Privacy Policy for TimorCars.com

Effective Date: December 1, 2024

 

 

At TimorCars.com (“we,” “our,” “us”), we are committed to protecting and respecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit our website [timorcars.com] and make use of our services. This policy is in compliance with the General Data Protection Regulation (GDPR) and the Payment Card Industry Data Security Standard (PCI DSS) to ensure the privacy and security of your data.

 

1. Information We Collect

We collect the following types of information:

A. Personal Data

• Name
• Email address
• Phone number
• Billing and shipping addresses
• Payment information (if applicable)
• Account details (username, password, preferences)

B. Non-Personal Data

• IP address
• Browser type and version
• Device information
• Location data (for user experience improvement)
• Usage data (e.g., how you use our website)

2. How We Use Your Information

We use your personal information for the following purposes:

• To process orders and deliver products or services you have requested.
• To manage your account, including billing, shipping, and order history.
• To send marketing communications (with your consent), such as newsletters, promotions, and updates.
• To improve our website, products, and services based on user feedback.
• To comply with legal obligations or respond to legal requests.
• To protect against fraud, unauthorized transactions, and security breaches.

3. Legal Basis for Processing Your Data

We process your personal data under the following legal bases:

• Consent: Where you have provided your explicit consent (e.g., subscribing to our newsletter).
• Contractual necessity: To fulfill our obligations under a contract (e.g., processing your order).
• Legal obligation: Where we are required to comply with a legal or regulatory requirement.
• Legitimate interests: Where we have a legitimate interest in processing your data, such as improving our services or marketing, provided such interests are not overridden by your rights and interests.

4. How We Protect Your Data

We use reasonable technical and organizational measures to protect your personal data from unauthorized access, alteration, or destruction. This includes:

• Encryption of sensitive data, including payment information.
• Secure connections via HTTPS protocol.
• Access control policies ensuring that only authorized personnel can access your personal information.

We are also compliant with PCI DSS (Payment Card Industry Data Security Standard) to ensure that your payment information is handled securely and according to industry standards.

5. Sharing Your Information

We may share your personal data with:

• Third-party service providers (e.g., payment processors, hosting providers, shipping companies) who assist in the operation of our website or the fulfillment of services. These parties are only permitted to process your data as necessary to provide their services.
• Legal authorities if required by law, regulation, or legal process, or to protect against fraud or other unlawful activity.

We do not sell or rent your personal information to third parties.

6. Data Retention

We retain your personal data for as long as necessary to fulfill the purposes for which it was collected, including legal, accounting, or reporting requirements. If you wish to request the deletion of your personal data, you can contact us at [insert contact details].

7. Your Rights Under GDPR

Under the GDPR, you have the following rights:

• Right to access: You have the right to request copies of your personal data.
• Right to rectification: You can request corrections to inaccurate or incomplete personal data.
• Right to erasure (Right to be forgotten): You can request that we delete your personal data under certain conditions.
• Right to restrict processing: You can request the restriction of your personal data processing in certain circumstances.
• Right to data portability: You can request a transfer of your data to another organization or directly to you, in a structured, commonly used, and machine-readable format.
• Right to object: You can object to the processing of your personal data in certain situations.
• Right to withdraw consent: If we process your data based on consent, you can withdraw that consent at any time.

To exercise these rights, please contact us at [insert contact email or address].

8. Cookies and Tracking Technologies

We use cookies and similar tracking technologies to enhance your user experience on our website. This includes:

• Strictly necessary cookies that are essential for the functioning of our website.
• Performance cookies to analyze website usage and improve performance.
• Functionality cookies to remember user preferences and settings.
• Targeting cookies for advertising and marketing purposes.

You can control and manage cookies through your browser settings. Please note that disabling certain cookies may affect your experience on our website.

9. Third-Party Links

Our website may contain links to third-party websites. We are not responsible for the privacy practices or content of those sites. Please review their privacy policies before submitting any personal data to third-party sites.

10. International Data Transfers

If you are located outside the European Economic Area (EEA), please note that we may transfer your personal data to countries that may not have the same data protection laws as your country. In such cases, we will take steps to ensure that your personal data is protected in accordance with GDPR, including the use of appropriate safeguards such as Standard Contractual Clauses (SCCs).

11. Children’s Privacy

Our website is not intended for children under the age of 16. We do not knowingly collect or solicit personal data from children under 16. If we learn that we have inadvertently collected such information, we will take steps to delete it as soon as possible.

12. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. Any changes will be posted on this page with the updated effective date. We encourage you to review this policy periodically to stay informed about how we are protecting your data.

13. Contact Us

If you have any questions or concerns about this Privacy Policy or our data practices, please contact us at:

TimorCars.com
Email: [email protected]
Phone: +67076899555
Address: Suite 322 Timor Plaza, Rua Presidente Nicolau Lobato, Dili, Timor-Leste