CRESCITAFLORENST LTD is committed to protecting the personal data privacy of our EU customers. This Privacy Policy explains how we collect, use, store, transfer, and protect the personal data you provide when interacting with us. We do so in compliance with the EU General Data Protection Regulation (GDPR) and other relevant privacy regulations. We respect your privacy and take strict measures to ensure the security and lawful processing of your data.
Scope of Data Collection
Customer Information: When you engage with us for business purposes, such as inquiring about sleepwear products or placing an order, we collect information such as your name, contact information (including email address and phone number), company name, and address for business communications, order processing, and customer service.
Transaction Data: During a transaction, we record order details, including the sleepwear style purchased, quantity, price, payment method, and shipping address, to facilitate transaction completion, handle after-sales issues, and for financial purposes.
Website Usage Data: If you visit our website (crescitflor.com), we may collect information such as your IP address, browser type, access time, and pages viewed to analyze website performance, optimize user experience, and improve our services.
Data Use Purposes
Contractual Obligations: We use collected data to fulfill your order, including arranging production, shipping, processing payments, and providing after-sales service, ensuring you receive satisfactory sleepwear products.
Customer Communication: We use the contact information you provide to communicate with you about order status, product information, promotions, and other matters, maintaining positive business interactions.
Service Optimization: We analyze website usage data and customer feedback to understand your needs and preferences, improve our sleepwear design, product quality, and service processes, and enhance your experience.
Data Storage and Security
Storage Location: We store the personal data of EU customers on secure servers that comply with EU data protection requirements, ensuring the physical and network security of the data storage environment.
Security Measures: We implement multiple security measures, including encryption technology to protect data transmission and storage, access controls to limit data access to authorized personnel, regular data backups to prevent data loss, continuous monitoring and evaluation of security measures, and timely response to potential security threats.
Data Sharing and Transfer
Internal Sharing: Within the company, only authorized employees are allowed to access and use your personal data to the extent necessary to perform their job duties.
Third-Party Collaboration: When sharing data with third-party service providers (such as logistics partners and payment processors), we ensure they have adequate data protection capabilities and use contracts and other legal means to ensure that their data processing complies with EU privacy regulations and is only for specific service purposes.
Cross-border Transfers: When transferring your personal data outside the EU, we will ensure that the receiving country or region has an adequate level of data protection recognized by the European Commission or implement other appropriate safeguards permitted by EU regulations, such as standard contractual clauses, to ensure privacy during the data transfer process.
Data Subject Rights
Right to Information: You have the right to receive detailed information about how we collect, use, share, and store your personal data. This Privacy Policy provides comprehensive information.
Right of Access: You may request a copy of your personal data held by us at any time and learn how we use it.
Right to Correction: If your personal data held by us is inaccurate or incomplete, you have the right to request that we promptly correct or supplement it.
Right to Erasure: Where your personal data is no longer necessary for the purposes of processing, you have the right to request that we erase your personal data, subject to EU regulations. Right to Restrict Processing: You may request that we restrict the processing of your personal data in certain circumstances, such as during a dispute regarding the accuracy of that data.
Right to Object: You have the right to object to certain processing of your personal data based on specific grounds, such as processing for marketing purposes.
Right to Data Portability: Where technically feasible, you have the right to request that we provide your personal data to you or a third party you designate in a structured, commonly used, machine-readable format.
Policy Updates and Contact Information
Policy Updates: We may update this Privacy Policy from time to time based on changes in EU privacy regulations, business developments, or other legitimate reasons. We will post updates on our website and notify you of significant changes in an appropriate manner.
Contact Information: If you have any questions, comments, or suggestions regarding this Privacy Policy or our data processing practices, please contact us by email at [email protected]. We will respond to your concerns promptly and address them to protect your legal rights under EU privacy regulations.