Privacy Policy - Bosstrek

At bosstrek.com (“we,” “us,” or “our”), your privacy and the protection of your personal data are our top priorities. This Privacy Policy outlines our data collection practices, usage, sharing, and your rights regarding your personal information. We are fully committed to maintaining the confidentiality, integrity, and security of your data, in accordance with international data protection standards including the General Data Protection Regulation (GDPR) and the California Consumer Privacy Act (CCPA).

1. Scope of This Policy and Data Controller Responsibility

This Privacy Policy applies to all users who visit or interact with bosstrek.com, including customers, prospective customers, and users browsing our website. As the data controller, bosstrek.com determines the purposes and means of processing your personal data. By using this website, you acknowledge and agree to the practices described in this document.

For questions or concerns regarding data protection, you may contact us at: [email protected].

2. Categories of Personal Data We Process

We collect and process the following categories of personal data:

a. Usage Data
Includes information about your interactions with bosstrek.com, such as IP address, browser type and version, time zone settings, referrer URL, pages viewed, time spent on each page, and session duration.

b. Account Data
Includes the information you provide during account creation or login, such as your full name, email address, telephone number, and physical address.

c. Profile Data
Includes your demographic details, order history, personal preferences, purchase behavior, and interest areas related to our products or services.

d. Communication Data
Includes customer service inquiries, email correspondence, contact forms submitted, chat logs, and any other communication you engage in with us.

e. Technical Data
Includes device identifiers, operating system type and version, browser plug-ins and versions, screen resolution, and system configuration data.

f. Transaction Data
Includes details of the products or services you purchase from us, order amounts, billing and shipping addresses, and payment instrument identifiers (in compliance with PCI-DSS standards).

g. Preference Data
Includes data concerning your choices related to marketing communications, newsletter subscriptions, notification settings, and product interests.

3. Legal Bases for Processing

We process your personal data in accordance with the following legal bases:

– Performance of a Contract: Processing necessary for the fulfillment of a purchase, service provision, account management, or customer support.
– Legitimate Interest: To improve our services, enable secure access, detect fraud, and carry out analytics for business intelligence, provided such interests are not overridden by your fundamental rights.
– Consent: For specific situations like direct marketing or where explicit permission is required, we will obtain your consent prior to processing.
– Legal Obligation: For compliance with applicable legal or regulatory obligations or law enforcement requests.

4. Your Privacy Rights

As a data subject, you are entitled to the following rights:

– Right of Access: You may request information about the personal data we hold about you.
– Right to Rectification: You may correct inaccurate or incomplete data.
– Right to Erasure: You may request deletion of your personal data under certain conditions.
– Right to Restriction: You may request limited processing of your data under specific circumstances.
– Right to Data Portability: You may request a copy of your data in a structured, machine-readable format for transfer to another provider.

These rights can be exercised by contacting us at [email protected]. We may request verification of your identity before processing your request, as required by applicable law.

5. Data Security Measures

To safeguard your information, we have implemented rigorous security protocols, including but not limited to:

– Encryption (SSL/TLS) of data in transit and at rest
– Access controls and user authentication
– Firewalls and intrusion detection systems
– Secure cloud storage
– Regular security audits and vulnerability scans
– Employee privacy and cybersecurity training

6. International Data Transfers

Where personal data is transferred outside the European Economic Area or United States (e.g., to third-party processors), we ensure adequate safeguards are in place, such as Standard Contractual Clauses approved by the European Commission, and conduct data protection impact assessments where necessary.

7. Data Retention

We retain personal data only for as long as necessary to fulfill the purposes for which it was collected, including to meet legal, accounting, or reporting requirements. Typical retention periods include:

– Usage and Technical Data: 12 to 24 months
– Account Data: Retained as long as your account is active, plus 6 years for compliance
– Transaction Data: 7 years for auditing and recordkeeping
– Communication and Preference Data: 3 years after last contact

8. Cookie Policy

Cookies are small text files stored on your device to enhance your experience on our website and enable functionality. We use the following types of cookies:

– Essential Cookies: Necessary for enabling core website functionality.
– Functional Cookies: Allow customization based on your preferences.
– Analytics Cookies: Help us understand how users navigate bosstrek.com and improve performance (e.g., Google Analytics).
– Performance Cookies: Monitor load times, responsiveness, and errors.

9. Cookie Management and Compliance

You can manage or disable cookies through your browser settings or by using the cookie consent banner presented when you first visit bosstrek.com. Under GDPR and CCPA, you have the right to opt out of non-essential cookies. We honor Do Not Track signals where supported.

You may also opt out of third-party cookie tracking using industry sites such as www.aboutads.info or www.youronlinechoices.eu.

10. Children’s Privacy

bosstrek.com is not intended for or directed at children under the age of 13. We do not knowingly collect personal data from individuals in this age group. If we become aware of such collection, we will take immediate steps to delete the data. Parents or legal guardians who believe their child has submitted information should contact us at [email protected].

11. Changes to This Policy

We reserve the right to update or modify this Privacy Policy from time to time to reflect changes in our legal obligations or business operations. Where required by law, we will notify you of material changes and, where necessary, seek your renewed consent. Continued use of bosstrek.com after such changes constitutes your acceptance of the revised policy.

12. Contact Us

If you have any questions, concerns, or feedback related to this Privacy Policy or your personal data, please contact us at:

Email: [email protected]

13. Compliance Statement

bosstrek.com is committed to full compliance with applicable data privacy laws, including the GDPR and CCPA. If you believe your rights under data protection regulations have been violated, you may contact us as above or lodge a complaint with your local data protection authority.

For all privacy-related inquiries and to exercise your data rights, please reach out to us directly at [email protected].