Privacy policy
1. Who We Are
Mengray.com (“we,” “us,” “our”) operates [www.mengray.com]. We are the data controller for personal data collected through our website.
Contact for privacy matters: admin@mengray.com
2. What Information We Collect
We collect the following categories of personal data:
| Category | Examples | When Collected |
|---|---|---|
| Identity & Contact | Name, email address, phone number, shipping/billing address | Order, registration, newsletter |
| Transaction Data | Order details, payment method (not full card details) | Order processing |
| Technical Data | IP address, browser type, device information, cookies | Website usage |
| Usage Data | Pages viewed, time on site, interactions | Website usage |
| Marketing Data | Preferences for receiving marketing | Newsletter signup |
We do NOT store full credit/debit card details. Payment information is processed by our payment gateway providers and is not retained on our servers.
3. How We Use Your Information
We use your personal data for the following purposes:
| Purpose | Lawful Basis (GDPR) |
|---|---|
| Processing and delivering orders | Performance of a contract |
| Communicating about orders | Performance of a contract |
| Improving our website and services | Legitimate interests |
| Customer support | Legitimate interests / Contract |
| Sending marketing emails (with consent) | Consent |
| Fraud prevention and security | Legitimate interests / Legal obligation |
| Complying with legal obligations | Legal obligation |
We do not sell your personal data.
4. Cookies and Tracking
We use cookies and similar technologies for:
-
Essential cookies: Shopping cart, login sessions
-
Analytics cookies: Understanding how visitors use our site
-
Advertising cookies: Delivering relevant ads (see Section 6)
You can manage cookie preferences through your browser settings. For EU/UK visitors, we provide a cookie consent banner where you can accept or reject non-essential cookies.
5. Data Sharing
We share personal data only with:
| Recipient Type | Purpose |
|---|---|
| Couriers (Skynet, DHL, FedEx, etc.) | Delivering your order |
| Payment processors | Processing transactions |
| IT service providers | Website hosting, email services |
| Analytics providers | Understanding site usage |
| Advertising partners (Rakuten, etc.) | Delivering relevant ads (see Section 6) |
| Legal authorities | When required by law |
All third parties are required to respect the security of your data and process it only for specified purposes.
6. Advertising and Third-Party Data Collection
We work with third-party advertising partners, including Rakuten Advertising, who may collect:
-
IP addresses
-
Digital identifiers (cookies, device IDs)
-
Information about your browsing and app usage
-
How you interact with our ads
These partners use this data for personalization of offers, analytics, and commercial purposes.
Your rights regarding advertising data:
-
EU/UK users: You have the right to object to processing for direct marketing.
-
California users: You may have the right to opt out of the “sale” or “sharing” of personal information under CCPA/CPRA.
For more information:
-
Rakuten Privacy Policy: [link]
-
Your Rights: [link]
7. Data Retention
We retain personal data only as long as necessary:
| Data Type | Retention Period |
|---|---|
| Order and transaction data | 7 years (tax/legal requirements) |
| Customer account data | Until account deletion + 30 days |
| Marketing preferences | Until consent withdrawn |
| Technical/usage data | 26 months |
| Cookie data | As specified in cookie settings |
8. Your Rights
Depending on your location, you may have the following rights:
| Right | Description |
|---|---|
| Access | Request a copy of your personal data |
| Rectification | Correct inaccurate data |
| Erasure | Request deletion (“right to be forgotten”) |
| Restriction | Limit how we process your data |
| Portability | Receive your data in a portable format |
| Object | Object to processing based on legitimate interests |
| Withdraw Consent | Withdraw consent at any time (for consent-based processing) |
| Complain | Lodge a complaint with a supervisory authority |
To exercise these rights: Email admin@mengray.com. We will respond within 30 days.
EU/UK users: You have the right to lodge a complaint with your local data protection authority.
9. Data Security
We implement appropriate technical and organizational measures to protect your personal data, including:
-
SSL encryption for data transmission
-
Encrypted storage of sensitive information
-
Access controls limiting data access to authorized personnel
-
Regular security reviews
While no method of transmission over the internet is 100% secure, we strive to protect your data using industry-standard practices.
10. International Transfers
Your data may be transferred to and processed in countries outside your own. Where we transfer data from the EU/UK, we ensure appropriate safeguards are in place (e.g., standard contractual clauses).
11. Children’s Privacy
Our services are not directed to children under 13 (or 16 in some jurisdictions). We do not knowingly collect personal data from children. If you believe a child has provided us with personal data, please contact us for deletion.
12. Changes to This Policy
We may update this policy from time to time. Material changes will be notified via email or a prominent notice on our website. The “Last Updated” date reflects the most recent revision.
13. Contact Us
For questions about this policy or your personal data:
Email: admin@mengray.com