Privacy Policy for BrandsMega.com & AppointmentLetter.com
Last Updated: 25 SEP 2024
Brands Mega Ltd (referred to as “we,” “our,” or “us”), the parent company of BrandsMega.com and AppointmentLetter.com, is committed to protecting and respecting your privacy. This privacy policy outlines how we collect, use, disclose, and protect your personal information in compliance with international global privacy laws, including the General Data Protection Regulation (GDPR), as well as other relevant privacy regulations applicable in the UK, Bangladesh, and other jurisdictions.
By using our websites and services, you agree to the collection and use of information in accordance with this policy.
1. Data Controller Information
For the purposes of GDPR and other applicable laws, Brands Mega Ltd is the data controller of your personal data.
2. Information We Collect
We collect various types of personal data to provide you with our services. The information collected includes, but is not limited to:
- Personal Identifiable Information: Name, email address, phone number, address, date of birth, and identification numbers.
- Appointment Information: For AppointmentLetter.com, we may collect details related to your job applications, interview schedules, and employer preferences.
- Transaction Data: This includes details of payments, services purchased, and other financial information.
- Technical Data: IP address, browser type, operating system, device information, and other technical data about your use of our websites.
- Usage Data: Information about how you use our websites, including page visits, search queries, and interactions.
3. How We Use Your Data
We use your personal data to provide, operate, and improve our services. This includes:
- Service Delivery: To provide you with the services offered on BrandsMega.com (eCommerce) and AppointmentLetter.com (appointment scheduling), including facilitating product sales, managing your orders, scheduling interviews, and sending confirmations.
- Communication: To contact you regarding your orders, appointments, or any issues with your account or the services we provide.
- Marketing & Promotions: With your consent, we may use your data to send you promotional emails, newsletters, and other marketing communications about our services.
- Compliance: To comply with legal obligations, such as tax, regulatory, and data protection laws.
- Website Functionality: To improve our website’s performance and ensure security.
4. Legal Basis for Processing Personal Data
We process your personal data based on the following legal grounds under the GDPR:
- Consent: Where you have given explicit consent for processing (e.g., receiving marketing communications).
- Contractual Necessity: When processing is required to fulfil our contract with you (e.g., completing orders or scheduling appointments).
- Legal Obligation: To comply with legal obligations, such as record-keeping or responding to government requests.
- Legitimate Interests: Where processing is necessary for our legitimate business interests, such as improving our services or protecting against fraud.
5. How We Share Your Data
We do not sell your personal data. However, we may share your information with trusted third parties for the following reasons:
- Service Providers: We may share your data with payment processors, email service providers, and shipping companies to ensure smooth service delivery.
- Legal Compliance: We may disclose your data if required by law or in response to legal requests, such as subpoenas or court orders.
- Business Transfers: In the event of a merger, acquisition, or sale of assets, your personal data may be transferred to the acquiring entity.
- Analytics: We may share anonymised and aggregated data with analytics providers to monitor and analyse the usage of our website.
6. International Data Transfers
As a global company operating in the UK and Bangladesh, we may transfer your personal data between countries where we operate. This may include countries outside the European Economic Area (EEA). When transferring data outside the EEA, we ensure that appropriate safeguards are in place, including:
- Standard Contractual Clauses (SCCs): When transferring data to third parties outside the EEA, we use SCCs to ensure your data is protected.
- Adequacy Decisions: For certain countries, transfers may be based on adequacy decisions by the European Commission, confirming that the country offers a level of data protection comparable to the GDPR.
7. Data Retention
We retain your personal data only for as long as necessary to fulfil the purposes outlined in this policy. Retention periods are based on legal, operational, and regulatory requirements. For example:
- Account Information: Retained as long as your account is active.
- Transaction Data: Retained in compliance with tax and accounting obligations.
- Appointment Data: Retained for the period necessary to manage your appointments, and in accordance with legal retention periods.
8. Your Rights Under GDPR
Under the GDPR and other applicable laws, you have several rights regarding your personal data:
- Right to Access: You can request a copy of the personal data we hold about you.
- Right to Rectification: You can request that we correct or update inaccurate or incomplete personal data.
- Right to Erasure: In certain circumstances, you can request that we delete your personal data.
- Right to Restrict Processing: You can request that we limit the processing of your personal data under certain conditions.
- Right to Data Portability: You can request a copy of your data in a structured, machine-readable format.
- Right to Object: You can object to the processing of your personal data for direct marketing or legitimate interest purposes.
To exercise any of these rights, please contact us at [Insert Contact Email].
9. Data Security
We take the security of your data seriously and implement appropriate measures to protect it from unauthorised access, loss, misuse, or alteration. These measures include encryption, firewalls, and regular security audits. However, no system is 100% secure, and we cannot guarantee absolute security.
10. Cookies
We use cookies and similar tracking technologies to enhance your experience on our websites. Cookies allow us to:
- Recognise your preferences.
- Improve website functionality.
- Track website usage.
You can manage your cookie preferences through your browser settings. For more information, please refer to our Cookie Policy.
11. Third-Party Links
Our websites may contain links to third-party websites. Please note that we are not responsible for the privacy practices of those websites. We encourage you to review their privacy policies before providing any personal information.
12. Changes to This Privacy Policy
We may update this privacy policy from time to time to reflect changes in our practices, legal requirements, or other operational needs. Any changes will be posted on this page, and we will notify you by email or via a notice on our website if the changes are significant.
13. Contact Us
If you have any questions or concerns about this privacy policy or your personal data, please contact us:
This privacy policy is designed to comply with international privacy laws and the General Data Protection Regulation (GDPR), ensuring the protection and privacy of your personal information.
copyright: Brandsmega.com
