Privacy Policy
Your privacy matters to us
Quick Navigation:
Policy Summary
This policy covers how we collect, use, and protect your personal information when you use our services. We're committed to transparency and giving you control over your data.
Your privacy is fundamental to how we operate. This Privacy Policy explains how OurStore collects, uses, protects, and shares your personal information when you use our website, mobile application, and services.
Key Commitments:
- Transparency: We clearly explain what data we collect and why
- Control: You have choices about how your data is used
- Security: We protect your information with industry-standard measures
- No Sale: We never sell your personal data to third parties
We collect different types of information to provide and improve our services:
Personal Information
- Account Data: Name, email address, phone number, date of birth
- Profile Information: Profile picture, preferences, wishlist items
- Communication: Messages, reviews, customer service interactions
Payment & Billing
- Payment Methods: Last 4 digits of cards, payment provider tokens
- Billing Address: For tax calculation and fraud prevention
- Transaction History: Purchase records, refunds, order status
Technical Information
- Device Data: IP address, browser type, operating system
- Usage Analytics: Pages visited, time spent, click patterns
- Cookies: Session data, preferences, shopping cart contents
- Location: General location (city/country) for shipping and compliance
We use your information for the following legitimate business purposes:
Order Processing & Fulfillment
Process payments, manage inventory, arrange shipping, handle returns and refunds.
Customer Support
Respond to inquiries, resolve issues, provide technical assistance, process warranty claims.
Security & Fraud Prevention
Detect suspicious activities, prevent unauthorized access, comply with legal requirements.
Service Improvement
Analyze usage patterns, test new features, optimize website performance, enhance user experience.
Communications
Send order updates, promotional offers (with consent), important policy changes, newsletter content.
Legal Basis for Processing (GDPR)
- Contract Performance: Processing orders and providing services
- Legitimate Interest: Fraud prevention, analytics, customer support
- Consent: Marketing communications, optional features
- Legal Obligation: Tax records, fraud reporting, regulatory compliance
We only share your information with trusted partners under strict contractual obligations:
Our No-Sale Promise
We never sell, rent, or lease your personal information to third parties for their marketing purposes. Your data is not a commodity to us.
Depending on your location, you have various rights regarding your personal data:
GDPR Rights (EU Residents)
- Access: Request a copy of your data
- Rectification: Correct inaccurate information
- Erasure: Request deletion of your data
- Portability: Export your data in a standard format
- Restrict Processing: Limit how we use your data
- Object: Opt-out of certain processing activities
- Withdraw Consent: Revoke previously given permissions
- Lodge Complaints: Contact your local data protection authority
CCPA Rights (California Residents)
- Know: What personal information we collect and how it's used
- Delete: Request deletion of your personal information
- Sell: Opt-out of the sale of personal information (we don't sell data)
- Non-Discrimination: Equal service regardless of privacy choices
How to Exercise Your Rights
Security Measures
We implement multiple layers of security to protect your information:
Encryption
- TLS 1.3 for data in transit
- AES-256 for data at rest
- End-to-end encryption for sensitive data
Access Control
- Role-based access permissions
- Multi-factor authentication
- Regular access reviews
Monitoring
- 24/7 security monitoring
- Intrusion detection systems
- Regular vulnerability scans
Compliance
- SOC 2 Type II certified
- PCI DSS compliance
- Regular security audits
Data Retention
We keep your information only as long as necessary:
- Account Data: Until account deletion or 3 years of inactivity
- Transaction Records: 7 years for tax and legal compliance
- Support Communications: 2 years after case closure
- Marketing Data: Until consent is withdrawn
- Analytics Data: Anonymized after 26 months
Data Breach Response
In the unlikely event of a security incident:
- We'll investigate and contain the breach immediately
- Affected users will be notified within 72 hours
- Relevant authorities will be informed as required by law
- We'll provide clear information about steps to protect yourself
We may update this Privacy Policy from time to time to reflect changes in our practices, technology, legal requirements, or other factors.
How We Handle Updates
- Advance Notice: We'll notify you of significant changes at least 30 days before they take effect
- Email Notification: Registered users will receive update notifications via email
- Website Banner: Important changes will be highlighted on our website
- Version History: Previous versions are archived for your reference
Types of Changes
Minor Updates
- Clarifications to existing policies
- Contact information updates
- Formatting improvements
Major Changes
- New data collection practices
- Changes to data sharing
- Updated user rights
Current Version
- Version: 2.1
- Last Updated: December 15, 2024
- Effective Date: January 1, 2024
Have questions about this Privacy Policy or how we handle your data? We're here to help.
Response Times
- General Inquiries: Within 2 business days
- Privacy Requests: Within 30 days
- Urgent Matters: Within 24 hours
- Data Breach Reports: Immediate response
Data Protection Officer
For complex privacy matters, you can contact our Data Protection Officer directly:
Email: dpo@ourstore.com | Phone: +20 123 456 7891
Legal Notice: This privacy policy constitutes a legally binding agreement between you and OurStore LLC. By using our services, you acknowledge that you have read, understood, and agree to be bound by this policy.
OurStore LLC, 123 Business Street, New Cairo 11835, Egypt