GDPR Compliance Statement

Our Commitment to Data Protection

Asian Mail Order Brides is committed to protecting the privacy and personal data of all our users, particularly those located within the European Economic Area (EEA) and the United Kingdom. We recognize the importance of the General Data Protection Regulation (GDPR) and have implemented comprehensive measures to ensure full compliance with this landmark privacy legislation.

The GDPR, which came into effect on May 25, 2018, establishes a framework for data protection that empowers individuals with greater control over their personal information. As a website operating internationally, we embrace these principles and apply them consistently across our operations, regardless of where our visitors are located.

This statement outlines how we process your personal data in accordance with GDPR requirements and explains the rights available to you as a data subject under European Union law.

Your Rights Under GDPR

Under the General Data Protection Regulation, you have the following fundamental rights regarding your personal data:

Right to Be Informed

You have the right to receive clear, transparent information about how we collect and use your personal data. Our Privacy Policy provides comprehensive details about our data processing activities.

Right of Access

You may request a copy of the personal data we hold about you. We will provide this information free of charge within one month of receiving your request, along with details about how the data is being processed.

Right to Rectification

If any personal data we hold about you is inaccurate or incomplete, you have the right to have it corrected. We will rectify any errors within one month of your request.

Right to Erasure (Right to Be Forgotten)

You may request the deletion of your personal data in certain circumstances, including when the data is no longer necessary for the purpose it was collected, when you withdraw consent, or when you object to processing.

Right to Restrict Processing

You can request that we limit how we use your data while we verify its accuracy, while we consider an objection you have raised, or if processing is unlawful but you prefer restriction to erasure.

Right to Data Portability

Where processing is based on consent or contract and carried out by automated means, you have the right to receive your personal data in a structured, commonly used, machine-readable format.

Right to Object

You have the right to object to processing based on legitimate interests, including profiling, as well as processing for direct marketing purposes.

Rights Related to Automated Decision-Making

You have the right not to be subject to decisions based solely on automated processing that produce legal or similarly significant effects. We do not engage in such automated decision-making.

Legal Basis for Data Processing

Under GDPR, we must have a valid legal basis for processing your personal data. We rely on the following grounds:

• Consent: When you explicitly agree to data processing, such as subscribing to our newsletter or accepting non-essential cookies. You may withdraw consent at any time without affecting the lawfulness of prior processing.
• Legitimate Interests: For purposes that are reasonably expected given our relationship with you, such as website security, fraud prevention, and improving user experience, where such interests are not overridden by your fundamental rights.
• Legal Obligation: When processing is necessary to comply with applicable laws, regulations, or legal processes, including responding to lawful requests from public authorities.
• Contract Performance: When processing is necessary to fulfill our obligations under any agreement with you, such as responding to inquiries submitted through our contact form.

We never process special categories of personal data (sensitive data) without explicit consent or another lawful basis as specified in Article 9 of the GDPR.

What Data We Collect

In alignment with the GDPR principle of data minimization, we collect only the personal data necessary for specified, explicit, and legitimate purposes:

• Technical Data: IP address (anonymized where possible), browser type, device information, and operating system for website functionality and security
• Usage Data: Pages viewed, time spent on site, navigation patterns, and referral sources for analytics purposes
• Contact Data: Name and email address when voluntarily provided through our contact form
• Preference Data: Theme preferences (dark/light mode) and cookie consent choices stored locally

We do not collect financial information, government identifiers, or sensitive personal data. For detailed information about our data collection practices, please review our complete Privacy Policy.

Data Storage and Retention

We store and retain personal data in accordance with GDPR principles of storage limitation:

Storage Location

Our website is hosted on secure servers with appropriate technical and organizational measures to protect against unauthorized access, accidental loss, destruction, or damage.

Retention Periods

• Analytics Data: Retained for 26 months, after which it is automatically deleted or anonymized
• Contact Form Submissions: Retained for 24 months following resolution of your inquiry, then securely deleted
• Cookie Consent Records: Retained for 12 months as proof of consent, then renewed upon your next visit
• Server Logs: Retained for 90 days for security purposes, then automatically purged

Once the retention period expires, we securely delete or anonymize personal data so that it can no longer be associated with you.

International Data Transfers

As a globally accessible website, your personal data may be transferred to and processed in countries outside the European Economic Area. When such transfers occur, we ensure appropriate safeguards are in place:

• Adequacy Decisions: Transfers to countries that the European Commission has determined provide adequate data protection (such as Canada, Japan, and the United Kingdom)
• Standard Contractual Clauses: Legally binding agreements approved by the European Commission that require recipients to protect personal data to EU standards
• Data Privacy Framework: For US-based service providers participating in the EU-US Data Privacy Framework

Our third-party service providers, including analytics and hosting partners, are contractually bound to process personal data only on our instructions and in compliance with GDPR requirements.

Data Protection Contact

To exercise any of your GDPR rights or if you have questions about our data protection practices, please contact us:

• Data Protection Inquiries: [email protected]
• General Contact: Contact Us Page

We will respond to all legitimate requests within one month. In complex cases or when we receive numerous requests, we may extend this period by a further two months, but we will notify you of any such extension within the initial one-month period.

Right to Lodge a Complaint

If you believe that our processing of your personal data infringes GDPR, you have the right to lodge a complaint with a supervisory authority. You may contact the supervisory authority in your country of residence, place of work, or where the alleged infringement occurred.

We are committed to resolving any concerns you may have and encourage you to contact us first so we can address your issue directly.

Updates to This Statement

We may update this GDPR Compliance Statement periodically to reflect changes in our practices, legal requirements, or regulatory guidance. Significant changes will be communicated through a notice on our website. We encourage you to review this statement regularly to stay informed about how we protect your data.

For additional information about our privacy practices, please also review our Privacy Policy and Cookie Policy.