Privacy Policy

At Cubao X (https://cubao-x.com), we are steadfast in our commitment to safeguarding your privacy and protecting your personal data. This Privacy Policy outlines how we collect, use, disclose, and protect the information you provide while using our website and services. We are fully aligned with data protection standards under the General Data Protection Regulation (GDPR) and the California Consumer Privacy Act (CCPA), and we employ diligent practices to ensure your data is handled with transparency, respect, and accountability.

1. Scope of This Privacy Policy & Data Controller Information

This Privacy Policy applies to all visitors, users, and others who interact with the website cubao-x.com, including any services and communications offered through the site. Cubao X acts as the data controller for personal data collected through this website, with primary responsibility for the processing and protection of such information.

Should you have any questions regarding your data, you can contact us at: [email protected].

2. Categories of Personal Data We Process

We process the following categories of personal data, which may be collected either directly from you or automatically through your use of the website:

a. Usage Data: Information such as your IP address, browser type, operating system, time zone, referring URLs, pages visited, session durations, and clickstream data. This is gathered through automated technologies including cookies and analytics software.

b. Account Data: Personal data you provide when creating an account or placing orders, including your full name, billing/shipping address, email address, and phone number.

c. Profile Data: Includes your preferences, purchase history, browsing behavior, interests, and any demographic information you voluntarily submit.

d. Communication Data: Records of your interactions with us, including inquiries, customer support requests, email correspondences, and chat messages.

e. Technical Data: Device IDs, operating system versions, screen resolution, language settings, API usage, and system diagnostics.

f. Transaction Data: Payment details (processed via secure third-party processors), billing records, order summaries, delivery instructions, and fulfillment records.

g. Preference Data: Marketing consents, communication preferences, opt-in/opt-out history, and product category interests.

3. Legal Bases for Processing Personal Data

Our collection and use of personal data are justified under the following legal bases:

– Consent: We obtain your consent where required by law, such as for sending marketing communications or placing non-essential cookies.
– Performance of Contract: We process your data when it is necessary to fulfill a contract, such as delivering products or managing your account.
– Legitimate Interests: We use your data to improve services, ensure security, and analyze usage in a way that does not override your rights.
– Legal Obligations: We retain and may disclose personal data to comply with applicable legal and regulatory requirements.

4. Your Rights Under GDPR and CCPA

In accordance with GDPR and CCPA, you are entitled to exercise the following rights:

– Right of Access: Request details of personal data about you that we hold.
– Right to Rectification: Correct inaccurate or incomplete personal information.
– Right to Erasure: Request deletion of your personal data, subject to legal or contractual obligations.
– Right to Restrict Processing: Request a temporary halt to data processing in specific scenarios.
– Right to Data Portability: Receive your personal data in a structured, commonly used digital format.
– Right to Object: Object to certain types of processing (such as direct marketing).
– Right Not to Be Subject to Automated Decision-Making: You have the right not to be subject to any decision solely based on automated processing that significantly affects you.

To exercise any of these rights, you may contact us at [email protected].

California residents additionally have the right to:

– Know what personal data is collected and shared,
– Opt out of the sale of personal data (Cubao X does not sell personal data),
– Equal service and price when exercising privacy rights.

5. Security Measures

We implement technical and organizational security measures to ensure a high level of data protection, including:

– End-to-end encryption of transmitted and stored data
– Access controls and authentication protocols
– Regular data backups and secure storage environments
– Staff training on privacy and handling of personal data
– Routine security audits and vulnerability testing

6. International Data Transfers

Your personal data may be transferred to and maintained on servers located outside your jurisdiction. Where such transfers occur, we ensure adequate protection through the use of Standard Contractual Clauses approved by the European Commission and reasonable technical safeguards consistent with GDPR and other applicable legal standards.

7. Data Retention

We retain personal data only as long as necessary to fulfill the purposes for which it was collected or to comply with legal, regulatory, or reporting obligations:

– Account Data: Retained for the lifespan of the account and up to 6 years thereafter for audit or tax purposes
– Communication Data: Retained for 3 years from last contact
– Transaction and Payment Data: Retained for 7 years for financial compliance
– Preference and Profile Data: Retained until consent is withdrawn or account is closed
– Technical and Usage Data: Retained for up to 24 months for analytics and diagnostics

8. Cookie Policy

We use cookies and similar technologies on cubao-x.com to improve user experience, analyze traffic, and personalize services. These include:

– Essential Cookies: Necessary for core website functionality (e.g., logins, cart access)
– Functional Cookies: Enable website personalization features and remember preferences
– Analytics Cookies: Help us understand website usage patterns via tools like Google Analytics
– Performance Cookies: Support testing and site optimization to enhance speed and functionality

9. Cookie Management & Compliance

Upon your first visit to cubao-x.com, a cookie consent banner allows you to accept or customize cookie preferences in accordance with GDPR and CCPA requirements. You may revisit your cookie settings at any time and manage permissions through your browser or our cookie preferences tool. While essential cookies cannot be disabled, you may opt out of analytics or performance cookies.

10. Children’s Privacy

Our services are not directed to children under the age of 13. We do not knowingly collect personal data from children. If we become aware that a child under 13 has provided us with personal information without verified parental consent, we will take immediate steps to delete such data.

11. Policy Updates

We may update this Privacy Policy periodically to reflect changes in our operations, technologies, legal obligations, or data governance practices. Significant changes will be communicated prominently on cubao-x.com and, where appropriate, via email. Continued usage of the site implies consent to the revised Privacy Policy.

12. Contact Information

If you have questions, concerns, or wish to exercise your privacy rights, please contact:

Cubao X
Email: [email protected]

13. Final Notice

Cubao X is dedicated to maintaining full compliance with international data protection laws, including GDPR, CCPA, and associated privacy frameworks. For any inquiries or concerns regarding your personal data and your privacy rights, we encourage you to reach out using the contact information above.