Privacy Policy

1. Introduction

Welcome to Cisawu.com. We are committed to protecting your privacy and personal data. This Privacy Policy explains how we collect, use, process, and store your information when you visit our website, make purchases, or interact with our services.

We respect your privacy rights and are dedicated to maintaining transparency about our data practices. This policy complies with the General Data Protection Regulation (GDPR) and other applicable privacy laws.

2. Information We Collect

We collect various types of information to provide and improve our services:

Personal Information: Name, email address, phone number, billing address, and shipping address when you create an account or make a purchase.
Transaction Information: Purchase history, payment details, and order fulfillment information.
Technical Information: IP address, browser type, device information, pages visited, time spent on site, referring website, and other analytics data.
Communication Data: Information you provide when contacting our customer service, participating in surveys, or subscribing to newsletters.
Cookies and Similar Technologies: Information collected through cookies, web beacons, and similar technologies to enhance your browsing experience.

3. How We Use Your Information

We use your information for the following purposes:

Processing and fulfilling your orders
Managing your account and providing customer support
Improving our website functionality and user experience
Personalizing content and product recommendations
Sending transactional emails and order updates
Marketing communications (with your consent)
Analyzing usage patterns and optimizing our services
Preventing fraud and ensuring security
Complying with legal obligations

4. Legal Basis for Processing

Under GDPR, we process your data based on the following legal grounds:

Contract Performance: Processing necessary to fulfill our contractual obligations to you (e.g., processing orders)
Legitimate Interests: Processing that serves our legitimate business interests (e.g., improving our services) without overriding your rights
Legal Compliance: Processing required to comply with applicable laws
Consent: Processing based on your explicit consent (e.g., marketing communications)

5. Data Retention

We retain your personal information only for as long as necessary to fulfill the purposes outlined in this Privacy Policy, unless a longer retention period is required or permitted by law. Transaction records are kept for accounting, tax, and legal compliance purposes. Account information is retained until you request deletion.

When determining appropriate retention periods, we consider the amount, nature, and sensitivity of the data, the potential risk of harm from unauthorized use or disclosure, and applicable legal requirements.

6. Data Protection

We implement appropriate technical and organizational measures to protect your personal data against unauthorized access, alteration, disclosure, or destruction. These measures include:

Secure Socket Layer (SSL) encryption for data transmission
Password protection and access controls
Regular security assessments and updates
Employee training on data protection and privacy
Secure data storage systems

While we strive to protect your personal information, no method of transmission over the Internet or electronic storage is 100% secure. We cannot guarantee absolute security but are committed to implementing reasonable safeguards.

7. Your Rights Under GDPR

If you are located in the European Economic Area (EEA), you have the following rights regarding your personal data:

Right to Access: Request a copy of the personal data we hold about you
Right to Rectification: Request correction of inaccurate or incomplete data
Right to Erasure: Request deletion of your personal data in certain circumstances
Right to Restrict Processing: Request limitation of processing in certain scenarios
Right to Data Portability: Receive your data in a structured, commonly used format
Right to Object: Object to processing based on legitimate interests or for direct marketing
Right to Withdraw Consent: Withdraw previously given consent at any time

To exercise these rights, please contact us through the information provided in the "Contact Us" section. We will respond to your request within 30 days.

8. Cookies Policy

Our website uses cookies and similar technologies to enhance functionality and user experience. Cookies are small text files stored on your device that help us recognize your browser and remember certain information.

We use the following types of cookies:

Essential Cookies: Required for basic website functionality
Functional Cookies: Remember your preferences and settings
Analytical Cookies: Help us understand how visitors interact with our website
Marketing Cookies: Track your browsing habits to deliver targeted advertising

You can manage cookie preferences through your browser settings. Please note that disabling certain cookies may affect website functionality.

9. Third-Party Services

We may use third-party services for website analytics, payment processing, order fulfillment, and marketing. These service providers have access to your personal information only to perform specific tasks on our behalf and are obligated to protect your data.

Our website may contain links to third-party websites. We are not responsible for the privacy practices or content of these external sites. We encourage you to review the privacy policies of any website you visit.

10. Children's Privacy

Our services are not directed to individuals under 16 years of age. We do not knowingly collect personal information from children. If we become aware that we have inadvertently collected personal data from a child, we will take steps to delete it as soon as possible.

11. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices or legal requirements. We will notify you of any material changes by posting the new policy on this page and updating the "Last Updated" date. We encourage you to review this Privacy Policy periodically.

12. Contact Us

If you have questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact our Data Protection Officer through our website contact form.