For visitors and customers residing in the European Economic Area (EEA) and the United Kingdom (UK), this section supplements our Privacy Policy in compliance with the EU General Data Protection Regulation (Regulation (EU) 2016/679) and the UK GDPR.
3.1 International Data Transfers
When your personal data is transferred outside the EEA/UK to our Singapore servers or our operational headquarters in Mauritius:
- Transfers are conducted under standard contractual clauses (SCCs) approved by the European Commission, or recognized transfer mechanisms providing appropriate safeguards.
- Mauritius has a modern data protection regime established under the Data Protection Act 2017, modeled closely after the GDPR principles of transparency, data minimization, purpose limitation, and individual rights.
3.2 Your Rights Under GDPR
As an EU or UK data subject, you hold the following statutory rights:
- Right of Access: Request a copy of the personal information we hold about you.
- Right to Rectification: Request correction of inaccurate, outdated, or incomplete data.
- Right to Erasure ("Right to be Forgotten"): Request deletion of your data when it is no longer required for contractual or legal tax retention obligations.
- Right to Restriction of Processing: Request temporary suspension of processing while a dispute is resolved.
- Right to Data Portability: Obtain your personal data in a structured, commonly used, and machine-readable format.
- Right to Object: Object to processing based on legitimate interests or direct marketing at any time.
- Right to Withdraw Consent: Where processing is based on consent, you may withdraw it freely via the "Unsubscribe" link or by contacting us.
To exercise any of these rights, email our compliance team at privacy@luxurycashmereclub.com. We respond to all verified requests within 30 days free of charge. You also have the right to lodge a complaint with your national Data Protection Authority (or the Data Protection Office in Mauritius: dataprotection.govmu.org).