At GMC, we respect your privacy and are committed to protecting your personal data. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit our website or use our services.

1. Information We Collect

1.1 Personal Information

We may collect personal information that you voluntarily provide to us when you:

• Create an account or profile
• Fill out forms or surveys
• Subscribe to newsletters or communications
• Make purchases or transactions
• Contact customer support
• Participate in promotions, contests, or events
• Post content or comments

This information may include your name, email address, postal address, phone number, payment information, demographic information, and any other information you choose to provide.

1.2 Automatically Collected Information

When you access our website or services, we automatically collect certain information, including:

• Device information (type, model, operating system, unique device identifiers)
• IP address and network information
• Browser type and version
• Location information (country, city, time zone)
• Pages visited and time spent
• Referring websites or sources
• Click patterns and interactions

1.3 Cookies and Similar Technologies

We use cookies, web beacons, pixels, and similar tracking technologies to collect information about your browsing activities. These technologies help us analyze website traffic, customize content, remember your preferences, and provide targeted advertising.

Types of cookies we use:

• Essential cookies: Required for basic website functionality
• Preference cookies: Remember your settings and preferences
• Analytics cookies: Help us understand how visitors interact with our website
• Marketing cookies: Track your browsing habits to deliver targeted advertising

2. How We Use Your Information

We use the information we collect for various purposes, including:

2.1 Providing and Improving Our Services

• Creating and managing your account
• Processing transactions and fulfilling orders
• Providing customer support and responding to inquiries
• Developing new features and functionality
• Fixing bugs and optimizing performance
• Conducting research and analysis to improve user experience

2.2 Personalization

• Customizing content and recommendations
• Remembering your preferences and settings
• Providing location-based services (with your consent)
• Tailoring your experience based on your interactions

2.3 Communication

• Sending administrative messages and updates
• Providing information about products, services, and features
• Delivering newsletters and marketing communications (with your consent)
• Sending notifications about account activity
• Responding to your comments and questions

2.4 Marketing and Advertising

• Delivering targeted advertisements based on your interests
• Measuring the effectiveness of our marketing campaigns
• Promoting special offers, events, and new features
• Conducting surveys and market research

2.5 Legal and Security Purposes

• Complying with legal obligations and regulatory requirements
• Enforcing our Terms of Service and other policies
• Protecting against fraudulent, unauthorized, or illegal activity
• Ensuring the security and integrity of our services
• Verifying your identity and preventing misuse

3. Data Storage and Security

3.1 Data Storage

We store your personal information on secure servers located in [regions/countries]. Your data may be transferred to, processed, and stored in countries outside your country of residence, where data protection laws may differ.

3.2 Data Retention

We retain your personal information for as long as necessary to fulfill the purposes outlined in this Privacy Policy, unless a longer retention period is required or permitted by law. The criteria used to determine our retention periods include:

• The duration of our ongoing relationship with you
• Legal obligations to retain data for certain periods
• Statute of limitations under applicable law
• Ongoing or potential legal disputes
• Guidelines from relevant data protection authorities

3.3 Data Security

We implement appropriate technical and organizational measures to protect your personal information against unauthorized access, alteration, disclosure, or destruction. Our security measures include:

• Encryption of data in transit and at rest
• Secure socket layer (SSL) technology
• Access controls and authentication mechanisms
• Regular security assessments and vulnerability testing
• Employee training on data protection and security practices
• Physical security measures for our facilities
• Incident response procedures

While we strive to protect your personal information, no method of transmission over the Internet or electronic storage is 100% secure. We cannot guarantee absolute security of your data.

4. Sharing Your Information

We may share your information with third parties in the following circumstances:

4.1 Service Providers

We share information with third-party service providers who perform services on our behalf, such as:

• Payment processing and billing
• Customer support and communication
• Cloud hosting and data storage
• Analytics and performance monitoring
• Marketing and advertising
• Email and content delivery

These service providers are contractually obligated to use your information only for the purposes of providing services to us and in accordance with this Privacy Policy.

4.2 Business Partners

We may share information with business partners to offer joint promotions, products, or services. These partners are prohibited from using your information for purposes other than those disclosed at the time of collection.

4.3 Legal Requirements

We may disclose your information if required to do so by law or in response to valid requests from public authorities (e.g., court orders, subpoenas, or government requests). We may also disclose information to:

• Enforce our Terms of Service and other agreements
• Protect and defend our rights and property
• Prevent or investigate possible wrongdoing
• Protect the personal safety of users or the public

4.4 Business Transfers

If we are involved in a merger, acquisition, financing, reorganization, bankruptcy, or sale of company assets, your information may be transferred as part of that transaction. We will notify you of any change in ownership or uses of your personal information.

4.5 With Your Consent

We may share your information with third parties when you have given us your consent to do so.

5. Your Privacy Rights

Depending on your location, you may have certain rights regarding your personal information. These may include:

5.1 Access and Information

You have the right to request information about the personal data we hold about you, including the categories of data, its sources, and the purposes for which it is processed.

5.2 Correction

You have the right to request that we correct inaccurate or incomplete information about you.

5.3 Deletion

You have the right to request the deletion of your personal information in certain circumstances, such as when the information is no longer necessary for the purposes for which it was collected.

5.4 Restriction of Processing

You have the right to request that we restrict the processing of your personal information under certain conditions.

5.5 Data Portability

You have the right to receive your personal information in a structured, commonly used, and machine-readable format, and to transmit that data to another controller.

5.6 Objection

You have the right to object to the processing of your personal information in certain circumstances, including for direct marketing purposes.

5.7 Withdraw Consent

Where we rely on your consent to process your personal information, you have the right to withdraw that consent at any time.

5.8 How to Exercise Your Rights

To exercise any of these rights, please contact us using the information provided in the "Contact Us" section below. We will respond to your request within the timeframe required by applicable law.

Please note that we may need to verify your identity before processing your request. In some cases, we may need to keep certain information for recordkeeping purposes, to complete transactions, or to comply with legal obligations.

6. Cookie Management

6.1 Cookie Preferences

You can manage your cookie preferences in the following ways:

• Browser settings: Most web browsers allow you to control cookies through their settings. You can usually find these settings in the "Options" or "Preferences" menu of your browser.
• Cookie preference center: You can adjust your cookie preferences using our Cookie Preference Center, accessible via the "Cookie Settings" button in the footer of our website.
• Opt-out tools: You can opt out of certain third-party cookies through industry tools like the Digital Advertising Alliance (DAA), Network Advertising Initiative (NAI), or European Interactive Digital Advertising Alliance (EDAA).

6.2 Do Not Track

Some browsers have a "Do Not Track" feature that signals to websites that you do not want to have your online activities tracked. Due to the lack of a common understanding of how to interpret these signals, our website does not currently respond to browser "Do Not Track" signals.

7. Children's Privacy

Our services are not directed to children under the age of 16. We do not knowingly collect personal information from children under 16. If we become aware that we have collected personal information from a child under 16 without verification of parental consent, we will take steps to remove that information from our servers.

If you believe we might have any information from or about a child under 16, please contact us using the information provided in the "Contact Us" section.

8. International Data Transfers

We operate globally and may transfer your personal information to countries other than your country of residence. These countries may have data protection laws that differ from those in your country.

When we transfer personal information across borders, we take appropriate safeguards to ensure that your information receives an adequate level of protection, such as:

• Standard Contractual Clauses approved by the European Commission
• Binding Corporate Rules for transfers within our corporate group
• Participation in international frameworks that enable data transfers
• Obtaining your consent for the transfer

9. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, technologies, legal requirements, or other factors. We will notify you of any material changes in the following ways:

• Posting the updated Privacy Policy on our website
• Updating the "Last Updated" date at the top of this Privacy Policy
• Sending an email notification (for significant changes)
• Displaying a prominent notice on our website

We encourage you to review this Privacy Policy periodically to stay informed about our data practices. Your continued use of our services after any changes to this Privacy Policy constitutes your acceptance of the revised policy.

10. Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us:

• By email: info@gmc.bt
• By mail: Team GMC, Gelephu, Bhutan

For users in the European Economic Area, we have appointed a Data Protection Officer who can be contacted at info@gmc.bt.

If you have unresolved concerns, you may also have the right to lodge a complaint with your local data protection authority.