Privacy Policy - Noble Khan

At NobleKhan.com, we are committed to protecting your privacy and safeguarding your personal data. We understand the importance of transparency, data security, and trust, and we are dedicated to handling your personal information responsibly and in compliance with applicable data protection regulations, including the General Data Protection Regulation (“GDPR”) and the California Consumer Privacy Act (“CCPA”).

This Privacy Policy outlines how we collect, process, share, and protect your personal data. We encourage you to read this policy in full to understand your rights and our responsibilities.

1. Commitment to Privacy and Data Protection

NobleKhan.com values your trust and is committed to protecting your privacy. We process personal data in a fair, lawful, and transparent manner, collecting only what is necessary and using it solely for legitimate business purposes. Our data practices are designed with a privacy-first approach, aligning with both international and domestic privacy standards.

2. Scope of Policy and Data Controller Role

This Privacy Policy applies to all users, visitors, and customers accessing or interacting with NobleKhan.com. Noble Khan (referred to here as “we”, “us”, or “our”) is the data controller responsible for determining the purposes and means of processing your personal data.

If you have any questions or concerns regarding this Privacy Policy or wish to exercise your rights, you may contact us at: [email protected].

3. Categories of Data We Process

We collect and process various types of personal data to operate our website and deliver our services:

• Usage Data – Includes information about how you interact with our website, such as your IP address, browser type, referring/exit pages, time zone, pages viewed, clicks, and session duration.

• Account Data – Personal information provided during account creation, registration, or purchases, including your name, email address, physical address, and phone number.

• Profile Data – Includes preferences, interests, purchase history, account settings, and behavioral insights based on your engagement with the site.

• Communication Data – Includes correspondence history when you contact support, submit inquiries, participate in surveys, or engage through any other communication channels.

• Technical Data – Includes device identifiers, operating systems, browser configurations, screen resolution, language settings, and other system-related information.

• Transaction Data – Includes billing details, payment method, transaction history, delivery addresses, and order fulfillment information. We do not store full credit card details; payment providers handle sensitive payment data securely.

• Preference Data – Includes your marketing and communication preferences, opt-in/opt-out consents, and product categories or content you have shown interest in.

4. Legal Bases for Processing Your Data

We process your personal data under the following legal bases, depending on the nature of our interaction:

• Consent – When you affirmatively opt in or provide specific permission, such as signing up for newsletters or accepting cookies. You can withdraw consent at any time.

• Contractual Necessity – To fulfill contracts with you, such as processing orders or account management.

• Legitimate Interest – To improve our website, maintain user security, and conduct analytics, provided that such interests do not override your rights.

• Legal Obligation – To comply with applicable legal or regulatory requirements, such as tax laws or data disclosure obligations.

5. Your Rights Under GDPR and CCPA

Depending on your jurisdiction and subject to verification, you may exercise the following rights regarding your personal data:

• Right of Access – Request a copy of the personal data we hold about you.

• Right to Rectification – Request corrections if your data is incomplete or inaccurate.

• Right to Erasure – Request deletion of your data where legally permissible (the “right to be forgotten”).

• Right to Restrict Processing – Request limited use of your data under certain conditions.

• Right to Data Portability – Request transmission of your personal data in a structured, machine-readable format.

• Right to Object – Object to processing based on legitimate interests or direct marketing.

• Right to Non-Discrimination (CCPA) – We will not discriminate against any user for exercising their privacy rights.

To exercise your rights, please contact us at [email protected]. We may require additional identification for security purposes.

6. Security Measures

We take data security seriously. To protect your information, we implement industry-standard safeguards, including:

• Encryption of data in transit and at rest.
• Role-based access controls to limit data exposure.
• Regular security audits and compliance assessments.
• Frequent system backups and redundancy measures.
• Employee training on privacy and data protection protocols.

Despite our safeguards, no system can guarantee perfect security. We advise users to maintain strong passwords and be vigilant with their personal devices.

7. International Transfers

If we transfer your data outside the European Economic Area (EEA) or other jurisdictions with data transfer standards, we will ensure adequate protections are in place. This may include Standard Contractual Clauses approved by the European Commission or other permitted safeguards recognized by relevant data authorities.

8. Data Retention

We retain personal data only for as long as necessary to fulfill the purposes for which it was collected, including to satisfy legal, accounting, and reporting obligations. Retention timeframes vary by data type:

• Usage and Technical Data – retained for up to 12 months.
• Transaction and Account Data – retained for up to 7 years in accordance with tax regulations.
• Communication Data – retained for up to 36 months from last interaction.
• Marketing Preference Data – maintained until the user withdraws consent or unsubscribes.

When data is no longer needed, it is securely deleted or anonymized.

9. Cookie Policy

NobleKhan.com uses cookies and similar technologies to enhance your browsing experience and analyze website traffic. These may include:

• Essential Cookies – Required for site functionality and security.
• Functional Cookies – Support enhanced features or user preferences.
• Analytics Cookies – Help us understand site usage and improve performance.
• Performance Cookies – Measure loading times and responsiveness.

Third-party platforms (e.g., analytics providers) may also place cookies according to their own privacy policies.

10. Cookie Management and Compliance

On your first visit, you are presented with cookie consent options. You may manage or revoke your cookie preferences at any time through your browser settings or via the cookie management tool available on our website. We comply fully with the GDPR and CCPA regarding cookie disclosures and user opt-out mechanisms.

11. Children’s Privacy

Our services are not intended for children under the age of 13. We do not knowingly collect personal information from minors without parental consent. If we become aware that a child under 13 has provided personal data, we will delete such information promptly. Parents or guardians who believe their child has submitted personal information may contact us at [email protected].

12. Policy Updates

We may revise this Privacy Policy from time to time to reflect changes in legal requirements, operational practices, or security protocols. Any material changes will be communicated through our website or directly if required. We encourage users to review the Privacy Policy periodically to remain informed.

13. Contact Us

If you have any questions, concerns, complaints, or would like to exercise your data protection rights, you can reach our Privacy Officer via:

Email: [email protected]

We are committed to respecting your privacy and maintaining full compliance with applicable laws and regulations. Thank you for visiting NobleKhan.com and for placing your trust in us.