1. Introduction
[UFO POWER] is committed to safeguarding the privacy of visitors, clients, and partners accessing our international trade website ([www.ufopower.com]). This policy outlines how we collect, use, disclose, and protect personal data in compliance with global regulations, including the EU General Data Protection Regulation (GDPR), California Consumer Privacy Act (CCPA), and other applicable laws.
2. Data We Collect
2.1 Information You Provide Directly
Contact Details: Name, email, phone number, job title, and company name submitted via inquiry forms, quote requests, or partnership applications.
Transaction Data: Billing/shipping addresses, purchase history, and payment details (processed securely through third-party gateways like PayPal/Stripe).
Communications: Records of emails, live chat transcripts, or customer service interactions.
2.2 Information Collected Automatically
Technical Data: IP address, browser type, device identifiers, operating system, and geolocation (for regional compliance).
Usage Data: Pages visited, session duration, clickstream patterns, and referral sources via cookies and analytics tools (e.g., Google Analytics).
2.3 Third-Party Sources
We may receive business-related data from partners (e.g., trade directories, B2B platforms) to verify professional credentials or facilitate collaborations.
3. Purposes of Data Processing
We use your information to:
Fulfill Contractual Obligations: Process orders, negotiate contracts, and deliver products/services.
Enhance User Experience: Personalize website content, optimize navigation, and develop industry-specific solutions.
Marketing & Prospecting: Send product updates, newsletters, or event invitations (with opt-out options).
Legal Compliance: Meet tax, customs, or export control requirements.
Security: Detect fraud, cyberattacks, or unauthorized access through monitoring tools.
4. Data Sharing & International Transfers
4.1 Third-Party Disclosures
We share data only with trusted entities essential to our operations:
Logistics Partners: Shipping carriers (e.g., DHL, FedEx) for order fulfillment.
Financial Institutions: Banks/payment processors to complete transactions.
Regulatory Authorities: When mandated by law (e.g., customs declarations).
4.2 Cross-Border Transfers
Data may be transferred to servers in the EU, U.S., Asia, or other regions. We ensure safeguards such as GDPR-approved Standard Contractual Clauses (SCCs) or adequacy decisions.
5. Data Retention
We retain personal data:
For 3 years after your last interaction (e.g., quote request, login) unless legally required to extend.
Transaction records are archived for 7 years to comply with tax/audit obligations.
6. Your Rights
You may:
Access/Correct your data via the account dashboard or by emailing [privacy@company.com].
Delete non-essential data or restrict processing for disputed accuracy.
Object to marketing communications or automated decision-making.
Withdraw Consent at any time (without affecting prior lawful processing).
Lodge Complaints with your local supervisory authority (e.g., EU Data Protection Authorities).
7. Security Measures
We implement:
Technical Safeguards: SSL/TLS encryption, firewalls, and regular penetration testing.
Organizational Controls: Role-based access, employee training, and NDAs with vendors.
Incident Response: 72-hour breach notification protocols for high-risk scenarios.
8. Cookies & Tracking Technologies
Essential Cookies: Maintain login sessions and cart functionality.
Analytical Cookies: Track traffic sources and page performance (anonymized).
Marketing Cookies: Retarget visitors via platforms like LinkedIn Ads.
Manage preferences via the Cookie Consent Banner or browser settings.
9. Children’s Privacy
We do not knowingly collect data from individuals under 16. Contact us immediately if such information is inadvertently processed.
10. Policy Updates
Revisions will be posted here with a 30-day advance notice for material changes. Continued use constitutes acceptance.
