Privacy Policy

Last Updated: August 3, 2024  |  Effective Date: August 10, 2024

1. Introduction

MGABOY Technology Co., Ltd. ("MGABOY," "we," "us," or "our") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your personal information when you visit our website, purchase our products, or use our services.

By accessing or using our services, you acknowledge that you have read and understood this Privacy Policy. If you do not agree with any part of this policy, please discontinue use of our services immediately.

2. Information We Collect

2.1 Personal Information You Provide

We collect information that you voluntarily provide when interacting with us, including:

  • Account Information: Name, email address, and password when you create an MGABOY account.
  • Purchase Information: Shipping address, billing address, payment method details, and order history.
  • Communication Data: Messages sent through our contact forms, customer support inquiries, product reviews, and survey responses.
  • Marketing Preferences: Newsletter subscription preferences and communication opt-ins.

2.2 Information Collected Automatically

When you visit our website or use our products, certain information is collected automatically:

  • Device & Usage Data: IP address, browser type, operating system, device identifiers, referring URLs, pages visited, time spent on pages, and clickstream data.
  • Product Telemetry: For connected MGABOY devices (e.g., Watch Pro, Sonic One), we may collect firmware version, battery level, usage patterns, and diagnostic data to improve product performance.
  • Cookies & Similar Technologies: We use cookies, web beacons, and pixel tags to remember your preferences, analyze site traffic, and personalize content. You can manage cookie preferences through your browser settings.

3. How We Use Your Information

We use the information we collect for the following purposes:

  • Service Delivery: To process orders, deliver products, manage your account, and provide customer support.
  • Product Improvement: To analyze usage patterns, diagnose technical issues, and enhance product features and reliability.
  • Personalization: To tailor product recommendations, marketing communications, and website content based on your interests and preferences.
  • Communication: To send order confirmations, shipping updates, security alerts, and (with your consent) promotional materials.
  • Legal & Security: To comply with legal obligations, enforce our terms of service, prevent fraud, and protect the rights and safety of MGABOY and our users.

4. Data Sharing & Disclosure

MGABOY does not sell your personal information to third parties. We may share your data only in the following circumstances:

  • Service Providers: With trusted third-party vendors who assist us in operating our business (payment processors, shipping carriers, cloud hosting, email delivery services). These providers are contractually bound to protect your data.
  • Legal Compliance: When required by law, court order, or governmental regulation, or to respond to valid legal process.
  • Business Transfers: In connection with a merger, acquisition, reorganization, or sale of assets, your information may be transferred as part of that transaction.
  • With Your Consent: We will obtain your explicit consent before sharing your information for any purpose not covered by this policy.

5. Data Retention

We retain your personal information only for as long as necessary to fulfill the purposes outlined in this Privacy Policy, or as required by applicable law. The retention periods are:

  • Account Data: Retained for the duration of your account's active status plus 2 years after account deletion for legal and audit purposes.
  • Purchase Records: Retained for 7 years to comply with tax and accounting regulations.
  • Product Telemetry: Retained for up to 24 months, after which data is anonymized and aggregated.
  • Marketing Consent: Retained until you withdraw consent or unsubscribe.

6. Your Rights

Depending on your jurisdiction, you may have the following rights regarding your personal data:

  • Right to Access: Request a copy of the personal data we hold about you.
  • Right to Rectification: Request correction of inaccurate or incomplete personal data.
  • Right to Erasure: Request deletion of your personal data, subject to legal retention requirements.
  • Right to Restrict Processing: Request that we limit how we process your data under certain conditions.
  • Right to Data Portability: Request a machine-readable copy of your data for transfer to another service.
  • Right to Object: Object to processing of your data for direct marketing purposes.
  • Right to Withdraw Consent: Withdraw previously granted consent at any time without affecting the lawfulness of prior processing.

To exercise any of these rights, please contact us at privacy@mgaboy.com. We will respond to verified requests within 30 calendar days.

7. Data Security

MGABOY implements industry-standard technical and organizational safeguards to protect your personal information:

  • Encryption: All data transmissions are encrypted using TLS 1.3. Sensitive data at rest is encrypted using AES-256.
  • Access Controls: Role-based access with multi-factor authentication (MFA) required for all internal systems containing personal data.
  • Audit & Monitoring: Continuous security monitoring, regular penetration testing, and annual independent security audits.
  • Incident Response: We maintain a formal incident response plan. In the unlikely event of a data breach, affected users will be notified within 72 hours as required by applicable law.

8. International Data Transfers

MGABOY is headquartered in Shenzhen, China, and may process data in servers located in multiple jurisdictions. When we transfer personal data across borders, we ensure adequate safeguards are in place, including Standard Contractual Clauses (SCCs) approved by relevant data protection authorities.

9. Children's Privacy

Our services are not directed to individuals under the age of 16. We do not knowingly collect personal information from children. If you believe a child has provided us with personal data, please contact us immediately, and we will take steps to delete such information.

10. Changes to This Policy

We may update this Privacy Policy from time to time. Material changes will be communicated via email (where applicable) and a prominent notice on our website at least 14 days before the changes take effect. The "Last Updated" date at the top of this page reflects the most recent revision.

11. Contact Information

If you have questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact our Data Protection Officer:

  • Email: privacy@mgaboy.com
  • Address: MGABOY Technology Co., Ltd., 12F Innovation Tower, 88 Science Park South Road, Nanshan District, Shenzhen, Guangdong, China