Privacy Policy
At GT-JP.com, we are committed to protecting your personal data and upholding your privacy rights in compliance with international data protection frameworks, including the General Data Protection Regulation (GDPR) and the California Consumer Privacy Act (CCPA). This Privacy Policy outlines how we collect, use, store, and safeguard your information when you visit or interact with our website, as well as your rights and choices regarding your personal data.
1. Introduction
GT-JP.com values your privacy. We process your personal data responsibly and transparently, ensuring your information is handled with the highest levels of protection. Our practices are designed to uphold the standards of the GDPR and applicable U.S. privacy laws, including the CCPA. This Privacy Policy explains in detail what personal data we collect, how and why we process it, and the rights you have relating to your data.
2. Scope of This Policy and Data Controller Role
This Privacy Policy applies to all users who access or interact with GT-JP.com. For the purpose of applicable data protection laws, GT-JP.com is the Data Controller of the personal information collected through this website. You can reach us at [email protected] for any questions concerning this Privacy Policy or your data.
3. Categories of Data Processed
We collect and process various categories of personal data, which may include the following:
a. Usage Data
Data concerning how you interact with the website, such as your IP address, browser type, access times, pages visited, referring pages, unique device identifiers, session durations, and other diagnostic data.
b. Account Data
Information voluntarily provided when creating or updating an account, which may include your full name, postal address, email address, phone number, and login credentials.
c. Profile Data
Data tied to your personal profile such as interests, preferences, purchase history, activity logs, and behavioral data gathered through your interactions on GT-JP.com.
d. Communication Data
Records of correspondence sent through our website, including help desk inquiries, feedback, support requests, and other message history.
e. Technical Data
Device data such as operating system version, browser version, hardware model, screen resolution, system configuration, network settings, and language preferences.
f. Transaction Data
Payment-related data, including billing address, payment method details (processed through third-party processors), order confirmations, shipment tracking, and delivery records.
g. Preference Data
Marketing and communication preferences including subscriptions, opt-ins or opt-outs, saved items, and responses to promotional campaigns.
4. Legal Bases for Processing
We only process your personal data when a lawful basis applies, which includes:
– Performance of a contract: Processing necessary to fulfill our contractual obligations (e.g., managing customer orders and accounts).
– Consent: When you give us permission to process data for specific purposes (e.g., newsletter subscriptions).
– Legitimate interests: Processing necessary to conduct our business efficiently and improve our services, provided such interests are not overridden by your rights and freedoms.
– Legal obligation: Where processing is necessary for us to comply with legal standards, tax obligations, or enforce our terms of use.
5. Your Rights
As a data subject, you have the following rights under applicable law:
– Right of Access: Obtain confirmation of whether we process your data and, if so, access copies of such data.
– Right to Rectification: Request corrections to inaccurate or incomplete personal data.
– Right to Erasure: Request deletion of your personal data where legally applicable.
– Right to Restrict Processing: Ask us to restrict the processing of your data under certain circumstances.
– Right to Data Portability: Receive your data in a structured, commonly used, machine-readable format for transmission to another service provider.
– Right to Object: Object to data processing based on legitimate interests or direct marketing.
– Rights under CCPA: California residents may also request details on categories of data collected and disclosed, request deletion, and opt-out of sale of personal data.
To exercise these rights, please contact us at [email protected]. We will verify your request in accordance with applicable law.
6. Security Measures
We implement a range of technical and organizational safeguards to ensure the protection of your information, including:
– Data encryption during storage and transmission
– Role-based access control and authentication protocols
– Regular system audits and penetration testing
– Staff training in data protection best practices
– Secure data backups to prevent loss and unauthorized alteration
We continually review and enhance our security protocols to protect your data against unauthorized access, misuse, or disclosure.
7. International Transfers
GT-JP.com is operated globally, and your personal data may be transferred to and processed in countries outside of your jurisdiction, including countries that may not offer the same level of data protection as your own. Where data is transferred internationally, we utilize Standard Contractual Clauses (SCCs), Privacy Shield Frameworks (as applicable), and other legally valid transfer mechanisms to safeguard your information.
8. Data Retention
We retain your personal data only for as long as is necessary to fulfill the purposes described in this policy, including the following examples:
– Account Data: retained as long as the account is active and for up to 6 years after deactivation.
– Transaction Data: retained for up to 7 years to comply with tax and regulatory obligations.
– Usage and Technical Data: retained for up to 24 months for analytics purposes.
– Preference Data and Communication History: retained until you withdraw your consent or request deletion.
Upon expiration of the applicable retention period, your information is securely deleted or anonymized.
9. Cookie Policy
GT-JP.com uses cookies and similar technologies for operational efficiency, personalization, and analytics. The types of cookies we set include:
– Essential Cookies: Necessary for core website functionality (e.g., login, navigation).
– Functional Cookies: Used to remember preferences and enhance usability.
– Analytics Cookies: Collect data on usage patterns to improve website performance.
– Performance Cookies: Help us identify loading issues and optimize technical operation.
10. Cookie Management and Compliance with GDPR & CCPA
Upon your first visit to GT-JP.com, a cookie consent banner offers you the ability to accept or manage your preferences in accordance with GDPR and CCPA requirements. You may withdraw your consent or adjust your cookie preferences at any time through the cookie management tool accessible on the website’s footer.
Additionally, browser settings allow you to delete or block cookies globally. Please be aware that disabling essential cookies may impact user experience or core website functionality.
11. Special Protections for Children Under 13
GT-JP.com does not knowingly collect or solicit personal data from individuals under the age of 13. If we become aware that a child under 13 has provided us with personal information, we will delete it promptly. Parents or guardians who believe we may have collected such data are encouraged to contact us at [email protected].
12. Policy Updates and User Notifications
We reserve the right to update or amend this Privacy Policy at any time in response to legal, technical, or business developments. Notification of material changes will be posted prominently on GT-JP.com. Continued use of our website following such changes indicates your acknowledgment of the updated policy.
13. Contact Us
If you have any questions regarding this Privacy Policy, your data, or your rights, you may contact us at:
Email: [email protected]
We are committed to resolving all privacy-related concerns promptly and transparently.
GT-JP.com affirms its commitment to data protection and legal compliance with GDPR, CCPA, and all relevant privacy laws. Please do not hesitate to reach out to [email protected] should you need further clarification or wish to exercise any of your privacy rights.