1. Data Controller Information
NebulaForge Trade Inc (hereinafter referred to as "we" or "the Company")
Contact: [email protected]
Contact of Data Protection Officer (DPO) (if applicable): [email protected]
2. Types of Personal Data We Collect
We may collect and process the following categories of personal data:
Identity information: name, gender, date of birth, etc.
Contact information: address, email, phone number.
Financial information (if applicable): payment card information, bank account number (only for necessary transactions).
Technical data: IP address, cookies, device information, browsing behavior (see Cookie Policy for details).
Others: order records, customer service communication records, questionnaire feedback, etc.
3. Data Sharing with Third Parties
We only share your data in the following circumstances:
Service providers: payment processors (such as Stripe), logistics companies, cloud service providers (such as AWS), all of which have signed GDPR compliance agreements.
Legal requirements: upon lawful request from courts, government agencies or law enforcement agencies.
International transfers: If data is transferred outside the EU (such as the United States), ensure that it is protected by standard contractual clauses (SCCs) or other legal mechanisms.
4. Data retention period
We only retain data for the necessary period, for example:
Order records: retained in accordance with tax law requirements.
User account data: until you request deletion or the account is dormant.
Cookie data: retained according to type (session cookies are deleted when you close your browser).
5. Your data subject rights (Articles 15-22 of the GDPR)
You have the following rights:
Right of access: request a copy of your personal data held by us.
Right to rectification: request that inaccurate or incomplete data be updated.
Right to erasure ("right to be forgotten"): request deletion of data when there is no legitimate reason to retain it.
Right to restriction of processing: Suspend data processing during the dispute period.
Right to data portability: Get your data in a structured format and transfer it to another service provider.
Right to object: Opt out of marketing or data processing based on legitimate interests.
Withdraw consent: Withdraw consent given at any time (without affecting processing before withdrawal).
How to exercise your rights: Submit a request via [specify contact details] and we will respond within 1 month.
6. Cookies and tracking technologies
We use cookies to improve user experience, which are categorized as follows:
Necessary cookies: Ensure website functionality (such as shopping carts), no consent required.
Analytical cookies (such as Google Analytics): Require user consent and can anonymize data.
Marketing cookies: Used for personalized advertising, require explicit consent.
You can control cookies through your browser settings or the [Cookie Management Tool] we provide.
7. Data security measures
We take technical and administrative measures to protect data, including:
Encrypted transmission (SSL/TLS), encryption of sensitive data storage.
Regular security audits and employee GDPR training.
Access to data is limited to necessary personnel.
8. Privacy Policy Updates
We may revise this policy and will notify you of any updates via [email protected]. Major changes require renewed consent.
9. Complaints and Regulatory Authorities
If you believe that we have not complied with the GDPR, you have the right to complain to the data protection authority of your country (e.g.:
France: CNIL (www.cnil.fr)
Germany: BfDI (www.bfdi.bund.de)
EU General: EDPB (edpb.europa.eu)
10. Contact Us
If you have any questions about the Privacy Policy, please contact us via the following methods:
NebulaForge Trade Inc
Email: [email protected]