Privacy Policy

At Man-Cha (man-cha.com), we are firmly committed to protecting your privacy and ensuring the security of your personal data. This Privacy Policy outlines how we collect, use, disclose, and safeguard your information when you visit our website or interact with our services. We prioritize data protection in accordance with the highest legal standards, including the General Data Protection Regulation (GDPR) and the California Consumer Privacy Act (CCPA), to maintain your trust and confidence.

1. Introduction

We recognize the importance of privacy in the digital age and are dedicated to maintaining transparency and integrity in the handling of your personal data. This Privacy Policy is designed to inform you of our practices with respect to the collection, use, and safeguarding of your data and to ensure your rights are protected.

2. Scope of Policy and Data Controller Role

This Privacy Policy applies to all visitors and users of man-cha.com. For the purposes of the GDPR and other applicable data protection laws, Man-Cha is the “data controller” of your personal data—this means we determine the purposes and means of processing the information you provide to us.

3. Categories of Data Processed

We collect and process various categories of personal data to operate efficiently and provide you with relevant services. This data includes:

a) Usage Data
Information about how you use our website, including IP address, browser type, referring URLs, pages visited, time spent on pages, and interaction data such as clicks and scrolls.

b) Account Data
Information provided when you register an account, such as your full name, mailing address, email address, phone number, and login credentials.

c) Profile Data
Information relating to your preferences, history of purchases, browsing behavior, and personalization settings.

d) Communication Data
Records of communications with us, such as messages sent via contact forms, emails, or support interactions. This may include the metadata associated with these communications.

e) Technical Data
Details about the devices you use to access man-cha.com, including operating system, screen resolution, mobile identifiers, browser configuration, and system language.

f) Transaction Data
Data pertaining to products purchased or services used, including billing information, shipping details, payment confirmations, and transaction history.

g) Preference Data
Information regarding your choices concerning newsletters, product offerings, and consent for marketing communications, as well as stated interests and customer feedback.

4. Legal Bases for Processing

We process your personal data based on the following lawful grounds:

– Performance of Contract: To fulfill our contractual obligations, such as delivering orders or providing customer support.
– Legitimate Interests: To improve our website, enforce terms, and maintain the security of our digital infrastructure.
– Consent: Where we seek your voluntary and informed consent, such as for sending marketing communications or placing certain types of cookies.
– Legal Obligation: To comply with compliance, audit, and other legal or regulatory requirements.

5. Your Rights

Under applicable data protection laws, you have the following rights in relation to your personal information:

– Right of Access: To request a copy of the personal data we hold about you.
– Right of Rectification: To request that inaccurate or incomplete data be corrected.
– Right of Erasure: To request the deletion of your personal data, subject to certain legal exceptions.
– Right to Restrict Processing: To request limitations on how we use your data in certain circumstances.
– Right to Data Portability: To request a transfer of your personal data to another service provider in a structured, commonly used, machine-readable format.
– Right to Object: To object to our processing of your data based on legitimate interest or direct marketing purposes.

To exercise any of the above rights, please contact us at [email protected].

6. Security Measures

We implement robust technical and organizational safeguards to protect your information, including:

– End-to-end encryption for data in transit and at rest.
– Role-based access controls and two-factor authentication.
– Regular security audits and system monitoring.
– Firewall and intrusion detection systems.
– Routine backups and disaster recovery protocols.
– Personnel training to reinforce data confidentiality and security awareness.

7. International Transfers

Wherever your data is processed internationally, we ensure that appropriate data transfer mechanisms are in place. These include standard contractual clauses approved by relevant authorities and compliance with regional data privacy frameworks to ensure your data receives an adequate level of protection.

8. Data Retention

We retain personal data only for as long as necessary to fulfill the purposes for which it was collected:

– Usage and Technical Data: Typically retained for 12 months for performance and analytics.
– Account and Profile Data: Retained as long as your account remains active and up to 6 years thereafter in line with legal requirements.
– Communication Data: Retained for 3 years after your last interaction.
– Transaction Data: Retained for at least 7 years, in accordance with financial and tax regulations.
– Preference Data: Retained until you withdraw consent or request deletion.

9. Cookie Policy

Our website uses cookies and similar technologies to enhance your experience and gather analytics. Categories of cookies deployed include:

– Essential Cookies: Required for site functionality, login authentication, and security.
– Functional Cookies: Support enhanced features like remembering preferences or servicing personalized content.
– Analytics Cookies: Allow us to understand site usage through tools such as Google Analytics.
– Performance Cookies: Help optimize page loading, responsiveness, and general delivery of content.

10. Cookie Management and Compliance with GDPR & CCPA

You may manage cookie preferences through the cookie banner displayed upon visiting man-cha.com or by updating browser settings. Under the GDPR and CCPA, you have the right to opt out of non-essential cookies. California residents may also exercise their “Do Not Sell or Share My Personal Information” rights by contacting us.

11. Special Protections for Children

Our services are not directed to individuals under the age of 13. We do not knowingly collect personal information from children without verified parental consent. If you believe a child under 13 has provided us with personal data, please contact us at [email protected], and we will endeavor to delete such information promptly.

12. Policy Updates and User Notifications

We may update this Privacy Policy from time to time to reflect changes in legal requirements, technologies, or our practices. Substantive changes will be communicated via notices on our website or direct communication, where appropriate. Your continued use of man-cha.com represents your acknowledgment and acceptance of these changes.

13. Contact

If you have any questions, concerns, or requests regarding this Privacy Policy or how your data is handled, please contact us at:

Email: [email protected]

We are committed to maintaining full compliance with applicable data protection laws and will address your inquiry promptly and appropriately.