Privacy Policy

Last Updated: June 15, 2023

1. Information We Collect

When you visit cexabue.com, we may collect the following types of information:

• Personal Information: Name, email address, phone number, billing address, shipping address, payment information, and other details you provide during the purchase process.
• Transaction Information: Details about the acoustic guitars and related products you purchase, including model, price, date of purchase, and payment method.
• Device Information: IP address, browser type, operating system, device type, and other technical information about your device.
• Usage Data: Information about how you interact with our website, including pages visited, time spent on each page, links clicked, and search queries.
• Cookies and Similar Technologies: We use cookies, web beacons, and similar technologies to enhance your browsing experience and collect information about how you use our website.

2. How We Use Your Information

We use the information we collect for the following purposes:

• Processing and fulfilling your orders for acoustic guitars and related products
• Managing your account and providing customer support
• Communicating with you about your orders, products, and promotions
• Improving our website, products, and services
• Personalizing your shopping experience
• Analyzing website traffic and user behavior
• Detecting and preventing fraud and unauthorized access
• Complying with legal obligations and enforcing our terms and conditions

3. Legal Basis for Processing (GDPR Compliance)

Under the General Data Protection Regulation (GDPR), we process your personal information based on the following legal grounds:

• Contractual Necessity: Processing necessary for the performance of our contract with you when you purchase guitars or related products.
• Legitimate Interests: Processing necessary for our legitimate business interests, such as fraud prevention, website security, and business analytics.
• Legal Obligation: Processing necessary to comply with our legal obligations, such as tax laws and consumer protection regulations.
• Consent: Processing based on your explicit consent, such as for marketing communications.

4. Data Sharing and Disclosure

We may share your personal information with the following categories of recipients:

• Service Providers: Third-party companies that help us operate our website, process payments, fulfill orders, and provide customer support.
• Shipping Partners: Courier companies and postal services that deliver your purchased acoustic guitars and products.
• Payment Processors: Financial institutions and payment service providers that process your transactions.
• Legal Authorities: Government agencies, law enforcement, and other parties when required by law or to protect our rights.

We do not sell, rent, or trade your personal information to third parties for their marketing purposes without your explicit consent.

5. Data Security

We implement appropriate technical and organizational measures to protect your personal information against unauthorized access, alteration, disclosure, or destruction. These measures include:

• Encryption of sensitive data during transmission using SSL technology
• Regular security assessments and vulnerability testing
• Access controls and authentication procedures for our staff
• Data minimization and retention policies
• Regular training of our team on privacy and security practices

While we strive to protect your personal information, no method of transmission over the Internet or electronic storage is 100% secure. We cannot guarantee absolute security of your data.

6. Your Privacy Rights

Depending on your location, you may have the following rights regarding your personal information:

• Right to Access: You can request a copy of the personal information we hold about you.
• Right to Rectification: You can request correction of inaccurate or incomplete information.
• Right to Erasure: You can request deletion of your personal information in certain circumstances.
• Right to Restriction: You can request that we limit how we use your personal information.
• Right to Data Portability: You can request a copy of your data in a structured, machine-readable format.
• Right to Object: You can object to our processing of your personal information in certain circumstances.
• Right to Withdraw Consent: You can withdraw your consent at any time where processing is based on consent.

To exercise these rights, please contact us using the information provided at the end of this Privacy Policy.

7. Cookies and Similar Technologies

Our website uses cookies and similar technologies to enhance your browsing experience and collect information about how you use our website. You can manage your cookie preferences through your browser settings.

We use the following types of cookies:

• Essential Cookies: Necessary for the website to function properly.
• Analytical Cookies: Help us understand how visitors interact with our website.
• Functional Cookies: Enable enhanced functionality and personalization.
• Targeting Cookies: Used to deliver relevant advertisements and track their effectiveness.

8. Data Retention

We retain your personal information for as long as necessary to fulfill the purposes outlined in this Privacy Policy, unless a longer retention period is required or permitted by law. The criteria used to determine our retention periods include:

• The duration of our ongoing relationship with you
• Legal obligations to retain data for certain periods
• Statutes of limitations under applicable law
• Ongoing or potential disputes or legal claims
• Guidelines from relevant data protection authorities

9. Children's Privacy

Our website is not intended for children under the age of 16. We do not knowingly collect personal information from children under 16. If you are a parent or guardian and believe that your child has provided us with personal information, please contact us, and we will take steps to delete such information.

10. International Data Transfers

We may transfer your personal information to countries outside your country of residence, including countries that may not provide the same level of data protection as your home country. When we transfer your personal information internationally, we implement appropriate safeguards in accordance with applicable data protection laws.

11. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices or legal requirements. We will notify you of any material changes by posting the updated Privacy Policy on our website with a new effective date. We encourage you to review this Privacy Policy periodically.

12. Contact Information

If you have any questions, concerns, or requests regarding this Privacy Policy or our privacy practices, please contact our Data Protection Officer through our website contact form.