Privacy Policy for Mamasphere Online
At Mamasphere Online, accessible at mamasphereonline.com, we are committed to protecting your privacy and handling your personal data responsibly, lawfully, and transparently. This Privacy Policy outlines how we collect, use, disclose, and safeguard your personal information in accordance with the General Data Protection Regulation (GDPR), the California Consumer Privacy Act (CCPA), and other applicable data protection laws.
We place your privacy at the core of our operations and adopt strict standards to ensure your personal information is protected from unauthorized access, alteration, disclosure, or misuse.
1. Scope of the Policy and Our Role as Data Controller
This Privacy Policy applies to all visitors, users, and others who access or interact with our website, mamasphereonline.com. Mamasphere Online operates as the Data Controller for all personal information collected via our website and services. If you have any questions regarding this policy or the way your data is processed, you may contact us at [email protected].
2. Categories of Personal Data We Process
We may collect, use, store, and transfer various categories of personal data:
– Usage Data: Information about your interaction with our site, including browser type, IP address, referring URLs, pages viewed, time and date of visit, duration of visit, and related diagnostic data.
– Account Data: Information provided when creating an account, which may include your full name, mailing address, email address, and telephone number.
– Profile Data: Data arising from your use of the site, such as product preferences, purchase history, and behavioral activity across the site.
– Communication Data: Contents of your inquiries or correspondence with our support team, records of your communications with us, and support history.
– Technical Data: Device information, operating system, browser settings, screen resolution, language settings, and other system configurations.
– Transaction Data: Information related to purchases and deliveries, including payment methods, billing addresses, order history, and shipping details. We do not retain full payment card numbers; financial data is processed securely by our payment providers.
– Preference Data: Your consent to receive marketing materials, subscription choices, and areas of product or service interest you indicate to us.
3. Legal Bases for Processing
Under GDPR, we must have a lawful basis to process your personal data. Depending on the context, we may rely on the following:
– Consent: For sending marketing materials, placing certain cookies, or collecting optional data. You may withdraw consent at any time.
– Contractual Necessity: To fulfill our contractual obligations to you, such as processing your transactions and managing your account.
– Legal Obligation: Where necessary to comply with applicable legal requirements.
– Legitimate Interests: For purposes such as preventing fraud, securing the website, conducting analytics, improving services, and communicating with users regarding site updates or services (when not overridden by your rights).
4. Your Rights as a Data Subject
Under GDPR and CCPA (for California residents), you have several important rights:
– Right of Access: You may request a copy of the personal data we hold about you.
– Right to Rectification: You may request that inaccurate or incomplete personal data be corrected.
– Right to Erasure: You may request deletion of your data, subject to certain exceptions.
– Right to Restrict Processing: In certain cases, you may request that we temporarily suspend the processing of your data.
– Right to Data Portability: You may receive your data in a structured, commonly used, machine-readable format and request its transfer to another provider.
– Right to Object: Where we rely on legitimate interests or send you direct marketing, you may object to the processing.
To exercise any of your rights, please email us at [email protected]. We will respond in accordance with applicable laws.
5. Security Measures
We deploy appropriate technical and organizational safeguards to ensure the confidentiality, integrity, and availability of your personal data. This includes:
– Encryption of sensitive information
– Access controls and authentication protocols
– Regular system backups
– Secure coding practices
– Staff training in data protection and privacy compliance
– Continuously reviewing and updating security policies
6. International Transfers
Mamasphere Online may transfer your personal information outside your country of residence, including to countries that may not provide the same level of data protection as your jurisdiction. When such transfers occur, we use safeguards such as Standard Contractual Clauses approved by the European Commission or equivalent legal mechanisms to ensure that your data remains protected in accordance with this Policy.
7. Data Retention
We retain personal data only for as long as necessary to fulfill the purposes for which it was collected, including legal, accounting, and reporting obligations.
– Usage and Technical Data: 26 months
– Account and Profile Data: For the duration of your account and up to 12 months after closure
– Transaction Data: Retained for a period of 6 years for tax and legal obligations
– Communication Data: Up to 24 months after the last communication
– Marketing Preferences: Until consent is withdrawn or up to 24 months following inactivity
8. Cookie Policy
Our website uses cookies to enhance user experience and perform analytics:
– Essential Cookies: Required for site functionality, such as logging in and cart management.
– Functional Cookies: Support site customizations like language and currency preferences.
– Performance and Analytics Cookies: Help analyze site traffic and behavior, such as time spent on pages and features used. These cookies are anonymized where possible.
– Advertising Cookies: May be used, with your consent, to tailor and optimize advertisements based on your interests.
9. Cookie Management and Compliance
Upon your first visit to mamasphereonline.com, you are presented with a cookie banner providing information about cookies used and options to give or withhold consent, in accordance with GDPR and CCPA requirements.
You may also configure your browser settings to manage or disable cookies. Disabling certain cookies may impact website functionality.
California Residents: You have the right to opt out of the sale of your personal information. Mamasphere Online does not “sell” personal data under the CCPA definitions. Should this ever change, we will notify users and provide a mechanism to opt out.
10. Children’s Privacy
We do not knowingly collect or solicit personal data from children under the age of 13. If you believe we may have collected such data, please contact us immediately at [email protected], and we will take appropriate action to delete such data.
11. Policy Updates
We reserve the right to update this Privacy Policy to reflect changes in law, our practices, or technical improvements. Users will be notified of material changes through the website or email, depending on the nature of the changes. Continued use of mamasphereonline.com after such changes constitutes acceptance of the revised Policy.
12. Contact Us
If you have any questions, concerns, or complaints related to this Privacy Policy or our data practices, please contact:
Mamasphere Online
Email: [email protected]
13. Compliance Statement
Mamasphere Online is committed to full compliance with applicable data protection laws, including GDPR and CCPA. We encourage users to contact us with any privacy-related inquiries or to exercise their legal rights regarding their personal information.
Your privacy matters to us—please reach out to [email protected] if you have any concerns or require further information.