PRIVACY POLICY
1. Introduction
At Gochil, accessible at gochil.com, we value your privacy and are committed to safeguarding your personal data. This Privacy Policy outlines how we collect, use, share, and protect information about you when you access or use our website, products, and services. We adhere to applicable data privacy laws, including the General Data Protection Regulation (GDPR) and the California Consumer Privacy Act (CCPA), and are committed to processing your data responsibly and transparently.
2. Scope of Policy and Data Controller Role
This Privacy Policy applies to all visitors, users, and others who interact with gochil.com. For the purposes of applicable data protection laws, the data controller responsible for your personal data is Gochil. Questions or concerns regarding data processing may be directed to: [email protected].
3. Categories of Data Processed
We may collect and process the following categories of personal data:
a) Usage Data: Including IP address, browser type and version, device identifiers, geographic location, browsing actions, and site usage patterns.
b) Account Data: Such as your name, mailing address, email address, and phone number when creating or managing your user account.
c) Profile Data: Preferences, interests, online behaviors, purchase history, wishlists, and saved settings on our platform.
d) Communication Data: Interactions with us, including customer support communications, inquiry details, and correspondence history.
e) Technical Data: Information about the devices and systems you use to access our services, including operating systems, configuration data, and connection logs.
f) Transaction Data: Records relating to purchases and transactions made through gochil.com, including billing and delivery information, payment status, and order history.
g) Preference Data: Marketing consents, newsletter subscriptions, contents of your user profile related to communication preferences, and product interest categories.
4. Legal Bases for Processing
We rely on the following lawful bases for processing your personal information:
– Contractual Necessity: To fulfill our obligations when you register, make purchases, or use our services.
– Legitimate Interests: For fraud prevention, network security, service improvement, customer relationship management, and marketing (where permitted by law).
– Consent: For activities such as marketing communications, cookie usage, or certain data tracking, where we seek and receive your explicit consent.
– Legal Obligations: For compliance with statutory requirements, including consumer protection and data requests from public authorities.
5. Your Rights
Subject to applicable laws, you have the following rights regarding your personal data:
– Right of Access: To obtain details on data we hold about you.
– Right to Rectification: To correct inaccurate or incomplete data.
– Right to Erasure: To request deletion of your personal information.
– Right to Restriction: To limit the processing of your data under certain circumstances.
– Right to Data Portability: To receive your data in a structured, commonly-used format for transmission to another controller.
– Right to Object: To object to processing based on legitimate interests or direct marketing.
– Right Not to Be Subject to Automated Decision-Making: To avoid decisions made solely by automated means that significantly affect you.
To exercise these rights, please email us at [email protected].
6. Security Measures
We implement appropriate technical and organizational measures to secure your data, including but not limited to:
– Encryption of sensitive data in transit and at rest.
– Role-based access controls limiting who within our organization can access your data.
– Regular system backups and secure storage environments.
– Mandatory privacy and security training for relevant personnel.
Despite our efforts, no digital transmission can be entirely secure. We encourage you to take steps to protect your account and personal devices against unauthorized use.
7. International Transfers
We may transfer your data to third parties or service providers located in jurisdictions outside of your own. Where such transfers occur, we ensure adequate safeguards are in place, such as European Commission Standard Contractual Clauses or equivalent certification mechanisms to ensure your data is treated with a level of protection consistent with GDPR and other relevant privacy legislation.
8. Data Retention
We retain your personal data only as long as necessary to fulfill the purposes for which it was collected, including legal, accounting, or reporting requirements. Specific retention periods may vary by data category:
– Usage and Technical Data: up to 2 years from collection.
– Account and Profile Data: retained for the duration of active user account, plus 6 years post-deactivation.
– Transaction Data: retained for up to 7 years following the transaction for tax and audit compliance.
– Communication and Preference Data: up to 2 years from the date of last communication or update.
After such periods, data is securely deleted or anonymized.
9. Cookie Policy
Gochil.com uses cookies and similar technologies to improve user experience and analyze web traffic. Cookies may fall into the following categories:
– Essential Cookies: Necessary for website function and cannot be switched off.
– Functional Cookies: Allow customization and personalized experiences.
– Analytics Cookies: Collect aggregated information on site usage.
– Performance Cookies: Help assess system performance, load times, and traffic behaviors.
10. Cookie Management and Compliance
By using gochil.com, you can manage your cookie preferences through the cookie consent banner or browser settings. Where required by law, we request your consent before placing cookies, and you may withdraw consent at any time. We honor Do Not Track (DNT) signals where legally mandated and provide CCPA mechanisms for opt-out of cookie-based data sales.
11. Special Protections for Children
Gochil.com is not directed toward, nor knowingly collects information from, individuals under the age of 13. If we become aware that we have inadvertently received data from a child without verifiable parental consent, we will delete such data from our records.
12. Policy Updates
This Privacy Policy may be amended periodically as necessary to reflect changes in legal obligations, service enhancements, or data practices. Where material changes are made, we will notify users by reasonable and appropriate means, which may include prominent placement on gochil.com or direct communication.
We recommend users review this policy regularly to remain informed about how we are protecting their information.
13. Contact
For questions, privacy concerns, or to exercise your rights under this Privacy Policy, please contact us via:
Email: [email protected]
We are committed to resolving your concerns in a timely manner and in full compliance with relevant privacy laws.
Gochil takes your privacy seriously and fully supports transparency and accountability in all data processing activities. If you have any questions about this policy or how your data is processed, please reach out—we’re here to help.