Privacy Policy for Masketi.com

1. Introduction

At Masketi (“we”, “us”, or “our”), we are committed to safeguarding the personal data and privacy of our users and visitors. As a privacy-focused organization, we understand the importance of protecting and responsibly handling your personal information. This Privacy Policy outlines how we collect, use, share, and secure personal data through our website masketi.com (the “Website”) in compliance with applicable data protection laws, including the General Data Protection Regulation (GDPR) and the California Consumer Privacy Act (CCPA).

2. Scope of Policy and Data Controller Role

This Privacy Policy applies to all personal data processed through masketi.com. For the purposes of applicable data protection legislation, Masketi, operating through masketi.com, is the “data controller”—responsible for determining the means and purposes of the processing of your personal data.

By accessing or using our Website or services, you acknowledge and accept this Privacy Policy. If you do not agree to its terms, you must refrain from using the Website.

3. Categories of Data Processed

We collect and process the following categories of personal data:

a. Usage Data
Information about your interactions with our Website, such as browser type, IP address, device identifiers, pages visited, session times, referral URLs, and navigation patterns.

b. Account Data
Personal data you provide when creating or managing an account, including your full name, physical address, email address, and telephone number.

c. Profile Data
Information we collect or infer about you through your activities on masketi.com, such as your purchase history, preferences, and behavioral information.

d. Communication Data
Records of your communications with us, including support requests, emails, messages submitted through contact forms, and other correspondence.

e. Technical Data
Data regarding your device and system configuration, such as operating system, language settings, internet service provider, hardware model, and other diagnostics.

f. Transaction Data
Details relating to orders and payments conducted on our Website, including billing and shipping information, payment method details (processed by third-party payment providers), and purchase logs.

g. Preference Data
Your choices concerning the receipt of marketing communications and your stated or inferred interest in specific products or services.

4. Legal Bases for Processing

We process your personal data only when we have a lawful basis to do so under GDPR or CCPA. These bases may include:

– Consent: Where you have given clear consent to process your personal data for a specific purpose, such as subscribing to a newsletter.
– Contractual Necessity: Where processing is required to fulfill a contract with you, including facilitating purchases and providing requested services.
– Legal Obligation: Where processing is necessary to comply with a statutory or regulatory obligation.
– Legitimate Interests: Where the processing serves our legitimate interests, such as improving services or protecting against fraud, and where such interests do not override your fundamental rights.

5. Your Rights

Subject to applicable law, you may exercise the following data subject rights in relation to your personal data:

– Right of Access: Request access to your personal data and obtain information about how we process it.
– Right to Rectification: Request corrections or updates to any inaccurate or incomplete personal data.
– Right to Erasure (Right to Be Forgotten): Request deletion of your personal data under certain circumstances.
– Right to Restriction: Request the restriction of processing under specific conditions.
– Right to Data Portability: Request to receive your personal data in a structured, commonly used format and to have it transferred to another controller.
– Right to Object: Object to processing based on our legitimate interests or for direct marketing purposes.
– Right to Withdraw Consent: Withdraw your consent at any time where processing is based on your prior consent.

To exercise any of these rights, please contact us at [email protected]. We will respond to legitimate requests in accordance with applicable laws.

6. Security Measures

We employ strict technical and organizational security measures to ensure the confidentiality, integrity, and availability of your personal data. These include:

– Data encryption (in transit and at rest)
– Role-based access control and authentication protocols
– Regular system backups and disaster recovery planning
– Secure software development practices
– Internal policies and staff training on data protection

While we take all reasonable precautions, no data transmission or storage can be guaranteed to be 100% secure.

7. International Data Transfers

Where data is transferred to jurisdictions outside the European Economic Area (EEA) or United States, we ensure such transfers are protected through appropriate safeguards such as Standard Contractual Clauses approved by the European Commission or are otherwise permitted by applicable law. We also ensure compliance with any regional data protection requirements that may apply.

8. Data Retention

We retain personal data only for as long as is necessary to fulfill the purposes for which it was collected, including satisfying any legal, accounting, or reporting obligations:

– Usage Data: Typically retained for up to 12 months for analytics purposes.
– Account and Communication Data: Retained for the duration of the customer relationship and up to 6 years thereafter.
– Transaction Data: Retained in accordance with financial and tax record requirements (generally 6–10 years).
– Profile and Preference Data: Retained while relevant to provide personalized service or until preferences are updated.

Once the retention period has expired, data is securely deleted or anonymized.

9. Cookie Policy

We use cookies and similar tracking technologies to enhance user experience and facilitate certain features. The types of cookies we use include:

– Essential Cookies: Necessary for the operation of the Website (e.g., login authentication).
– Functional Cookies: Enable user preferences such as language settings or saved carts.
– Analytics Cookies: Collect aggregated data on user interaction and website performance (e.g., Google Analytics).
– Performance Cookies: Monitor system performance for reliability and uptime optimization.

Cookies may be delivered by third parties acting on our behalf. For more information on these providers, please contact us directly.

10. Cookie Management and Compliance

Users can manage preferences through cookie consent banners in accordance with GDPR and CCPA requirements. Additionally, browser settings allow you to accept, reject, or delete cookies. Note that disabling certain cookies may impact functionality.

Under CCPA, California residents may opt out of the “sale” of personal data (as defined by CCPA). We do not sell personal data as per CCPA definitions, but we honor “Do Not Sell My Personal Information” requests where applicable. To manage such settings, contact us at [email protected].

11. Children’s Privacy

Masketi does not knowingly collect personal data from individuals under the age of 13. If you are a parent or legal guardian and believe your child has provided us with personal information, you may contact us to request deletion. We will take reasonable steps to delete such data from our records in compliance with applicable laws.

12. Policy Updates

We may review and update this Privacy Policy periodically to reflect changes in legal, technical, or operational matters. Any substantive updates will be reflected on masketi.com and, where appropriate, communicated to users directly via email or Website notices.

13. Contact Information

If you have any questions, concerns, or requests regarding this Privacy Policy or your personal data, you may contact us at:

Email: [email protected]

We are committed to handling your inquiries promptly and transparently in accordance with applicable data protection regulations.

We reaffirm our dedication to GDPR and CCPA compliance and to protecting your privacy as a core value of our operations. Please feel free to reach out to us with any privacy-related questions, feedback, or concerns.