Privacy Policy
1. Introduction
Your privacy is of paramount importance to us. At MayBurma (“we,” “us,” “our,” or “the Company”), accessible via mayburma.com (“Website”), we are fully committed to protecting your personal data and respecting your rights under applicable data protection laws, including the General Data Protection Regulation (GDPR), the California Consumer Privacy Act (CCPA), and other relevant privacy regulations. This Privacy Policy governs our practices with regard to the collection, processing, use, disclosure, and storage of your personal information. We aim to handle your personal data lawfully, fairly, and transparently.
2. Scope of This Policy and Data Controller Role
This Privacy Policy applies to all individuals who access and use the Website, and any associated services, features, or communications. For the purposes of the GDPR and other applicable legislation, MayBurma is the data controller for the personal data you provide via mayburma.com. As a data controller, we determine the purposes and methods for which your personal data is collected and processed.
3. Categories of Data We Process
We may collect and process the following categories of personal data:
a. Usage Data
Information about how you use the Website, including browser type, IP address, pages visited, time and date of your visit, referring and exit URLs, session durations, and similar diagnostic data.
b. Account Data
Personal identifiers submitted when creating an account or placing an order, including your full name, billing and shipping address, email address, and telephone number.
c. Profile Data
Preferences, purchasing behavior, order history, product interests, feedback, and other personalization data.
d. Communication Data
Records of customer support interactions, email communications, and communication history when you contact us through available channels.
e. Technical Data
Device identifiers, operating system details, hardware configurations, mobile platform, browser plug-ins, and screen resolution.
f. Transaction Data
Details about products or services you purchase, including payment method, cardholder name, transaction ID, fulfillment status, and shipping information.
g. Preference Data
Your expressed marketing and communication preferences, opt-in or opt-out statuses for emails and promotions, and selections related to your product or service interests.
4. Legal Bases for Processing
We rely on the following lawful bases for processing your personal data, as defined under the GDPR:
– Consent: Where you have provided explicit consent for a specific processing activity, such as receiving marketing communications.
– Contractual Necessity: To fulfill our contractual obligations to you, such as providing products or services requested through mayburma.com.
– Legal Obligation: To comply with legal requirements, such as maintaining proper accounting records or responding to lawful government requests.
– Legitimate Interests: Where processing is necessary for the purposes of our legitimate business interests, provided such interests are not overridden by your fundamental rights and freedoms. These may include improving our Website, understanding usage patterns, securing our systems, and enhancing customer experience.
5. Your Rights
Under applicable data privacy laws, you are entitled to various rights with respect to your personal data. These include:
– Right of Access: To know what personal data we hold about you and to request a copy.
– Right to Rectification: To request correction or completion of inaccurate or incomplete data.
– Right to Erasure: To request deletion of your personal data under certain circumstances.
– Right to Restriction of Processing: To request limitation of how we use your data in specific cases.
– Right to Data Portability: To receive your data in a structured, commonly used, and machine-readable format and to request that it be transferred to another controller.
– Right to Object: To object to our processing of your data where we rely on legitimate interests or where processing is for direct marketing purposes.
To exercise any of these rights, please contact us at [email protected].
6. Security Measures
We employ a range of state-of-the-art technical and organizational security measures designed to safeguard your personal data. These include:
– Encryption of data in transit and at rest using industry-standard protocols.
– Role-based access control to restrict access to personal data.
– Enforced multi-factor authentication on privileged accounts.
– Secure data backup and recovery procedures.
– Routine monitoring, auditing, and vulnerability assessments.
– Employee training on cybersecurity and data protection best practices.
While we strive to protect your personal information, no system can be guaranteed to be 100% secure. We encourage you to maintain vigilance and implement best practices when using the Internet.
7. International Transfers
If we transfer personal data outside of the European Economic Area (EEA) or otherwise internationally, such transfers are conducted in compliance with applicable legal safeguards. These include the use of Standard Contractual Clauses approved by the European Commission and ensuring that third-party vendors commit to adequate data protection standards consistent with GDPR and CCPA. Transfers are performed only where necessary and lawful.
8. Data Retention
We retain personal data only for as long as is necessary to fulfill the purposes outlined in this Privacy Policy:
– Usage and Technical Data: 12 months
– Account and Transaction Data: 7 years (for legal, tax, and accounting purposes)
– Communication and Support Records: 3 years
– Profile and Preference Data: Until account deletion or user-initiated opt-out
– Cookie and Analytics Data: In accordance with our Cookie Policy (see below)
When retention is no longer required, we securely erase or anonymize the data in compliance with applicable laws.
9. Cookie Policy
We use cookies and similar technologies to enhance your experience on mayburma.com. Cookies are small data files stored on your device that help us understand user behavior and improve functionality.
Type of cookies we use:
– Essential Cookies: Required for core site functionalities (e.g., shopping cart, secure login).
– Functional Cookies: Enhance site usability by remembering user preferences.
– Performance and Analytics Cookies: Provide aggregated, anonymized usage insights to improve website design and performance.
– Targeting and Advertising Cookies: Personalize marketing and provide relevant content or ads.
10. Cookie Management and Compliance
For users within the European Union and California, we honor cookie consent preferences in compliance with GDPR and CCPA. Upon visiting our Website, users are prompted to accept or refuse non-essential cookies. You can modify your cookie preferences at any time through our cookie settings. Additionally, browser settings can be configured to refuse or delete cookies.
To opt out of tracking under the CCPA, you may use the “Do Not Sell or Share My Personal Information” link accessible on our homepage, as required.
11. Children’s Privacy
MayBurma does not knowingly collect or solicit personal information from children under the age of 13. If we learn that we have inadvertently collected such information, we will take steps to promptly delete it. If you believe that we may have collected personal data from a child, please contact us immediately at [email protected].
12. Changes to This Policy
We reserve the right to update or amend this Privacy Policy at any time. Where material changes are made, we will notify users through appropriate channels, including but not limited to prominent notice on the Website, email notifications, or platform messaging. Your continued use of mayburma.com after changes implies your acceptance of the updated policy.
13. Contact Us
If you have any questions about this Privacy Policy, your personal data, or our data protection practices, you may contact us at:
Email: [email protected]
We are committed to meeting our obligations under applicable data privacy laws and providing transparent, responsible, and lawful data handling practices. Should you believe your rights have been violated, we encourage you to reach out so that we can address your concerns promptly.