Privacy Policy

Last updated: April 26, 2025

Introduction

Elchi Group (“we,” “us,” or “our”) is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your personal data when you visit our website https://elchigroup.com (the “Site”) and how you can exercise your privacy rights.

1. Information We Collect

We collect and process the following categories of personal data:

1.1 Device & Usage Data

• Identifiers: IP address, browser type/version, time zone, cookies and similar tracking technologies.
• Usage: Pages visited, time spent on pages, click-stream data.

1.2 Order & Transaction Data

• Contact Details: Name, billing/shipping address, email, phone number.
• Payment Information: Last four digits of payment cards (full payment data is processed by our payment service provider).
• Order Details: Products purchased, order date, order value.

1.3 Support & Communication Data

• Inquiry Details: Your name, email, phone, and any message you send through contact forms or support tickets.
• Communications: Records of your correspondence with us.

1.4 Cookies & Similar Technologies (Integrated Cookie Policy)

We use cookies and similar tools to enhance your experience, analyze site performance, and deliver interest-based advertising. You can manage your cookie preferences at any time via our Cookie Preference Center banner.

How to Manage Your Cookies:

• Accept or reject categories via our Cookie Preference Center banner.
• Use your browser settings to block or delete cookies.
• Opt out of targeted advertising through industry tools such as https://optout.aboutads.info.

2. How We Use Your Data

We process personal data for the following purposes and legal bases under GDPR:

Under California law (CCPA/CPRA), we use personal information for “business purposes” and “commercial purposes” consistent with the above.

3. Sharing and Transfers

3.1 Service Providers

We share data with third-party vendors who perform services on our behalf (e.g., payment processors, hosting, analytics).

3.2 Legal Compliance

We may disclose data to comply with courts, law enforcement, or regulatory requests.

3.3 International Data Transfers

When transferring data outside the European Economic Area (EEA), including to Canada or the United States, we rely on:

• EU Standard Contractual Clauses (SCCs).
• Where applicable, an adequacy decision by the European Commission.

4. Data Retention

We retain personal data for no longer than necessary to fulfill the purposes described above, subject to legal and regulatory requirements:

After these periods, data is securely deleted or anonymized.

5. Your Privacy Rights

5.1 Under GDPR (EEA Residents)

You have the right to:

• Access your data.
• Rectify inaccuracies.
• Erase your data (“right to be forgotten”).
• Restrict or object to processing.
• Data portability.

5.2 Under CCPA/CPRA (California Residents)

You have the right to:

• Know what personal information we collect and disclose.
• Request deletion of your personal information.
• Opt out of the sale or sharing of personal information.
• Non-discrimination for exercising your rights.

5.3 Other U.S. State Laws

We intend to comply with other state privacy laws (e.g., Virginia CDPA, Colorado CPA) as they become applicable.

To exercise any right, please contact us at the details below. We will respond within the required timeframe under applicable law.

6. Changes to This Policy

We may update this Privacy Policy to reflect legal, technical, or business changes. If we make material changes, we will notify you by updating the “Last updated” date above and, where appropriate, via a banner on our Site.

7. Contact Information

For more information about our privacy practices, if you have questions, or if you would like to make a complaint, please contact us by e-mail at info@elchigroup.com.