RMSHOT PROTECT

Privacy and Cookie Policy

Personal data · Transparency · Digital privacy

OUR COMMITMENT

At RMSHOT PROTECT, protecting personal information is an important part of our relationship with customers, professional partners and website visitors.

This policy explains how personal data may be collected, used, stored and protected when visiting rmshot.com, placing orders, creating an account or contacting our team.

The intended operating company is SORA TECH CO. The verified identity and contact details of the actual data controller must be stated in the website's Legal Notice before commercial operations begin.

01. Scope of This Policy

This policy applies to personal data processed through rmshot.com in connection with website browsing, customer accounts, orders, customer support, professional enquiries and related commercial communications.

It covers consumers, business customers, distributors, prospective partners and other individuals contacting RMSHOT PROTECT.

02. Personal Data We Collect

Depending on the interaction, we may process names, business names, billing and delivery addresses, email addresses, telephone numbers, account details, order history, customer-service correspondence and information submitted in professional account applications.

Technical information may include IP addresses, browser characteristics, device information, security logs and cookie preferences.

Payment details are processed according to the payment method used. Where external payment providers are involved, their own privacy information also applies.

03. Purposes of Processing

Personal data may be used to create and manage accounts, process purchases, organise delivery, issue invoices, provide after-sales service, respond to enquiries, manage B2B relationships, prevent fraud, secure the website and meet accounting or other legal obligations.

Where permitted, information may also be used to improve website functionality, understand service performance and send commercial communications.

04. Legal Bases for Processing

Where the GDPR or equivalent legislation applies, processing must rely on an appropriate legal basis. These may include performance of a contract, compliance with legal obligations, legitimate interests that do not override individual rights, and consent where required.

Consent may be withdrawn at any time without affecting processing lawfully carried out before withdrawal.

05. Customer Accounts and Orders

Account and order information is used to administer purchases, confirm transactions, arrange shipping, handle returns and provide support.

Information necessary for invoicing, tax compliance or dispute management may be retained where legally required, even after an account is closed.

06. Professional Customers and B2B Enquiries

Professional applications and partnership enquiries may involve company identification, professional contact details, websites, business activities and information necessary to assess commercial eligibility.

Such information is used to evaluate requests, manage commercial relationships and prepare quotations or professional terms where appropriate.

07. Sharing Data with Service Providers

Data may be shared, where necessary, with hosting providers, payment processors, delivery companies, technical maintenance providers, customer-service providers and professional advisers.

Recipients should receive only the information required for their tasks and be subject to appropriate confidentiality, security and data-protection obligations.

Personal data is not sold as a customer database. Any advertising-related disclosures, if used, must be described accurately and comply with applicable law.

08. International Data Transfers

Operating an international online store may involve service providers located in different countries. Where personal data is transferred outside a jurisdiction providing the required level of protection, appropriate legal safeguards must be implemented, such as an adequacy decision or approved contractual safeguards where applicable.

Specific transfer arrangements should be confirmed against the providers actually used by the website.

09. Data Retention

Personal data is retained only for as long as necessary for the purposes described in this policy, subject to applicable accounting, tax, contractual and legal requirements.

Retention periods depend on the type of information. Order records, account details, customer correspondence, marketing preferences and technical logs may therefore have different retention periods.

A detailed retention schedule must be established and verified before publication.

10. Cookies and Similar Technologies

Cookies are small files or identifiers used to support website operation and, where enabled, optional functionality.

Strictly necessary cookies may support shopping carts, secure sessions, language preferences and account authentication.

Preference cookies may remember selected settings.

Analytics cookies, if installed, may help measure website traffic and performance.

Advertising cookies, if installed, may be used for marketing measurement or personalised advertising.

The actual cookies, providers, purposes and lifetimes must be documented according to the website's live configuration.

11. Cookie Consent and Preferences

Where required by law, non-essential cookies and similar technologies are used only after valid consent has been obtained.

Visitors must be able to refuse or withdraw consent as easily as they give it. Cookie preferences should be accessible through the website's consent management interface.

Disabling certain optional cookies may affect convenience features but should not prevent access to essential website functions.

12. Marketing Communications

Commercial emails are sent only where a valid legal basis exists, including consent where required. Recipients may unsubscribe using the instructions in the message or by contacting customer service.

Transactional communications necessary for orders, delivery or customer support are distinct from optional promotional messages.

13. Data Security

Appropriate technical and organisational measures should be implemented to protect personal data against unauthorised access, loss, alteration or disclosure.

No online system can guarantee absolute security. Security arrangements should be reviewed as the website and its services evolve.

14. Your Privacy Rights

Depending on the applicable law and circumstances, individuals may have rights of access, rectification, erasure, restriction, objection, data portability and withdrawal of consent.

Requests may be submitted through the contact information published in the Legal Notice. Identity verification may be required where appropriate.

Individuals may also have the right to complain to a competent data-protection supervisory authority.

15. External Websites and Third-Party Services

Links to external websites or embedded third-party services may be subject to their own privacy policies. RMSHOT PROTECT does not control the independent privacy practices of unrelated third-party websites.

16. Changes to This Policy

This policy may be updated to reflect changes in services, technology, applicable law or data-processing practices. Material changes should be communicated where required.

The version published on the website should indicate its effective or last-updated date.

17. Contact and Legal Information

For questions about personal data, cookies or privacy rights, please use the website's contact page or the details published in the Legal Notice.

The controller's verified identity, address and relevant contact details must be completed before this policy is published as a final legal document.

PRECISION / PROTECTION / PERFORMANCE

RMSHOT PROTECT

rmshot.com · Privacy and Cookie Policy