Last Updated: 20 / 08 / 2024
Introduction
Welcome to Sastronic Sales and Services. This Privacy Policy explains how we collect, store, use, share, and secure your personal data when you visit our Website or use our services. It also outlines your rights under the General Data Protection Regulation (GDPR) and how you can exercise them.
By accessing or using our Website, you agree to the practices described in this Privacy Policy.
1. Data We Collect
We collect and process various types of personal data, including:
- Personal Identification Information: Name, email address, phone number, and physical address when you place an order or contact us.
- Order Information: Details related to the services you order, including print preferences, delivery instructions, and transaction history.
- Payment Information: Credit card or other payment details, processed securely through third-party payment processors.
- Technical Data: IP address, browser type, operating system, device information, and browsing behavior on our Website.
- Communication Data: Records of any communications you have with us, including emails, chat messages, and customer service interactions.
2. How We Use Your Data
We use your personal data for the following purposes:
- Service Delivery: To process and fulfill your orders, including delivery of products and services.
- Customer Support: To respond to your inquiries, provide customer support, and resolve issues.
- Marketing and Communication: To send promotional materials, newsletters, and updates about our services, where you have provided consent.
- Website Improvement: To analyze how our Website is used and to improve its functionality and user experience.
- Legal Compliance: To comply with legal obligations, respond to legal requests, and protect our rights.
3. Legal Basis for Processing Your Data
We process your personal data based on one or more of the following legal grounds:
- Contractual Necessity: To fulfill our contractual obligations to you, such as processing your order and delivering services.
- Consent: Where you have given explicit consent, such as for receiving marketing communications.
- Legitimate Interests: For the purpose of operating and improving our business, maintaining Website security, and managing customer relationships.
- Legal Obligation: To comply with legal and regulatory requirements, including tax and accounting obligations.
4. Data Storage and Security
We take the security of your personal data seriously and implement appropriate technical and organizational measures to protect it from unauthorized access, alteration, disclosure, or destruction. These measures include:
- Encryption: We use encryption technologies to secure your data during transmission and storage.
- Access Controls: We limit access to your personal data to authorized personnel only, based on the principle of least privilege.
- Regular Audits: We conduct regular security audits and assessments to ensure our systems are secure.
We store your personal data only for as long as necessary to fulfill the purposes for which it was collected or to comply with legal obligations.
5. Data Sharing and Disclosure
We do not sell or rent your personal data to third parties. However, we may share your data with:
- Service Providers: Third-party vendors and service providers who assist us in delivering our services, such as payment processors, delivery companies, and IT service providers. These parties are bound by confidentiality agreements and are only permitted to use your data in accordance with our instructions.
- Legal and Regulatory Authorities: If required by law, or in response to legal processes, we may disclose your personal data to governmental authorities, law enforcement, or other third parties as necessary to comply with legal obligations or protect our rights.
6. International Data Transfers
Your personal data may be transferred to, and processed in, countries other than the one in which you reside. These countries may have data protection laws that differ from those in your country. Where we transfer your data internationally, we ensure that appropriate safeguards are in place to protect your data, in compliance with GDPR requirements.
7. Your Rights Under GDPR
As a data subject under the GDPR, you have the following rights regarding your personal data:
- Right to Access: You have the right to request access to your personal data and receive a copy of the information we hold about you.
- Right to Rectification: You have the right to request the correction of inaccurate or incomplete data we hold about you.
- Right to Erasure: You have the right to request the deletion of your personal data, subject to certain conditions.
- Right to Restriction of Processing: You have the right to request the restriction of processing of your personal data under certain circumstances.
- Right to Data Portability: You have the right to receive your personal data in a structured, commonly used, and machine-readable format, and to have that data transmitted to another controller, where technically feasible.
- Right to Object: You have the right to object to the processing of your personal data based on legitimate interests or for direct marketing purposes.
- Right to Withdraw Consent: Where you have provided consent for data processing, you have the right to withdraw that consent at any time.
To exercise any of these rights, please contact us at [email protected]. We will respond to your request in accordance with applicable data protection laws.
8. Cookies and Tracking Technologies
Our Website uses cookies and similar tracking technologies to enhance your browsing experience, analyze Website traffic, and for marketing purposes. You can control the use of cookies through your browser settings. For more information, please refer to our Cookie Policy.
9. Third-Party Links
Our Website may contain links to third-party websites. We are not responsible for the privacy practices or the content of these third-party websites. We encourage you to review their privacy policies before providing them with any personal data.
10. Changes to This Privacy Policy
We may update this Privacy Policy from time to time to reflect changes in our practices or legal requirements. Any changes will be posted on this page with an updated effective date. We encourage you to review this Privacy Policy periodically to stay informed about how we protect your personal data.
11. Contact Us
If you have any queries or concerns about this Privacy Policy or our data practices, please contact us at:
Sastronic Sales and Services
11, Jalan Dato Lee Fong Yee,
Bandar Seremban, 70000 Seremban,
Negeri Sembilan.
Email: [email protected]