Privacy Policy
1. Introduction
Pala-Mino (“we,” “us,” or “our”) is committed to safeguarding the privacy and personal data of our users, visitors, and customers. Protecting your information is a core priority, and we are dedicated to processing personal data in a lawful, transparent, and secure manner in compliance with applicable privacy regulations, including the General Data Protection Regulation (GDPR) and the California Consumer Privacy Act (CCPA).
This Privacy Policy outlines how we collect, use, disclose, and protect personal data when you interact with our website (pala-mino.com), our services, and communications.
2. Scope of This Policy & Controller Responsibility
This Privacy Policy applies to all users of the website pala-mino.com and any services or interactions conducted through the site. For the purposes of the GDPR, the data controller responsible for your personal data is Pala-Mino, reachable via [email protected].
By accessing or using our website, you acknowledge and agree to the terms of this Privacy Policy. If you do not agree with this Policy, please refrain from using the site or submitting personal information.
3. Categories of Personal Data We Process
We collect and process the following categories of personal data:
– Usage Data: Information about how you access and use our website, including browser type and version, IP address, geographic location, time zone, page interactions, referral sources, and website navigation paths.
– Account Data: Information provided during registration or account setup, including your name, address, email address, and phone number.
– Profile Data: Information reflecting your preferences, purchase history, behavioral insights, and user-generated content or feedback.
– Communication Data: Records of your communications with us, such as inquiries, support requests, emails, and other messages.
– Technical Data: Information from the devices and systems you use to access our services, including device type, operating system, system configurations, and unique device identifiers.
– Transaction Data: Payment details (processed securely via third-party providers), billing and delivery address, purchase records, and order fulfillment status.
– Preference Data: Your selected preferences, including marketing consents, survey responses, product interest indicators, and notification settings.
4. Legal Bases for Processing
We process personal data under the following legal bases, as defined in GDPR Article 6 and equivalent frameworks such as the CCPA:
– Contractual Necessity: Processing required for the performance of a contract to which you are a party, including account management and order fulfillment.
– Legitimate Interests: Processing necessary for our legitimate business priorities, such as website performance, customer service, fraud detection, and marketing communication within applicable lawful bases.
– Consent: Where you have given informed, unambiguous consent for specific uses, such as marketing communications and cookies (except strictly necessary cookies).
– Legal Obligation: In circumstances where we are legally required to process data for compliance with laws, regulations, or governmental authorities.
5. Your Rights
Under applicable data protection laws, you possess the following rights with regard to your personal data:
– Right of Access: You have the right to request a copy of the personal data we hold about you.
– Right to Rectification: You may request rectification of inaccurate or incomplete data.
– Right to Erasure (‘Right to be Forgotten’): You may request the deletion of your personal data, subject to relevant legal and contractual retention obligations.
– Right to Restrict Processing: You may request we limit the use of your data in certain circumstances.
– Right to Data Portability: You are entitled to receive a copy of your personal information in a commonly used format or have it transmitted to another data controller.
To exercise any of these rights, please contact us at [email protected]. We may require verification of your identity before processing your request.
6. Data Security Measures
We implement rigorous administrative, technical, and physical security measures to protect your data from unauthorized access, disclosure, alteration, or destruction. Our safeguards include:
– Encryption of sensitive data during transit and storage
– Role-based and limited access to data systems
– Secure data backup and disaster recovery protocols
– Regular audits and penetration testing
– Staff training on privacy awareness and cybersecurity
7. International Transfers
Your data may be processed outside your region, including in countries not recognized by the European Commission as providing adequate data protection. In such cases, we implement Standard Contractual Clauses or other lawful mechanisms to safeguard international transfers in accordance with GDPR and CCPA compliance standards.
8. Data Retention
We retain personal data only for as long as necessary to fulfill the purposes outlined in this Privacy Policy. Retention periods may vary depending on the data category:
– Usage Data: Retained for up to 12 months to monitor performance and prevent abuse.
– Account and Profile Data: Retained for the duration of your relationship with us and for 6 years thereafter for regulatory purposes.
– Transaction Data: Retained for up to 7 years for accounting, taxation, and fraud prevention.
– Communication Records: Retained for up to 3 years following the most recent contact.
– Preference Data: Retained until you withdraw your consent or adjust your settings.
9. Cookie Policy
We use cookies and similar technologies to optimize the functionality, performance, and personalization of our website. Cookies on pala-mino.com fall into the following categories:
– Essential Cookies: Necessary for the operation of our website. Without these, core functions (e.g., shopping cart, account login) would not work.
– Functional Cookies: Enable enhanced features and personalization such as remembering preferences and choices.
– Analytics Cookies: Gather anonymized data on website usage to improve site functionality and understand visitor behavior (e.g., Google Analytics).
– Performance Cookies: Help us understand how pages perform and load, allowing us to optimize experience.
10. Cookie Consent & Management
Upon visiting pala-mino.com, you will be presented with a cookie consent banner enabling you to accept, decline, or customize your cookie preferences in compliance with GDPR and CCPA consent requirements.
You can also manage your cookie settings via your browser or device settings. Please be aware that disabling essential cookies may impair certain website features.
11. Children’s Privacy
We do not knowingly collect or process personal data from children under the age of 13. If you believe that a child has submitted personal data through pala-mino.com, please contact us immediately at [email protected], and we will take appropriate action to remove the data.
12. Updates to This Policy
We reserve the right to update this Privacy Policy at our discretion to reflect legal, regulatory, or operational changes. Changes will be promptly posted on pala-mino.com. Where material modifications are made, we may notify you via prominent announcements or direct communication.
We encourage you to review the Privacy Policy periodically.
13. Contact Information
If you have any questions, concerns, or requests regarding this Privacy Policy, your personal data, or our privacy practices, please contact us at:
Email: [email protected]
Website: https://pala-mino.com
We are committed to ensuring your privacy rights are respected and will respond to inquiries in a timely and lawful manner.
Compliance Statement
Pala-Mino is fully committed to adhering to all applicable data privacy laws, including GDPR and CCPA. For all privacy-related concerns or to exercise your rights, please email us at [email protected].