PolymaniaPapercraft

GDPR Privacy Policy

1. Introduction

Polymania ("we," "us," or "our") is committed to protecting the privacy and personal data of our customers and website visitors. This GDPR Privacy Policy outlines how we collect, use, disclose, and protect personal data in compliance with the General Data Protection Regulation (GDPR) and other applicable data protection laws.

2. Types of Personal Data Collected

We may collect and process the following types of personal data:

Contact Information: Name, email address, postal address, and phone number.
Purchase Information: Details of products or digital files purchased from us.
Communication Information: Correspondence between you and us.
Website Usage Data: Information about your use of our website, including IP address, browser type, and page views.
3. Purposes of Processing

We collect and process personal data for the following purposes:

To fulfill orders and deliver digital files.
To provide customer support and respond to inquiries.
To send transactional and informational emails related to your purchases.
To improve our products and services.
To comply with legal obligations.

4. Lawful Basis for Processing

We rely on the following lawful bases for processing personal data:

Contractual Necessity: Processing is necessary to fulfill our contractual obligations to you.
Legitimate Interests: Processing is necessary for our legitimate interests, such as improving our services.
Legal Obligation: Processing is necessary to comply with legal obligations.
5. Data Retention

We will retain your personal data for as long as necessary to fulfill the purposes for which it was collected and to comply with legal obligations. If you have an account with us, you can request the deletion of your data by contacting us.

6. Data Security

We implement appropriate technical and organizational measures to protect personal data from unauthorized access, disclosure, alteration, or destruction.

7. Data Subject Rights

Under GDPR, you have the following rights:

Right to access: You can request access to the personal data we hold about you.
Right to rectification: You can request corrections to inaccurate personal data.
Right to erasure: You can request the deletion of your personal data.
Right to object: You can object to the processing of your personal data.
Right to data portability: You can request the transfer of your data to another controller.
Right to lodge a complaint: You have the right to lodge a complaint with a supervisory authority.

8. Contact Information

If you have questions or concerns regarding our GDPR Privacy Policy or the processing of your personal data, please contact us at [Your Contact Information].

9. Changes to this Policy

We may update this GDPR Privacy Policy from time to time to reflect changes in our practices or for other operational, legal, or regulatory reasons. Any updates will be posted on our website.