Privacy Policy
1. Introduction
At May Burma, accessible via mayburma.com, we are fully committed to safeguarding your personal data and maintaining your trust. We respect your right to privacy and are dedicated to ensuring the security and confidentiality of the information you share with us. This Privacy Policy outlines how we collect, use, store, and protect your personal data in compliance with applicable privacy laws, including the European Union General Data Protection Regulation (“GDPR”) and the California Consumer Privacy Act (“CCPA”).
2. Scope of the Policy and Data Controller Role
This Privacy Policy applies to individuals who access or use the website mayburma.com and any related services or communications. For the purposes of applicable data protection legislation, May Burma is the data controller responsible for the processing of your personal data as set forth in this document.
3. Categories of Data We Process
We collect and process the following categories of personal data:
3.1 Usage Data
Includes information such as browser type and version, IP address, time zone settings, operating system and platform, device type, session duration, pages visited, and interactions with our website.
3.2 Account Data
Includes any personal information you provide when creating an account or interacting with us, such as your name, billing and shipping addresses, email address, and telephone number.
3.3 Profile Data
Comprises details regarding your preferences, product interests, browsing and purchase history, and interactions with our services and content.
3.4 Communication Data
Consists of your communications with us, including support inquiries, feedback, contact history, and any information shared via email or website contact forms.
3.5 Technical Data
Includes data related to your device configuration, operating system, screen resolution settings, browser plug-ins, and language preferences.
3.6 Transaction Data
Includes payment information (excluding full payment card details), purchase history, order details, delivery addresses, and billing records.
3.7 Preference Data
Reflects your choices in receiving marketing communications, newsletter subscriptions, promotional offers, and your interest categories or expressed preferences.
4. Legal Bases for Processing
We rely on one or more of the following lawful bases under the GDPR, CCPA, and other applicable laws to collect and process your data:
– Consent: Where legally required for marketing and other non-essential cookies or services.
– Contract: When processing is necessary to fulfill our contractual obligations (e.g., order fulfillment, customer support).
– Legal Obligation: Where required to comply with legal requirements (e.g., tax and regulatory obligations).
– Legitimate Interest: For purposes such as improving our services, website functionality, customer experience, fraud prevention, and ensuring network security, provided such interests are not overridden by your rights or interests.
5. Your Rights
Subject to applicable laws, you have the following rights in relation to your personal data:
– Right of Access: You may request access to your personal data we hold about you.
– Right of Rectification: You may correct inaccurate or incomplete personal data.
– Right of Erasure: You may request erasure of your data, subject to legal retention requirements.
– Right to Restrict Processing: You may request a restriction of how your information is processed under certain circumstances.
– Right to Data Portability: Where processing is based on consent or contract and carried out by automated means, you may request a copy of your data in a portable format.
– Right to Object: You may object to processing based on our legitimate interests or for direct marketing purposes.
To exercise any of the above rights, please contact us at [email protected].
6. Security Measures
We implement appropriate technical and organizational measures to ensure a high level of security and confidentiality of your personal data, including:
– Encryption of personal data during transmission and at rest;
– Role-based and restricted access control to protect against unauthorized access;
– Regular secure backups to preserve data integrity;
– Mandatory privacy training and internal policies for staff handling personal data.
Despite our efforts, no system is impenetrable. We encourage you to also take steps to protect your data using strong passwords and keeping your devices secure.
7. International Transfers
Where your data is transferred outside the European Economic Area or the United States (e.g., to third-party service providers or partners), we ensure an adequate level of protection by applying standard contractual clauses approved by the European Commission and ensuring compliance with applicable cross-border data transfer laws.
8. Data Retention
We retain your personal data only for as long as is necessary for the purposes stated in this policy or as required by applicable laws. The following outlines our data retention practices:
– Account and Transaction Data: Maintained for up to 7 years post-interaction or purchase to comply with legal requirements.
– Communication and Support Records: Retained for up to 3 years after the last correspondence for audit and training purposes.
– Marketing and Preference Data: Retained for 2 years after the last recorded interaction or until consent is withdrawn.
– Analytics and Usage Data: Aggregated and anonymized where feasible; retained for up to 24 months.
9. Cookie Policy
mayburma.com uses various types of cookies to enhance our services:
– Essential Cookies: Necessary for core website functionality (e.g., login, shopping cart).
– Functional Cookies: Allow website to remember user preferences and improve experience.
– Analytics Cookies: Collect data about website visits, traffic sources, and usage statistics to optimize performance.
– Performance Cookies: Help monitor website usability and speed.
10. Cookie Management and Compliance
In compliance with GDPR and CCPA, we provide cookie consent management via a banner upon your first visit, allowing you to accept, reject or customize settings. You may also update your cookie preferences at any time using our on-site controls or by adjusting your browser settings. Under CCPA, California residents can opt-out of the “sale” of personal information associated with non-essential cookies.
11. Special Protections for Children
mayburma.com is not directed at children under the age of 13. We do not knowingly collect or process information from children under this age. If you believe a child under 13 has provided us with personal data, please contact us immediately via [email protected] so we can remove such information promptly.
12. Policy Updates and Notifications
We reserve the right to update this Privacy Policy from time to time in response to changes in legal, technical, or business developments. When changes are made, we will revise the content accordingly and, where appropriate, provide additional notice (e.g., via email notification or website banner).
13. Contact Us
If you have questions about this Privacy Policy, your data rights, or how we process your information, please reach out to us via:
Email: [email protected]
Website: https://mayburma.com
We are committed to complying with all applicable data protection laws and ensuring that your privacy concerns are addressed with prompt attention and transparency.