1. Introduction
Welcome to NASIRI Carpets, where luxury meets tradition. We are committed to protecting your privacy and ensuring you have a positive experience when visiting our website at https://nasiricarpets.com (the "Website").
This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit our Website and interact with our services, including submitting inquiries for our handmade rugs and carpets.
Our Privacy Commitment:
- We collect only the information necessary to serve your carpet inquiry and provide excellent service
- We use your information transparently for legitimate business purposes only
- We implement industry-standard security measures to protect your data
- We respect your privacy rights and provide you with control over your information
2. Information We Collect
A. Information You Provide Directly
Inquiry Form Information
When you submit an inquiry through our "Inquiries" form or contact us about a carpet or rug, we collect:
- Full name
- Email address
- Phone number
- Shipping address (optional)
- Carpet reference number (e.g., Ref No: 010274)
- Product specifications you're interested in (size, material, color, pattern)
- Your message and specific requirements
- Any attachments or images you share
Account Registration Information
If you create an account on our Website, we collect:
- First and last name
- Email address
- Password (encrypted)
- Billing and shipping address
- Phone number
- Your carpet preferences and browsing history
- Previous inquiries and quotes
Payment Information
When you make a purchase, we collect:
- Payment method details (processed securely through third-party providers)
- Billing and shipping address
- Transaction history
- Order details
Important: We do not store your full credit card information on our servers. All payment processing is handled by PCI DSS-compliant payment processors like Stripe and PayPal.
B. Information Collected Automatically
Website Usage Information
When you visit our Website, we automatically collect:
- Your IP address and device identifier
- Browser type and version
- Operating system
- Pages you visit and time spent on each page
- Carpet products you view and interact with
- Click patterns and navigation behavior
- Device type (desktop, mobile, tablet)
- Approximate geographic location
Cookies and Tracking Technologies
We use cookies and similar technologies to track your browsing patterns and improve your experience on our Website.
3. How We Use Your Information
Primary Business Purposes
- Processing Inquiries: Responding to your carpet and rug inquiries with quotes and detailed product information
- Customer Service: Providing support and assistance with your questions about our products
- Order Management: Processing and managing your orders from inquiry to delivery
- Payment Processing: Securely processing payments for purchases
- Account Management: Maintaining your customer account and preferences
Marketing and Communications
- Email Marketing: Sending you newsletters about new collections and designs (with your consent)
- Promotional Communications: Notifying you about special offers, sales, and exclusive events
- Personalization: Customizing your experience based on your carpet preferences and browsing history
Website Improvement
- Website Enhancement: Analyzing how you use our Website to improve functionality and user experience
- Performance Monitoring: Identifying technical issues and improving website stability
- Analytics: Understanding traffic patterns and user engagement with our products
Legal and Safety Purposes
- Legal Compliance: Complying with applicable laws and regulations
- Fraud Prevention: Detecting and preventing fraudulent transactions
- Security: Protecting the security of our Website and your information
4. Sharing Your Information
Information We Share
We may share your information with the following service providers:
Service Providers and Partners
- Payment Processors: Stripe and PayPal (for secure payment processing)
- Email Service Providers: For sending transactional emails and marketing communications
- Analytics Providers: Google Analytics (to understand website usage)
- Hosting Providers: For Website functionality and storage
- Shipping and Logistics Partners: For order delivery and tracking
- Customer Support Tools: For responding to your inquiries
Legal Requirements
We may disclose your information if required by law or if we have a good faith belief that such disclosure is necessary to:
- Comply with applicable laws, regulations, and court orders
- Enforce our Terms of Service and other agreements
- Protect against fraud or security threats
- Protect the rights, property, and safety of NASIRI Carpets and our users
Information We Do NOT Share
- We do NOT sell your personal information to third parties for marketing purposes
- We do NOT store or share your full credit card information
- We do NOT share information without your consent, except as required by law
5. Cookies and Tracking Technologies
What Are Cookies?
Cookies are small data files stored on your device that help us remember your preferences and improve your browsing experience on our Website.
Types of Cookies We Use
- Essential Cookies: Required for Website functionality (login, security)
- Performance Cookies: To analyze website usage and performance
- Functional Cookies: To remember your preferences and selections
- Marketing Cookies: To show relevant content and retargeting ads
Managing Cookies
You can control cookie settings through your browser:
- Chrome: Settings → Privacy and Security → Cookies and other site data
- Firefox: Settings → Privacy & Security → Cookies and Site Data
- Safari: Preferences → Privacy → Manage Website Data
- Edge: Settings → Privacy → Clear browsing data
Note: Disabling certain cookies may affect Website functionality.
6. Data Security
Security Measures
We implement industry-standard security measures to protect your information:
- SSL/TLS Encryption: All data transmitted between your browser and our server is encrypted
- Secure Payment Processing: PCI DSS-compliant payment gateways for safe transactions
- Password Protection: Your account password is encrypted and securely stored
- Access Controls: Only authorized personnel have access to personal information
- Firewalls: Protection against unauthorized access
- Regular Security Updates: We maintain security patches and software updates
Your Responsibility
You are responsible for:
- Keeping your account password confidential
- Logging out after using our Website on shared devices
- Notifying us immediately of any unauthorized access
Data Breach Notification
In the event of a data breach affecting your personal information, we will notify you without unreasonable delay and explain steps we are taking to address the breach.
7. Data Retention
We retain your information for as long as necessary to fulfill the purposes stated in this Privacy Policy:
- Account Information: Retained during your account lifetime. Deleted within 30 days of account closure, except where required by law
- Transaction Information: Retained for 7 years (as required for tax and financial record-keeping)
- Inquiry and Communication Records: Retained for 3 years or until your inquiry is fully resolved
- Marketing Communications: Retained until you unsubscribe
- Website Analytics Data: Retained according to Google Analytics policies (typically 14-50 months)
- Payment Information: NOT stored on our servers (processed by third-party providers)
8. Your Rights and Choices
User Rights
You have the following rights regarding your personal information:
Right to Access
You have the right to request access to the personal information we hold about you. We will provide this information in a clear, understandable format.
Right to Correction
If your personal information is inaccurate or incomplete, you have the right to request correction or updating of your data.
Right to Deletion
You have the right to request deletion of your personal information, subject to certain legal exceptions. We will delete your information within 30 days of a valid request.
Right to Data Portability
You have the right to request a copy of your personal information in a portable, machine-readable format.
Right to Opt-Out
You have the right to opt-out of:
- Marketing communications and newsletters
- Personalized product recommendations
- Analytics tracking (while maintaining core Website functionality)
Marketing Communication Preferences
Email Opt-Out
You can unsubscribe from marketing emails by:
- Clicking the "unsubscribe" link at the bottom of any marketing email
- Updating your preferences in your account settings
- Contacting us directly
How to Exercise Your Rights
To exercise any of these rights, please contact us using the information in the "Contact Us" section. We will respond to your request within 30 days.
9. Third-Party Services
Google Analytics
Payment Processors
External Links
Our Website may contain links to third-party websites. We are not responsible for the privacy practices of these external sites. We recommend reviewing their privacy policies before providing any personal information.
10. Children's Privacy
Age Restrictions
Our Website and services are not directed toward children under 13 years of age. We do not knowingly collect personal information from children.
Parental Consent
If you are under 18, please obtain parental consent before providing personal information to us.
COPPA Compliance
NASIRI Carpets complies with the Children's Online Privacy Protection Act (COPPA) and similar regulations in other jurisdictions.
Parent Notification
If we discover that we have collected information from a child under 13 without verifiable parental consent, we will delete that information promptly. Please contact us immediately if you believe this has occurred.
11. International Compliance
GDPR Compliance (EU/EEA)
If you are located in the European Union or EEA:
- We comply with the General Data Protection Regulation (GDPR)
- We provide appropriate data protection safeguards
- We have implemented Standard Contractual Clauses for international transfers
- You have the rights described in the "Your Rights and Choices" section
California Privacy Rights (CCPA/CPRA)
If you are a California resident, you have additional rights under the California Consumer Privacy Act:
- Right to Know: Request what personal information we collect and how we use it
- Right to Delete: Request deletion of your personal information
- Right to Correct: Request correction of inaccurate personal information
- Right to Opt-Out: Opt-out of the sale or sharing of your personal information
- Right to Non-Discrimination: We will not discriminate against you for exercising these rights
12. Contact Us
If you have questions, concerns, or requests regarding this Privacy Policy or our privacy practices, please contact us:
Response Time
We will respond to your privacy inquiries within 30 days of receipt.
Regulatory Authorities
You also have the right to file a complaint with the appropriate regulatory authority:
- EU/EEA: Your local data protection authority
- California: California Attorney General
- Other Jurisdictions: Your applicable state or country data protection authority
Updates to This Privacy Policy
NASIRI Carpets may update this Privacy Policy from time to time to reflect changes in our privacy practices, updates to technology, or changes in applicable laws. We will notify you of material changes by updating the "Last Updated" date at the top of this page. Your continued use of our Website constitutes acceptance of the updated Privacy Policy.
Acknowledgment
By using NASIRI Carpets' Website and services, you acknowledge that you have read and understood this Privacy Policy and agree to our privacy practices. If you do not agree with this Privacy Policy, please do not use our Website.