Privacy policy
At SantalDome, your privacy is a fundamental part of our commitment to providing a secure and transparent online shopping experience for Mice, Keyboards, and Headphones. This Privacy Policy explains in clear terms how we collect, use, store, and safeguard your personal information when you interact with our website or make a purchase. We align our practices with internationally recognized data protection standards, including the General Data Protection Regulation (GDPR) and the California Consumer Privacy Act (CCPA), to ensure your rights are respected at all times.
1. Information We Collect
We limit the collection of personal data to what is strictly necessary for processing your orders and improving our services. The types of information we may collect include:
- Order and Transaction Data: Your full name, shipping address, billing address, email address, and payment confirmation details (we do not store full credit card numbers).
- Device and Usage Data: IP address, browser type, operating system, pages viewed, time spent on our site, and referring URLs. This data is collected via cookies and similar technologies to enhance site performance and security.
- Communication Data: If you contact us via email at [email protected], we retain the content of your message and your email address solely to respond to your inquiry and maintain a record of our interaction.
We do not intentionally collect any sensitive categories of personal data (such as race, religion, health information) or data from individuals under the age of 16 without verifiable parental consent.
2. How We Use Your Information
Your personal data is used exclusively for the following legitimate business purposes:
- To process, fulfill, and deliver your orders for Mice, Keyboards, and Headphones, including sending order confirmations and shipping updates.
- To handle returns, exchanges, and warranty claims in accordance with our policies.
- To respond to your customer service requests and provide technical support for our products.
- To improve our website functionality, product offerings, and user experience through aggregated analytics.
- To detect, prevent, and address fraud, security breaches, or other potentially prohibited or illegal activities.
- To comply with applicable legal obligations, such as tax and accounting requirements.
We do not sell, rent, or trade your personal information to third parties for marketing purposes. Any use of your data beyond the scope described above will only occur with your explicit consent.
3. Legal Basis for Processing (GDPR)
For users residing in the European Economic Area (EEA), our processing of your personal data is based on the following legal grounds:
- Contractual Necessity: Processing is required to fulfill our contract with you when you make a purchase.
- Legitimate Interests: We process data for security, fraud prevention, and website improvement, balancing our interests against your privacy rights.
- Legal Obligation: We may process data to comply with laws such as tax retention or consumer protection regulations.
- Consent: Where we rely on consent (e.g., for non-essential cookies), you may withdraw it at any time without affecting the lawfulness of prior processing.
4. Cookies and Tracking Technologies
SantalDome uses cookies and similar technologies (such as pixels and local storage) to operate our online store efficiently and to understand how visitors interact with our product pages. Specifically, we use:
- Strictly Necessary Cookies: Required for core site functions, such as remembering items in your cart and maintaining session security.
- Analytics Cookies: Help us measure traffic patterns, popular product categories, and page performance. Data is aggregated and anonymized where possible.
- Preference Cookies: Remember your language and display preferences for a more personalized experience.
You can control or delete cookies through your browser settings at any time. However, disabling certain cookies may affect the functionality of our website, such as the ability to complete a purchase. We do not use third-party advertising cookies on our site.
5. Data Storage and Retention
We retain your personal data only for as long as necessary to fulfill the purposes outlined in this policy, unless a longer retention period is required or permitted by law. Specifically:
- Order records (including name, address, and purchase details) are retained for a period of 5 years to comply with tax and warranty obligations.
- Customer service email correspondence is retained for 2 years after the last contact.
- Analytics data is kept in a de-identified format for a maximum of 26 months.
Once the retention period expires, your data is securely deleted or anonymized so that it can no longer be linked to you.
6. Data Security Measures
We implement robust technical and organizational measures to protect your personal information against unauthorized access, alteration, disclosure, or destruction. These measures include:
- Encryption: All data transmitted between your browser and our servers is secured using TLS (Transport Layer Security) encryption. Payment data is additionally encrypted and processed via PCI-DSS compliant gateways.
- Access Controls: Only authorized personnel with a legitimate business need have access to personal data, and they are bound by strict confidentiality obligations.
- Regular Audits: We conduct periodic reviews of our security infrastructure and update our practices to address emerging threats.
- Secure Storage: Data is stored on servers in ISO 27001 certified data centers with physical and logical safeguards.
While no method of transmission over the internet is 100% secure, we strive to protect your data and promptly notify you of any breach that may affect your privacy, as required by law.
7. Sharing and Disclosure of Information
We do not disclose your personal information to third parties except in the following limited circumstances:
- Service Providers: We share necessary data with trusted partners who assist us in operating our website, processing payments, and delivering orders (e.g., shipping carriers, payment processors). These providers are contractually obligated to use your data only for the services they perform on our behalf and to protect it with adequate security measures.
- Legal Compliance: We may disclose information when required by law, regulation, legal process, or governmental request, or when such disclosure is necessary to protect our rights, your safety, or the safety of others.
- Business Transfers: In the event of a merger, acquisition, or sale of assets, your personal data may be transferred as part of the business assets. We will notify you via email at [email protected] before your data becomes subject to a different privacy policy.
We never share your data with third parties for their own direct marketing purposes.
8. International Data Transfers
As an international online store, we may transfer your personal data to countries outside your country of residence, including to our servers or those of our service providers. When such transfers occur, we ensure that appropriate safeguards are in place, such as:
- Transferring data to countries recognized as providing an adequate level of data protection by the European Commission.
- Using Standard Contractual Clauses (SCCs) or other approved transfer mechanisms to protect your data.
By using our website and providing your information, you acknowledge that your data may be processed in jurisdictions where data protection laws may differ from those in your country. We will always take steps to ensure that your data is treated securely and in accordance with this policy.
9. Your Privacy Rights
Depending on your jurisdiction, you have the following rights regarding your personal data:
- Right to Access: Request a copy of the personal data we hold about you.
- Right to Rectification: Request correction of inaccurate or incomplete data.