We collect your personal data typically when you purchase our products or services, use or register into our services, enter into a sales promotion or a campaign, or otherwise interact with us. Below are examples of the categories of the data we collect on you.
Information you provide us.
When you register to our services, make a purchase, enter a sales promotion or otherwise interact with us, we may ask you to provide us with certain information such as your name, email address, street address, as well as user names, passwords and other such credentials that are used to authenticate users and to validate their actions or that may be needed to provide you with the products and services you have requested or to communicate with you, as well as information uploaded by you such as location, route information, pictures etc. We may collect training data, demographic information, for example, your age, gender, postal code and language preferences.
We may also collect other information you provide, such as your consents, preferences and feedback, information relating to your devices and other such information you provide us with. Please note that certain non-identifiable information collected from you may become personally identifiable when you provide us with your personal data. Some of our services may allow you to submit information about other people, for example, if you make an order for a product that you wish us to send directly to another recipient.
Your transactions with us.
We collect or request information relating to your purchase or use of our products or services as well as your other interactions with us. Such information may include, for example, details of the queries or requests you have made, the products and services provided (including delivery details), purchasing details (including payments made, credit card details, billing address, credit checks and other such financial information), details of agreements between you and Gravaa, records of contacts and communications, information and details relating to the content you have provided us with and other such transactional information. We may, in accordance with applicable law, record your communication with our customer care or with other similar contact points.
Certain services may involve the use of your location data. Use of your location data is, however, subject to your prior consent for each service.
THE PURPOSES OF PROCESSING
Gravaa processes your personal data for the purposes described in this policy and/or any additional service specific privacy information. Please note that one or more purposes may apply simultaneously.
Provision of products and services.
We may process and use your personal data to provide you the product or service you have requested, fulfill your other requests such as customer service, process your order or as otherwise may be necessary to perform or enforce the contract between you and Gravaa. We may also process and use your personal data to ensure the functionality and security of our products and services, to identify you, and to prevent and detect fraud and other misuses.
Development of products and services.
We may process and use your personal data to develop our products and/or services. However, for the most part we only use aggregate and statistical information in the development of our products and services, and not data directly identifiable to you. We may also process and use your personal data to personalize our offerings and to provide you with service more relevant to you, for example, to make recommendations and to display customized content and advertising. We may combine personal data collected in connection with your use of a particular Gravaa product and/or service with other personal data we may hold about you, except where such personal data was collected for a different purpose.
Communicating with you and marketing.
We may process and use your personal data to communicate with you, for example, to provide information relating to our products and/or services you are using or to contact you for customer satisfaction queries. We may process and use your personal data for marketing. Marketing purposes may include using your personal data for personalized marketing or research purposes in accordance with applicable laws, for example, to conduct market research and to communicate our products, services or promotions to you via our own or third parties’ electronic or other services.
Gravaa does not disclose your personal data to such companies for their marketing purposes without your prior consent.
We may process and use your personal data for profiling/personalization for such purposes as targeted direct marketing and improvement of our products or services. We may also create aggregate and statistical information based on your personal data. Profiling/personalization includes automated processing of your personal data for evaluating, analyzing or predicting your personal preferences or interests in order to, for example, send you marketing messages concerning products or services best suitable for you.
DATA CONCERNING MINORS
Gravaa does not seek to collect any information from or engage in any transactions with persons under the legal age in their respective country. Our databases may nevertheless contain personal data of children due to the fact that it is not always possible to determine precisely the age of the user. We reserve the right to block the service from any person who is or whom we reasonably suspect of being a minor.
Gravaa’ policy is to request that minors do not make purchases or engage in other legal acts on our products and services without the consent of a parent or legal guardian, unless otherwise permitted by applicable law. If you are a minor but have your legal guardian’s consent, you must be able to prove that such consent exists upon request.
DATA QUALITY AND RETENTION
We take reasonable steps to keep the personal data we possess accurate and up-to-date and to delete out of date or otherwise incorrect or unnecessary personal data.
We store your personal data only for a period necessary for the purpose in question or as long as required by applicable laws.
Gravaa implements appropriate technical and organizational security measures to prevent and minimize risks associated with providing and processing personal data.
Such security measures include, where appropriate, the use of firewalls, secure server facilities, encryption, implementing proper access rights management systems and processes, careful selection of processors, sufficient training of Gravaa’ personnel involved in the processing, and other necessary measures to provide appropriate protection for your personal data against unauthorized use or disclosure. Where appropriate, we may also take back-up copies and use other such means to prevent accidental damage or destruction of your personal data. If a particular part of a Gravaa website supports on-line transactions, we will use an industry standard security measure, such as the one available through “Secure Sockets Layer” (“SSL”), to protect the confidentiality and security of online transactions.