Privacy Policy

1. Overview

MyNCasa ("we," "our," or "us") is committed to protecting your privacy and ensuring the security of your personal information. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our interior design discovery platform and related services.

By using MyNCasa, you consent to the data practices described in this Privacy Policy. If you do not agree with the practices described in this policy, please do not use our services.

2. Information We Collect

2.1 Information You Provide Directly

We collect information you voluntarily provide when you:

• Create an Account: Name, email address, password, and profile preferences
• Use Our Services: Search queries, saved items, mood boards, collections, and preferences
• Contact Us: Messages, feedback, and support requests
• Participate in Surveys: Responses to optional surveys and feedback forms

2.2 Information Collected Automatically

When you use our platform, we automatically collect:

2.3 Information from Third Parties

We may receive information from:

• Authentication Providers: When you sign in using social media or OAuth providers
• Partner Retailers: Product availability and pricing information (no personal data)
• Analytics Services: Aggregated usage statistics and performance metrics

3. How We Use Your Information

3.1 Primary Uses

We use your information to:

• Provide Our Services: Enable account access, save preferences, and deliver personalized experiences
• Improve Our Platform: Analyze usage patterns to enhance features and user experience
• Personalization: Recommend products and content based on your interests and behavior
• Communication: Send service updates, respond to inquiries, and provide customer support
• Security: Protect against fraud, abuse, and unauthorized access

3.2 Marketing and Communications

With your consent, we may use your information to:

• Send newsletters and design inspiration content
• Notify you about new features and updates
• Share promotional offers from partner retailers
• Conduct surveys and gather feedback

You can opt out of marketing communications at any time through your account settings or unsubscribe links.

3.3 Legal Basis for Processing (GDPR)

We process your personal data based on:

• Consent: For marketing communications and optional features
• Contract Performance: To provide our services as agreed
• Legitimate Interest: For service improvement, security, and analytics
• Legal Obligation: To comply with applicable laws and regulations

4. Information Sharing and Disclosure

4.1 We Do Not Sell Your Data

4.2 When We Share Information

We may share your information in the following limited circumstances:

• Service Providers: Trusted third parties who help us operate our platform (hosting, analytics, customer support)
• Partner Retailers: When you click through to make a purchase (subject to their privacy policies)
• Legal Requirements: When required by law, court order, or to protect our rights and safety
• Business Transfers: In connection with mergers, acquisitions, or asset sales (with notice to users)
• With Your Consent: When you explicitly authorize us to share specific information

4.3 Data Processing Partners

We work with carefully selected partners who process data on our behalf:

• Cloud Infrastructure: Secure hosting and data storage services
• Analytics: Usage analytics and performance monitoring (anonymized data)
• Authentication: Secure login and identity verification services
• Communication: Email delivery and customer support platforms

All partners are bound by strict data protection agreements and security requirements.

5. Data Security

5.1 Security Measures

We implement comprehensive security measures to protect your information:

5.2 Data Breach Response

In the unlikely event of a data breach, we will:

• Immediately investigate and contain the breach
• Notify affected users within 72 hours
• Report to relevant authorities as required by law
• Take steps to prevent future incidents
• Provide support and guidance to affected users

6. Data Retention

6.1 Retention Periods

We retain your information for different periods based on the type of data and purpose:

6.2 Data Deletion

When we delete your data, we:

• Remove it from active systems within 30 days
• Ensure secure deletion from backups within 90 days
• Maintain anonymized analytics data for service improvement
• Retain minimal data required for legal compliance

7. Your Privacy Rights

7.1 Access and Portability

• Access: Request a copy of all personal data we hold about you
• Portability: Receive your data in a structured, machine-readable format
• Export: Download your mood boards, collections, and preferences

7.2 Correction and Updates

• Update: Modify your account information and preferences anytime
• Correct: Request correction of inaccurate or incomplete data
• Self-Service: Most updates can be made directly in your account settings

7.3 Deletion and Restriction

• Delete Account: Permanently delete your account and associated data
• Selective Deletion: Remove specific data like saved items or search history
• Restrict Processing: Limit how we use your data in certain circumstances

7.4 Marketing and Communications

• Opt-Out: Unsubscribe from marketing emails and notifications
• Preferences: Choose which types of communications you receive
• Frequency: Control how often we contact you

7.5 How to Exercise Your Rights

To exercise any of these rights:

• Visit your account settings for self-service options
• Email us at privacy@myncasa.com with your request
• Contact our support team through the help center
• We will respond to all requests within 30 days

8. Cookies and Tracking Technologies

8.1 What Are Cookies

Cookies are small text files stored on your device when you visit our website. We use cookies and similar technologies to enhance your experience, analyze usage, and provide personalized content.

8.2 Types of Cookies We Use

8.3 Managing Cookies

You can control cookies through:

• Browser Settings: Most browsers allow you to block or delete cookies
• Cookie Preferences: Use our cookie preference center to customize settings
• Opt-Out Tools: Use industry opt-out tools for advertising cookies

Note: Disabling essential cookies may affect site functionality.

9. Third-Party Services

9.1 Integrated Services

Our platform integrates with various third-party services:

• Authentication Providers: Logto, Google, Facebook for secure login
• Analytics Services: Google Analytics for usage insights
• Search Technology: MeiliSearch for fast product search
• Cloud Services: Digitalocean for hosting and storage
• Payment Processors: When applicable, for secure transactions

9.2 Retailer Partners

When you click through to retailer websites, you leave our platform and are subject to their privacy policies. We encourage you to review their privacy practices before making purchases.

9.3 Social Media Integration

Our platform may include social media features that allow you to share content. These features may collect information about your visit and are governed by the privacy policies of the respective social media platforms.

10. International Data Transfers

10.1 Global Operations

MyNCasa operates globally, and your information may be transferred to and processed in countries other than your country of residence. These countries may have different data protection laws.

10.2 Safeguards

When we transfer your data internationally, we ensure appropriate safeguards are in place:

• Adequacy Decisions: Transfers to countries with adequate data protection
• Standard Contractual Clauses: EU-approved contracts for data protection
• Certification Programs: Privacy Shield and similar frameworks where applicable
• Binding Corporate Rules: Internal policies ensuring consistent protection

10.3 Your Rights

Regardless of where your data is processed, you retain all privacy rights described in this policy. You can contact us to exercise these rights or raise concerns about international transfers.

11. Children's Privacy

11.1 Age Restrictions

MyNCasa is not intended for children under 13 years of age (or 16 in the EU). We do not knowingly collect personal information from children under these ages.

11.2 Parental Rights

If you believe we have collected information from a child under the applicable age:

• Contact us immediately at privacy@myncasa.com
• We will investigate and delete the information promptly
• We will take steps to prevent future collection
• Parents can request access to their child's information

11.3 Teen Privacy

For users between 13-18 years old (or 16-18 in the EU), we encourage parental involvement in online activities and provide additional privacy protections where required by law.