GDPR
At Islairarstane, we respect your privacy and are committed to handling personal data responsibly. This policy explains how we collect, use, retain, and protect personal data when you browse our online store, place an order, or contact us. Where applicable, our processing practices follow the General Data Protection Regulation (GDPR) and relevant U.S. privacy requirements.
1. Purpose and Scope
This policy applies to personal data collected through our website, order processing, delivery arrangements, and customer service communications.
We use personal data for specific purposes, including processing orders, arranging delivery, responding to inquiries, maintaining website security, and meeting applicable obligations. We aim to collect only information necessary for these purposes.
2. Types of Personal Data We Collect
Depending on your interactions with our online store, we may collect the following information:
-
Contact Information: Your name, email address, telephone number, billing address, and delivery address.
-
Order Information: Items purchased, order details, transaction records, payment status, and delivery updates.
-
Customer Service Records: Information you provide when submitting questions, reporting an issue, or requesting assistance.
-
Technical Information: IP address, browser type, device information, access timestamps, and relevant website activity logs.
-
Privacy Preferences: Records of your privacy choices and consent where applicable.
Payment information is handled according to the payment methods available at checkout and the relevant processing arrangements. The payment information we collect or retain depends on how the transaction is processed.
3. Lawful Basis for Processing
Where the GDPR applies, we process personal data on an appropriate lawful basis, depending on the purpose:
-
Contractual Necessity: To process orders, arrange delivery, complete transactions, and respond to requests made before a purchase.
-
Legal Obligations: To maintain records and meet applicable tax, accounting, and other requirements.
-
Legitimate Interests: To protect our online store, prevent fraud, resolve disputes, and maintain website security, where these interests do not override your rights and freedoms.
-
Consent: To carry out specific processing activities when your consent is required.
Where processing is based on consent, you may withdraw it at any time. Withdrawal does not affect processing carried out before withdrawal. Where applicable, you may also object to processing based on legitimate interests.
4. Data Subject Rights
Depending on the applicable requirements, you may have the following rights regarding your personal data:
-
Right of Access: Request access to your personal data and information about how it is processed.
-
Right to Rectification: Request correction of inaccurate or incomplete information.
-
Right to Erasure: Request deletion of your personal data where the applicable conditions are met.
-
Right to Restrict Processing: Request restrictions on certain processing activities.
-
Right to Data Portability: Request eligible personal data in a structured, commonly used, and machine-readable format.
-
Right to Object: Object to certain processing activities where applicable.
-
Right to Withdraw Consent: Withdraw consent where processing relies on your consent.
-
Right to Lodge a Complaint: Contact a competent data protection supervisory authority where applicable.
To exercise your rights, email us using the contact details in Section 9. We may request information reasonably necessary to verify your identity. We will respond within the applicable timeframe. Some rights are subject to specific conditions and exceptions.
5. Data Retention
We retain personal data only for as long as reasonably necessary to fulfill the purposes for which it was collected, complete transactions, maintain required records, resolve disputes, and meet applicable obligations.
Retention periods depend on the type of information, the purpose of processing, and any applicable recordkeeping requirements. We periodically review retained information and take reasonable steps to delete or anonymize personal data when it is no longer needed, unless further retention is permitted or required.
6. Data Disclosure
We may disclose personal data to recipients when reasonably necessary to operate our online store and fulfill your order. These recipients may include payment processors, delivery carriers, technical service providers, professional advisers, and public authorities where disclosure is required or appropriate.
We limit the information disclosed to what is reasonably necessary for the relevant purpose and take appropriate steps to protect personal data handled on our behalf.
We may also disclose information when necessary to investigate suspected fraud, address security concerns, protect our rights, or establish, exercise, or defend legal claims.
7. Data Security
We use reasonable technical and organizational measures to protect personal data against unauthorized access, loss, alteration, misuse, or disclosure. These measures may include access controls, secure handling procedures, and appropriate safeguards for stored information and communications.
Although we take reasonable steps to protect personal data, no electronic storage or transmission method can be guaranteed to be completely secure.
8. Policy Changes
We may update this policy to reflect changes in our data handling practices, online store operations, or applicable requirements. Updates will be published on this page, with a revised effective date where appropriate.
Where a change requires additional notice or consent, we will take appropriate steps. We encourage you to review this policy periodically.
9. Contact Us
For questions about this policy or to submit a request concerning your personal data, please contact us using the details below.
Address: 10505 San Gabriel Rd NE, Albuquerque, NM 87111, US
Phone: +1 505-284-9173
Email: client@islairarstane.com
Opening hours: Monday to Friday, 9:00 AM to 6:00 PM (EST)