Privacy policy

Information We Collect

At NotaBamboo, we collect the following types of information when you interact with our website:

• Personal Information: Name, email address, shipping/billing address, and payment details when you make a purchase.
• Device Information: IP address, browser type, operating system, and device identifiers for analytics and security purposes.
• Usage Data: Pages visited, products viewed, and interaction patterns to improve user experience.
• Cookies: We use cookies and similar tracking technologies to remember preferences and analyze site traffic.

How We Use Your Information

Your data is used exclusively for legitimate business purposes:

• Processing and fulfilling your orders
• Providing customer support and responding to inquiries
• Improving our website functionality and product offerings
• Sending transactional emails (order confirmations, shipping updates)
• Preventing fraud and enhancing website security
• Complying with legal obligations

We will never sell your personal information to third parties.

Data Sharing and Third Parties

We may share information with:

• Payment Processors: To complete transactions (e.g., Stripe, PayPal)
• Shipping Providers: To deliver your orders (e.g., FedEx, DHL)
• Service Providers: For website hosting, analytics, and marketing (under strict confidentiality agreements)
• Legal Authorities: When required by law or to protect our rights

All third parties must comply with equivalent data protection standards.

Data Retention and Security

We retain personal information only as long as necessary for the purposes outlined in this policy or as required by law. Our security measures include:

• SSL encryption for all data transmissions
• Regular security audits and vulnerability testing
• Limited employee access to sensitive data
• Secure storage systems with access controls

Your Rights

Under GDPR, CCPA, and other privacy laws, you may have the right to:

• Request access to your personal data
• Request correction of inaccurate information
• Request deletion of your data (subject to legal limitations)
• Opt-out of marketing communications
• Withdraw consent for data processing
• Lodge a complaint with a supervisory authority

To exercise these rights, please contact us through our website contact form.

International Data Transfers

As an international business, your data may be transferred to and processed in countries outside your residence. We ensure all transfers comply with applicable data protection laws through:

• Standard Contractual Clauses (SCCs)
• Adequacy decisions where applicable
• Other legally approved transfer mechanisms

Policy Updates

We may update this policy periodically to reflect changes in our practices or legal requirements. The "Last Updated" date at the bottom of this page will indicate when revisions were made.

Contact Us

For any privacy-related questions or concerns, please use the contact form on our website. We typically respond within 3-5 business days.