Privacy Policy
This Privacy Policy explains the types of personal data we collect, use, and share when you visit or use bandscraft.com (hereinafter referred to as "the Website"). It also informs you about your rights regarding your personal data and how to contact us regarding privacy-related issues.
1. Types of Personal Data We Collect
We primarily collect the following categories of personal data:
A. Device Information
When you visit our Website, we automatically collect device-related information, including:
- Technical Information: Your browser type, IP address, time zone, and language settings.
- Device Cookies: Anonymous cookies installed on your device.
- Usage Information: Pages you visit, products you browse, and your interaction with the Website.
- Source Information: The website or search terms that directed you to our Website.
We use this information to improve your browsing experience and provide relevant content. You consent to us processing your IP address through third parties to determine your location for currency conversion. This information will be temporarily stored in a session cookie.
B. Order Information
When you purchase products or attempt to place an order on the Website, we collect the following information:
- Identity Information: Your name and contact details (email address, phone number).
- Shipping Information: Your shipping and billing address.
- Payment Information: Credit card details (stored securely via encryption).
- Transaction Information: Details regarding your order and payment status.
2. How We Use Your Personal Data
We collect your personal data for the following purposes:
Order Fulfillment
- Process and complete your transactions.
- Arrange for product delivery and provide order confirmation details.
- Handle refunds or exchange requests.
Fraud Prevention
- Screen orders to identify potential risks or fraudulent activities.
Website Improvement
- Analyze behavior on the Website to enhance the user experience.
- Evaluate the effectiveness of our marketing and advertising campaigns.
Marketing and Advertising
- Send promotional offers and product updates.
- Provide personalized ads based on your preferences and browsing behavior.
We use tools, such as Google Analytics, to track user behavior on our Website. You can opt out of behavior-based advertising through the following links:
- Facebook: https://www.facebook.com/settings/?tab=ads
- Google: https://www.google.com/settings/ads/anonymous
- Bing: https://advertise.bingads.microsoft.com/en-us/resources/policies/personalized-ads
3. Third-Party Services
Our website is hosted on Shopline Inc., which provides us with the online platform to sell our products and services.
A. Shopline
Your data is stored in Shopline's databases and applications. Shopline stores your data on secured servers behind a firewall.
- Payment: When you choose to submit an order using direct payment (e.g., gef.ORDER), Shopline stores your account details. This data is encrypted using the Payment Card Industry Data Security Standard (PCI-DSS).
- After completing the transaction, your transaction data is stored only during the transaction process and deleted afterward.
- Shopline and its payment gateways comply with PCI-DSS standards to ensure secure handling of your credit card information.
For more information about Shopline's privacy policy or terms of service, visit:
- shopline privacy policy: https://www.shopline.com/privacy
- shopline terms of service: https://www.shopline.com/terms
B. Other Third-Party Service Providers
We use other third-party service providers to help us operate our Website and provide better services, such as payment gateways and transaction processors. These third parties may have their own privacy policies, and we recommend you review them to understand how your information is handled.
Some third-party service providers may be located in or operate facilities in countries outside yours. For example, if you are in Canada and use a payment gateway based in the U.S., your personal information may be subject to U.S. laws, such as the USA Patriot Act.
4. Sharing Your Personal Data
We only share your personal data with trusted third-party service providers to help us operate our Website, such as:
- Shopline: Processing your order ID information.
- Payment Gateways: Processing your payment transactions.
- Customer Support: Assisting with your questions or concerns.
- Legal Obligations: Complying with legal requirements.
We do not sell or share your personal data with third parties for marketing purposes, unless explicitly stated in this Privacy Policy.
5. Data Security
We take reasonable precautions and follow industry best practices to protect your personal data and prevent unauthorized loss, misuse, access, disclosure, alteration, or destruction. Our security measures include:
- Payment Information Protection: Your credit card information is encrypted using SSL technology and stored with AES-256 encryption.
- Industry Standards: We comply with PCI-DSS requirements and implement widely accepted industry standards.
While no internet transmission or electronic storage method is 100% secure, we continuously work to enhance security measures.
6. Your Rights
You have the following rights regarding your personal data:
- Access: Request a copy of the personal data we hold about you.
- Rectification: Update or correct inaccurate information.
- Deletion: Request the deletion of your personal data (subject to legal retention requirements).
- Opt-Out: Stop receiving marketing communications.
- Restriction: Limit our use of your data in specific circumstances.
Residents of the European Union also have rights under the General Data Protection Regulation (GDPR). Please contact us at hello@bandscraft.com to exercise these rights.
7. Data Retention
We retain your order information to complete transactions, verification, tax compliance, and customer support. Upon your request, we will delete these data as soon as reasonably practicable.
8. Age Restriction
You must be at least 18 years old to use our services. If you are under 18, please contact us before using the Website and obtain parental consent.
9. Policy Updates
This Privacy Policy will be regularly reviewed to reflect changes in our services or legal requirements. Significant updates will be posted on this page. Continuing to use our Website after updates constitutes your acceptance of the revised policy.
10. Contact Us
For more information or to exercise your rights, please contact us at:
hello@bandscraft.com.
Our team is available to assist you with any questions or concerns.