their marketing purposes.
7. Data Retention
We retain your personal data only for as long as necessary to fulfill the purposes outlined in this policy:
- Order Data: Retained for 7 years for tax and legal compliance.
- Account Data: Retained until you request account deletion.
- Marketing Data: Retained until you withdraw consent.
- Analytics Data: Retained for up to 26 months.
8. Your Rights
Under GDPR and other applicable laws, you have the following rights:
- Right to Access: Request a copy of the personal data we hold about you.
- Right to Rectification: Request correction of inaccurate or incomplete data.
- Right to Erasure: Request deletion of your personal data (subject to legal limitations).
- Right to Restrict Processing: Request limitation of how we process your data.
- Right to Data Portability: Receive your data in a structured, machine-readable format.
- Right to Object: Object to processing based on legitimate interests or for marketing purposes.
- Right to Withdraw Consent: Withdraw consent at any time where processing is based on consent.
To exercise these rights, please contact us at connectuse@charmingnydistri.world. We will respond within 30 days (or within 45 days where required by law, such as under the California Consumer Privacy Act).
9. California and Other U.S. State Privacy Rights
If you are a resident of California, Colorado, Connecticut, Virginia, Utah, or other U.S. states with comprehensive privacy laws, you may have additional rights regarding your personal information.
9.1 California (CCPA/CPRA)
Under the California Consumer Privacy Act (CCPA) as amended by the California Privacy Rights Act (CPRA), California residents have the right to:
- Right to Know: Request disclosure of the categories and specific pieces of personal information we have collected about you, the categories of sources, the business or commercial purposes for collection, and the categories of third parties with whom we share the information.
- Right to Delete: Request deletion of your personal information, subject to certain exceptions (e.g., to complete a transaction, detect security incidents, comply with legal obligations).
- Right to Correct: Request correction of inaccurate personal information we maintain about you.
- Right to Opt-Out of Sale or Share: We do not sell personal information as defined under the CCPA. We do not share personal information for cross-context behavioral advertising in a way that qualifies as a "sale" or "share" under California law. If our practices change, we will provide a clear "Do Not Sell or Share My Personal Information" link and honor opt-out requests.
- Right to Limit Use of Sensitive Personal Information: You may request that we limit our use of your sensitive personal information (e.g., precise geolocation, health information) to that which is necessary to perform the services or provide the goods.
- Right to Non-Discrimination: We will not discriminate against you for exercising any of your privacy rights.
To submit a request, contact us at connectuse@charmingnydistri.world. We will verify your identity and respond within 45 days. You may designate an authorized agent to submit requests on your behalf; we may require proof of authorization.
9.2 Other U.S. States
Residents of Virginia (VCDPA), Colorado (CPA), Connecticut (CTDPA), Utah (UCPA), and other states with similar laws may have rights to access, correct, delete, port, or opt out of certain processing of personal information. To exercise these rights, contact us using the information in Section 14.
10. Data Security
We implement appropriate technical and organizational measures to protect your personal data, including:
- SSL/TLS encryption for data transmission
- Secure payment processing through certified providers
- Regular security assessments and updates
- Access controls and employee training
- Data backup and disaster recovery procedures
While we strive to protect your personal data, no method of transmission over the internet is 100% secure.
11. International Data Transfers
Your data may be transferred to and processed in countries outside your country of residence. When transferring data outside the European Economic Area (EEA), we ensure appropriate safeguards are in place, such as Standard Contractual Clauses approved by the European Commission.
12. Children's Privacy
Our website is not intended for individuals under 18 years of age. We do not knowingly collect personal data from children. If we become aware that we have collected data from a child, we will take steps to delete it promptly.
13. Changes to This Policy
We may update this Privacy Policy from time to time. The updated version will be indicated by the "Last updated" date at the top of this page. We encourage you to review this policy periodically.
14. Contact Us
If you have any questions about this Privacy Policy or wish to exercise your rights, please contact us:
- Email: connectuse@charmingnydistri.world
- Address: 501 N Mildred Rd, Cortez, CO 81321, United States
You also have the right to lodge a complaint with a supervisory authority (or, for California residents, the California Privacy Protection Agency) if you believe your data protection rights have been violated.