Privacy Policy
Machan Engineering (“we,” “us,” or “our”), accessible via https://machanengineering.com (the “Website”), is committed to safeguarding the privacy and personal data of our users. This Privacy Policy outlines how we collect, use, disclose, and protect your personal information. We operate in compliance with the General Data Protection Regulation (“GDPR”), the California Consumer Privacy Act (“CCPA”), and other data protection laws applicable to our services.
By visiting or interacting with machanengineering.com, you acknowledge that you have read and understood this Privacy Policy.
1. Commitment to Privacy and Data Protection
We are and will remain fully committed to protecting your personal data and upholding your privacy rights. Our data processing practices are centered around lawfulness, fairness, transparency, purpose limitation, and data minimization. We implement comprehensive safeguards to ensure integrity, confidentiality, and availability of personal data we process.
2. Scope of this Policy and Role as Data Controller
This Privacy Policy applies to all visitors, users, and others who access machanengineering.com, whether to browse information or interact with our services. We act as the “Data Controller” for the personal data we collect and process through our Website, meaning we determine the purpose and methods of processing your personal information.
3. Categories of Personal Data We Process
We may process the following categories of personal information:
a) Usage Data:
Includes browser type, operating system, IP address, device identifiers, access times, and navigation patterns on machanengineering.com.
b) Account Data:
Includes your full name, billing and shipping address, email address, phone number, and login credentials (when applicable).
c) Profile Data:
Includes user preferences, purchasing behavior, product interactions, account settings, and other profile-related attributes.
d) Communication Data:
Includes all communication exchanged with us, such as support queries, contact form submissions, email correspondence, and feedback.
e) Technical Data:
Includes device characteristics, system and application software information, diagnostics, and performance metrics.
f) Transaction Data:
Includes payment information, order history, shipping and delivery confirmations, and invoicing details. Payment data is securely handled by our third-party payment processors.
g) Preference Data:
Includes your marketing and communication preferences, consent statuses, and interests voluntarily disclosed to us.
4. Legal Bases for Processing Personal Data
We process your personal data under the following lawful bases, depending on the nature of our interactions:
– Performance of Contract: To fulfill obligations related to services or transactions.
– Consent: For marketing communications, non-essential cookies, or when required by applicable law.
– Legitimate Interests: To improve our services, secure our Website, analyze performance, and offer personalized experiences without overriding your rights.
– Legal Obligation: To comply with legal or regulatory requirements.
5. Your Rights
Subject to applicable laws, you have the following rights regarding your personal data:
– Right of Access: The right to obtain confirmation of whether your personal data is being processed and access to such data.
– Right to Rectification: The right to request that inaccurate or incomplete personal data be corrected or completed.
– Right to Erasure: The right to request deletion of your personal data under certain conditions (“right to be forgotten”).
– Right to Restriction: The right to request restriction of processing where appropriate.
– Right to Data Portability: The right to receive your personal data in a structured, commonly used format or transmit it to another controller.
– Right to Object: The right to object to processing on grounds relating to your particular situation or for direct marketing purposes.
Requests to exercise these rights can be submitted to [email protected]. We will handle all requests in accordance with applicable legal timelines.
6. Data Security Measures
We implement and maintain industry-standard technical and organizational security measures, including:
– Encryption of data in transit and at rest.
– Role-based access controls and authentication protocols.
– Regular data backups and disaster recovery protocols.
– Staff training on data security and privacy principles.
– Monitoring and mitigation measures to prevent unauthorized access or data breaches.
7. International Data Transfers
Where personal data is transferred outside the European Economic Area (EEA) or other applicable jurisdictions, we ensure that such transfers comply with international law. These safeguards include:
– Standard Contractual Clauses approved by the European Commission.
– Transfers to countries recognized as providing an adequate level of data protection.
– Data processing agreements with appropriate technical and legal safeguards.
8. Data Retention
We only retain personal data for as long as necessary to fulfill the purpose for which it was collected or to comply with legal obligations. Specific retention periods include:
– Usage and Technical Data: up to 24 months, for analytics and security purposes.
– Account and Profile Data: maintained while your user account is active and up to 3 years thereafter.
– Transaction and Communication Data: retained for up to 7 years for record-keeping and fraud prevention purposes.
– Marketing Preference Data: maintained until consent is withdrawn or as required by law.
9. Cookie Policy
Machanengineering.com uses cookies and similar technologies for the following purposes:
– Essential Cookies: Necessary for the operation and basic functionality of the Website.
– Functional Cookies: Enhance usability by remembering user choices.
– Analytics Cookies: Collect statistical data on Website usage to improve performance and user experience.
– Performance Cookies: Monitor the effectiveness of marketing campaigns and Website features.
We do not use any cookies that involve selling or licensing your personal data.
10. Cookie Management and Compliance
Under GDPR and CCPA, you have the right to manage your cookie preferences. Upon your first visit, we provide a cookie consent banner that allows you to:
– Accept all cookies
– Reject non-essential cookies
– Customize your cookie settings
You can also control cookies through your browser settings. For more information or to change your preferences at any time, please visit our Cookie Preferences page available on machanengineering.com.
11. Children’s Privacy
Our Website is not directed to or intended for children under the age of 13. We do not knowingly collect personal data from anyone under 13. If we become aware that such data has been collected without verified parental consent, we will promptly delete it.
12. Updates to This Privacy Policy
We may update or modify this Privacy Policy periodically to reflect changes in legal requirements, technology, or business practices. Any material changes will be communicated via prominent notification on machanengineering.com. We encourage users to review this page periodically for the latest information on our privacy practices.
13. Contact Us
For any privacy-related concerns, requests, or questions about this Privacy Policy or our data processing practices, please contact us by email at:
We take all privacy inquiries seriously and will respond to your request in a timely and lawful manner.
—
We are fully committed to complying with applicable privacy laws, including GDPR and CCPA. If you have any privacy concerns, we encourage you to reach out to us at [email protected].