Privacy Policy
1. Introduction
At Bukkuma Web (“we”, “our”, or “us”), accessible via https://bukkumaweb.com, we are committed to safeguarding your privacy and protecting your personal data. We understand that your personal data is valuable and must be handled properly, securely, and transparently. This Privacy Policy outlines how we collect, use, disclose, and protect your information in compliance with applicable data protection laws, including the General Data Protection Regulation (Regulation (EU) 2016/679) (“GDPR”) and the California Consumer Privacy Act (“CCPA”).
We prioritize a privacy-first approach to ensure that your rights are respected and your personal information is protected.
2. Scope of Policy and Data Controller Role
This Privacy Policy applies to all visitors and users of the Bukkuma Web website and related online services. For purposes of applicable data protection legislation, Bukkuma Web, located at https://bukkumaweb.com, is the “data controller” of your personal data – meaning we determine the purposes and means of the processing of your data.
If you have any questions about this policy or the processing of your data, please contact us at [email protected].
3. Categories of Data Processed
We collect and process various categories of personal data, depending on your interaction with our website and services:
a) Usage Data
Includes information about how you use our website, such as IP address, browser type and version, operating system, referral source, length of visits, and pages viewed.
b) Account Data
Includes details used to register an account such as your full name, billing address, shipping address, email address, phone number, and account credentials.
c) Profile Data
Includes your preferences, browsing history, purchasing behavior, and feedback or survey responses related to your profile.
d) Communication Data
Includes records of your communications with us, including customer support requests, email correspondence, and other interaction logs.
e) Technical Data
Includes data collected from your device to optimize service delivery, such as device type, hardware model, operating system configuration, network connectivity, and browser settings.
f) Transaction Data
Includes records of product or service transactions, payment card or billing details, order history, delivery logistics, and invoice information.
g) Preference Data
Includes your consent to receive marketing communications, content preferences, and product categories of interest based on your interactions and selections.
4. Legal Bases for Processing
We rely on the following legal grounds to process your personal data:
– Performance of a Contract: To fulfill our contractual obligations to you, such as delivering goods or services.
– Legitimate Interests: To operate and improve our website and communications, prevent fraud, and secure our systems, provided such interests are not overridden by your data protection rights.
– Consent: Where we rely on your freely given, specific, and informed consent to process your data for certain purposes, including marketing.
– Legal Obligation: Where we are legally required to collect, retain, or share certain information under applicable law.
5. Your Rights
As a data subject under GDPR and CCPA, you may exercise the following rights, subject to applicable legal exceptions:
– Right of Access: Obtain confirmation as to whether we process your personal data and access to that data.
– Right of Rectification: Request correction of inaccurate or incomplete data.
– Right to Erasure: Request deletion of your personal data, subject to compliance obligations.
– Right to Restrict Processing: Request limitation of data processing under certain circumstances.
– Right to Data Portability: Receive your personal data in a structured, commonly-used format and have it transmitted to another controller.
– Right to Object: Object to processing based on our legitimate interests or for direct marketing purposes.
– Right to Non-Discrimination: You will not receive discriminatory treatment as a result of exercising your rights under the CCPA.
To exercise any of these rights, please contact us at [email protected].
6. Security Measures
We implement comprehensive security measures to protect your personal data, including:
– End-to-end encryption of sensitive data during transmission;
– Persistent access control through role-based permissions;
– Regular backups of stored data;
– Internal staff training and awareness on data protection and confidentiality;
– Continuous system monitoring for threats and vulnerabilities.
While we strive to use commercially acceptable means to protect your data, no method of transmission over the internet or method of electronic storage is entirely secure.
7. International Transfers
Your personal data may be processed in or transferred to countries outside of your own, including jurisdictions where data protection laws may differ. Where such transfers occur, we ensure appropriate safeguards are in place, including Standard Contractual Clauses approved by the European Commission or other mechanisms recognized under applicable data protection laws, to ensure your information remains protected in compliance with GDPR and CCPA.
8. Data Retention
We retain personal data only as long as necessary for the purposes for which it was collected, including:
– Usage Data: retained for up to 12 months to support analytics and improvements.
– Account Data: retained as long as the account is active and for seven (7) years thereafter for audit and legal purposes.
– Profile and Preference Data: retained for three (3) years following your last interaction.
– Transaction Data: retained for seven (7) years in accordance with tax and accounting laws.
– Communication Data: retained for two (2) years to ensure service continuity and quality control.
Once retention periods expire or the underlying purpose is no longer applicable, the data will be securely deleted or anonymized.
9. Cookie Policy
Our website uses cookies and similar technologies to enhance user experience, analyze traffic, and personalize content. The types of cookies we use include:
– Essential Cookies: necessary for the fundamental functionality and access to secure areas.
– Functional Cookies: remember your preferences and configurations to enhance usability.
– Performance & Analytics Cookies: collect data about your interactions to measure and improve website performance.
– Marketing Cookies: used with your consent to deliver relevant advertisements and track campaign effectiveness.
10. Cookie Management and Compliance
You have the ability to accept or decline cookies via our cookie consent management tool when visiting bukkumaweb.com. You may also manage your cookie preferences through your browser settings. We honor the “Do Not Track” signals where required, and fully comply with both GDPR and CCPA requirements concerning cookie consent, collection, and tracking.
We maintain records of your cookie consent preferences and allow you to modify or revoke consent at any time by revisiting the cookie preferences section on our website.
11. Children’s Privacy
We do not knowingly collect or solicit personal information from individuals under the age of 13. If you are a parent or guardian and believe that your child has provided us with personal data, please contact us at [email protected]. If we become aware that we have collected personal data from a child without parental consent, we will take steps to delete such information promptly.
12. Changes to this Privacy Policy
We may update or revise this Privacy Policy from time to time to reflect changes in legal, regulatory, or operational requirements. Users will be informed of material changes via appropriate channels on bukkumaweb.com or through direct communication, where applicable. Your continued use of our services following an update constitutes your acceptance of the revised terms.
13. Contact
If you have any questions, concerns, or requests relating to this Privacy Policy or the handling of your personal data, please contact us at:
Email: [email protected]
We are committed to maintaining the privacy and security of your personal data and complying fully with applicable data protection regulations. For additional information or to exercise your data rights, please reach out anytime.