Privacy Policy

1. Introduction

At usa366.com, we are committed to safeguarding your personal data and respecting your privacy rights. We recognize the importance of privacy and data protection and diligently work to ensure compliance with applicable international, national, and regional privacy laws, including the General Data Protection Regulation (GDPR) and the California Consumer Privacy Act (CCPA). This Privacy Policy explains how we collect, use, disclose, and protect your information when you interact with our website and our services.

We believe that trust begins with transparency. This Privacy Policy provides a comprehensive overview of our data practices, emphasizing our dedication to your privacy-first experience.

2. Scope of Policy and Data Controller Role

This Privacy Policy applies to all personal data collected via our website, available at usa366.com, as well as through related communications, transactions, and services provided by or on behalf of usa366.com. The data controller responsible for your personal data processing is usa366.com. For any questions, you may contact us at [email protected].

This policy applies to all users globally, and additional safeguards are in place to ensure jurisdiction-specific compliance where required.

3. Categories of Data We Process

We collect and process the following categories of personal data:

– Usage Data: Information about how you use our website, including browser type and version, device type, IP address, geographic location, time zone, usage sessions, and referring site URLs.
– Account Data: When you create an account, we collect your name, email address, billing and delivery addresses, and phone number.
– Profile Data: Preferences, purchase history, browsing behaviors, wish lists, and customized settings.
– Communication Data: Records of communications initiated by you or received through support, feedback forms, and email interactions.
– Technical Data: Device identifiers, operating system and configurations, screen resolution, connection type, and diagnostic logs.
– Transaction Data: Payment instructions, transaction history, shipping details, and invoices.
– Preference Data: Information about your marketing and communication preferences, subscription settings, and product or service interests.

4. Legal Bases for Processing

We process your personal data only when we have a valid legal basis to do so, which includes:

– Contractual Necessity: To fulfill our contractual obligations, including account management, order processing, and service delivery.
– Consent: For activities requiring your prior approval, such as subscription to newsletters or receiving promotional communications. You can withdraw your consent at any time.
– Legitimate Interests: When processing is necessary for our legitimate business interests, such as improving our website functionality and ensuring security. We always consider your rights and interests before processing data on this basis.
– Legal Obligations: Where processing is required to comply with legal or regulatory requirements.

5. Your Rights

Under applicable privacy laws, you are entitled to exercise the following rights:

– Right of Access: You may request access to the personal data we hold about you.
– Right to Rectification: If your information is inaccurate or incomplete, you have the right to request correction.
– Right to Erasure: You have the right to request deletion of your data under certain circumstances (“right to be forgotten”).
– Right to Restrict Processing: You may request limitation of processing where permitted by law.
– Right to Data Portability: You may request to receive your personal data in a commonly used, machine-readable format and transmit it to another controller.

To exercise any of these rights, contact us at [email protected]. We will respond to each request in accordance with the timelines and conditions specified by the applicable data protection laws.

6. Security Measures

We implement appropriate technical and organizational security measures to protect your data against unauthorized access, disclosure, alteration, or destruction. These measures include:

– End-to-end encryption of sensitive data in transit and at rest.
– Secure access controls and authentication protocols.
– Multi-factor authentication (MFA) for administrative access.
– Firewall and intrusion detection systems.
– Regular security audits and system monitoring.
– Staff training on data security and confidentiality.

7. International Data Transfers

Your personal data may be transferred to, and processed in, countries outside your country of residence, including to jurisdictions that may not offer the same level of data protection. In such cases, we use Standard Contractual Clauses (SCCs), approved by regulatory authorities, and other appropriate safeguards to ensure an adequate level of protection in line with GDPR and other applicable laws.

8. Data Retention

We retain personal data only for as long as necessary to fulfill the purposes outlined in this Privacy Policy, including for legal, regulatory, tax, accounting, or reporting requirements.

A summary of retention periods includes:

– Account and Profile Data: Retained for as long as your account remains active and for a reasonable period thereafter for administrative purposes.
– Transaction Data: Retained for seven (7) years to comply with tax and financial regulations.
– Communication Data: Retained for up to three (3) years after the last contact.
– Technical and Usage Data: Retained for up to 26 months for analytics and optimization purposes unless anonymized.
– Preference and Consent Data: Retained as long as you remain opted-in.

Where data is no longer required, it is securely deleted or anonymized.

9. Cookie Policy

usa366.com uses cookies and similar technologies to enhance your experience, analyze traffic, and maintain website functionality. Cookies fall into the following categories:

– Essential Cookies: Required for basic website operation, such as site navigation and secure login.
– Functional Cookies: Enable personalization features, like language or region preferences.
– Analytics Cookies: Collect data on user interactions to improve site content and usability.
– Performance Cookies: Monitor system performance, error reporting, and load times.

Some cookies are placed by third-party services we use on our pages.

10. Cookie Management and Compliance

You have full control over cookie preferences. On your first visit, you are prompted to accept or manage cookie settings in compliance with GDPR and CCPA requirements. You may adjust these preferences at any time using cookie settings in your browser or the dedicated cookie management tool accessible via our website footer.

We honor browser “Do Not Track” settings and comply with Global Privacy Control (GPC) signals when received under relevant legal frameworks.

11. Children’s Privacy

usa366.com is not intended for use by individuals under the age of 13. We do not knowingly collect or process personal data from children under 13. If you believe we have inadvertently collected data from a minor without parental consent, please contact us immediately at [email protected] so we can take appropriate steps to delete such data.

12. Policy Updates and Notifications

This Privacy Policy is subject to change in response to legal, technological, or operational developments. All changes will be posted on this page, and where significant, we may notify you through the website interface or other direct communication channels before the changes take effect.

We encourage users to review the policy periodically to remain informed about how we protect their personal data.

13. Contact

If you have any questions, concerns, or requests related to this Privacy Policy or your personal information, please contact us at:

Email: [email protected]

We take privacy concerns seriously and will respond promptly and responsively to all communications.

This Privacy Policy reflects our ongoing commitment to uphold the highest standards of data privacy and transparency. Thank you for trusting usa366.com.