Privacy Policy
Last Updated: 2025-01-01
Data Controller
MandalaTashi Inc, a company registered in Wyoming, USA (30 N Gould St Ste R, Sheridan, WY 82801), is the data controller responsible for your personal information. For privacy-related inquiries, contact us at [email protected].
Information We Collect
We collect information you provide directly to us, such as when you make a purchase, subscribe to our newsletter, or contact us. This includes: name, email address, shipping/billing address, phone number, and payment information (processed securely by our payment providers).
Legal Basis for Processing
We process your personal data based on the following legal grounds:
- Contract Performance: To fulfill your orders and provide customer service
- Legitimate Interests: To improve our services, prevent fraud, and ensure security
- Consent: For marketing communications (you may withdraw consent anytime)
- Legal Obligation: To comply with applicable laws and regulations
How We Use Your Information
We use your information to: process and fulfill orders, send shipping updates and order confirmations, respond to customer service requests, send marketing communications (with your consent), improve our website and services, and prevent fraudulent transactions.
Information Sharing
We do not sell your personal information. We share data only with:
- Shipping carriers (to deliver your orders)
- Payment processors (Stripe, PayPal - to process transactions securely)
- Analytics providers (Google Analytics - to improve our website)
- Legal authorities (when required by law)
International Data Transfers
Your data is stored on servers located in the United States. If you are located outside the US, your information will be transferred to and processed in the US. For EU/EEA residents, we rely on Standard Contractual Clauses approved by the European Commission to ensure adequate data protection.
Data Retention
We retain your personal data for as long as necessary to fulfill the purposes described in this policy: Order data is kept for 7 years (for tax and legal compliance), Marketing preferences until you unsubscribe, Account data until you request deletion.
Your Privacy Rights
Depending on your location, you have certain rights regarding your personal data:
EU/EEA Residents (GDPR)
You have the right to: access your data, correct inaccuracies, request deletion ("right to be forgotten"), restrict processing, data portability, object to processing, and withdraw consent. To exercise these rights, email [email protected]. We will respond within 30 days.
California Residents (CCPA)
You have the right to: know what personal information we collect, request deletion of your data, opt-out of the sale of personal information (we do not sell your data), and non-discrimination for exercising your rights.
Cookies and Tracking
We use cookies and similar technologies to enhance your experience. For detailed information, please see our Cookie Policy.
Data Security
We implement industry-standard security measures including SSL encryption, secure payment processing (PCI-DSS compliant), and access controls. However, no internet transmission is 100% secure, and we cannot guarantee absolute security.
Children's Privacy
Our website is not intended for individuals under 16 years of age. We do not knowingly collect personal information from children. If you believe we have collected data from a child, please contact us immediately.
Changes to This Policy
We may update this Privacy Policy from time to time. We will notify you of material changes by posting the updated policy on our website with a new "Last Updated" date.
Contact Us
For privacy inquiries or to exercise your rights, contact us at: MandalaTashi Inc, 30 N Gould St Ste R, Sheridan, WY 82801, Email: [email protected]