Privacy Policy

1. Overview

Mondioo ("mondioo.com," hereinafter referred to as "we," "us," or "our") respects and protects your privacy. This Privacy Policy explains how we collect, use, store, share, and protect your personal information when you visit our website, register an account, place an order, or interact with us.

By using this website, you agree to the terms of this Privacy Policy. If you do not agree with any part of this policy, please do not use our website or services.

2. Information We Collect

The personal information we collect is limited to what is necessary to provide our services, including the following categories:

Information You Provide Voluntarily
When you register an account, place an order, subscribe to our mailing list, or contact customer service, you may provide us with:
Name, email address, phone number, shipping address, billing address, payment information (processed by our payment service providers; we do not store full card details), and any additional information you choose to provide (such as product preferences and skin type).

Information Collected Automatically
When you visit our website, we may automatically collect the following information through cookies, log files, and other tracking technologies:
Device information (device type, operating system, browser version, IP address), website usage behavior (pages viewed, time spent, click records, search terms), and referral source (the website or advertisement you came from).

Information from Third Parties
We may receive certain information from third-party service providers (such as payment gateways, shipping carriers, and social media platforms) to fulfill orders or for marketing analysis.

3. How We Use Your Information

We use the collected information for the following purposes:

Processing your orders, including order confirmation, shipment arrangement, refund processing, and after-sales service;

Managing your account, including login verification, order inquiries, and account information maintenance;

Sending order-related notifications, such as order confirmation emails, shipping notifications, and delivery tracking information (these are transactional and cannot be opted out of);

Sending marketing communications based on your preferences, including new arrivals, promotions, and membership benefits (you may unsubscribe at any time);

Improving website experience by analyzing user behavior to enhance website functionality, product recommendations, and page design;

Preventing fraud and ensuring security by detecting and preventing fraudulent transactions, unauthorized access, and other unlawful activities;

Complying with legal obligations when required by applicable laws or lawful requests from government authorities.

4. Cookies and Tracking Technologies

We use cookies and similar tracking technologies to enhance your browsing experience and website functionality. Cookies are small text files stored on your device that help us:
Remember your login status and shopping cart contents for faster checkout on future visits;
Analyze website traffic and user behavior to optimize performance and content;
Provide personalized content recommendations and advertisements.

You can manage or delete cookies through your browser settings. Please note that disabling certain cookies may affect some website features (such as cart memory and auto-login).

5. Information Sharing and Disclosure

We do not sell or rent your personal information to third parties. In the following necessary circumstances, we may share your information with trusted service providers:

Service Providers
We work with the following types of third-party service providers to fulfill orders and operate our website:
Shipping carriers (for order delivery)
Payment processors (for secure payment processing, such as Shopify Payments and PayPal)
Email service providers (for sending order notifications and marketing communications)
Analytics providers (for website traffic analysis and optimization, such as Google Analytics)
Customer support tools (for managing inquiries and tickets)

All partners are bound by strict confidentiality agreements and may only use your information within the scope of our authorization, for no other purposes.

Legal Requirements
We may disclose your information when we have a good faith belief that disclosure is necessary to comply with legal processes, court orders, or government requests, or to protect the rights, property, or safety of us, our users, or the public.

Business Transfers
In the event of a merger, acquisition, or asset sale, your information may be transferred as part of the business assets. We will notify you via email or website notice before such a change takes place.

6. Data Storage and Security

Data Storage Location
Your information will be stored on servers owned by us and our service providers, which may be located in jurisdictions outside your country of residence. Data protection laws vary by jurisdiction, but we take appropriate measures to ensure your information is protected in accordance with this Privacy Policy.

Data Retention Period
We will retain your information for as long as necessary to fulfill the purposes outlined in this policy, specifically:
Account information is deleted within 30 days after you close your account;
Order information is retained as required by law, typically for 7 years (for tax and accounting purposes);
Marketing preference information is updated immediately upon unsubscribe or deletion request;
Cookie data typically expires within 6 to 24 months, depending on the cookie type.

Security Measures
We employ industry-standard security measures to protect your information, including:
SSL (Secure Sockets Layer) encryption to secure data during transmission;
Access control mechanisms to restrict internal access to data;
Regular security reviews and vulnerability scans;
Data processing agreements with third-party service providers to ensure compliance with security standards.

Despite these measures, please note that no method of transmission over the Internet or electronic storage is 100% secure, and we cannot guarantee absolute security of your information.

7. Your Rights

Under applicable privacy laws (including the EU GDPR and California CCPA), you have the following rights regarding your personal information:

Right to Access
You have the right to request a copy of the personal information we hold about you.

Right to Rectification
You have the right to request correction of inaccurate or incomplete information.

Right to Erasure ("Right to be Forgotten")
In certain circumstances, you have the right to request deletion of your personal information (e.g., when it is no longer needed for the original purpose, or when you withdraw consent).

Right to Restrict Processing
In certain circumstances, you have the right to request restriction of processing of your information.

Right to Data Portability
You have the right to receive the information you provided to us in a structured, commonly used, and machine-readable format, and to transmit it to another controller.

Right to Object
You have the right to object at any time to our processing of your personal information based on legitimate interests, including objecting to processing for direct marketing purposes.

Right to Withdraw Consent
If our processing is based on your consent, you have the right to withdraw that consent at any time.

How to Exercise Your Rights
You may submit a request through the contact information at the end of this policy. We will respond to your request within one month. In some cases, we may need to verify your identity to ensure information security.

8. Children's Privacy

This website is not intended for children under the age of 16. We do not knowingly collect personal information from children under 16. If you become aware that we have inadvertently collected information from a child, please contact us, and we will delete it immediately.

9. Third-Party Links

This website may contain links to third-party websites, services, or applications. These third-party sites have their own independent privacy policies, and we assume no responsibility for their content or privacy practices. We recommend reading the privacy policy of any third-party link before accessing it.

10. Changes to This Privacy Policy

We reserve the right to update this Privacy Policy at any time. For material changes (such as significant adjustments to data collection scope or usage), we will notify you in advance via email or a prominent notice on our homepage. We will also update the "Last Updated" date at the top of this page. Continued use of this website following any changes constitutes your acceptance of the updated terms.