Privacy Policy

At mystore, your privacy matters to us. This Privacy Policy explains how we collect, use, and protect your personal information when you shop with us. We comply with the California Consumer Privacy Act (CCPA) and applicable U.S. data privacy standards.

1.1 Information We Collect

We only collect information that is necessary to provide you with a safe and personalized shopping experience. We never collect unnecessary personal data.

1.1.1 Personal & Contact Data

Basic Customer Information: Full name, email address, phone number, shipping address, and billing address. For returning customers, we may store your product preferences to offer personalized recommendations.
Order-Specific Details: Product model, specifications, and any customization information (if applicable). This data will be permanently deleted after order fulfillment and the expiration of the after-sales warranty period.
In-Store Pickup Data (if applicable): Preferred pickup time slot, deleted within 7 days after successful pickup.

1.1.2 Payment & Transaction Data

All payments are processed through PCI DSS-compliant payment gateways (including Visa, Mastercard, PayPal, etc.). We never store full credit card numbers, CVV codes, or bank account details — all financial data is encrypted end-to-end.
For bulk orders, we temporarily store purchase order numbers for invoicing purposes, which are deleted after 12 months.

1.1.3 Device & Usage Data

Website Usage Data: Browsing history (e.g., products viewed, categories explored) and cookie data used to save your shopping cart and preferences for your next visit.
Post-Purchase Data: Delivery confirmations, warranty records, and feedback survey responses. This data is automatically deleted 12 months after the purchase date.

1.2 How We Use Your Information

Your personal data is used solely to enhance your shopping experience and will never be shared or sold without your authorization:

Order Fulfillment: Process your purchase and coordinate delivery or in-store pickup.
Customer Support: Resolve after-sales issues efficiently by referencing your order data.
Personalized Updates: Only with your active consent will we send relevant notifications such as new arrivals or promotions. You can unsubscribe at any time via the link in each email.
Regulatory Compliance: Retain transaction records for warranty claims and tax filing, ensuring all products meet applicable U.S. safety standards.

1.3 Data Security

All data transmission uses SSL/TLS encryption (confirmed by the "https://" prefix and padlock icon on our website).
Personal and order data are stored on secure, password-protected servers. Only authorized staff trained in CCPA compliance can access necessary information.
Third-party partners (couriers, payment processors) have signed strict confidentiality agreements and may only use your information to fulfill their specific service obligations.

1.4 Your Data Rights (Under CCPA)

You have the following rights regarding your personal data:

Right to Access: Request a free copy of all stored data related to you and your purchases.
Right to Correction: Update inaccurate information such as your shipping address or order details.
Right to Deletion: Request permanent deletion of your personal data. We will only retain legally required records (e.g., tax-related documents).
Right to Opt-Out of Data Sale: We never sell your personal data to any third party. Contact us via email for confirmation.
Right to Data Portability: Receive your personal data in a commonly used format (e.g., CSV of order history) if needed.

1.5 Contact Us

If you have any questions about this Privacy Policy or wish to exercise your data rights, please contact us at vendor.cones_8s@icloud.com. We will respond within 2 business days.