%20(300%20x%20120%20px).png)
Privacy Policy
The use of this website is subject to the below Privacy Policy
This Privacy Policy outlines how www.domivi.tech (the “Site,” “we,” “us,” or “our”) collects, processes, and protects your personal data in compliance GDPR, POPIA, CCPA and other applicable laws. By using our Services, you agree to the practices described herein.
​
1. Data Controller and Contact Information
Data Controller:
Domivi LLC
1111B S Governors Ave STE 23686
Dover, DE 19904
Email: info@domivi.com
For GDPR-specific inquiries, including data subject requests, contact us via the details above. While we do not have a designated Data Protection Officer, all privacy-related matters are handled by our compliance team.
2. Legal Basis for Processing Personal Data
Under GDPR, we process personal data based on the following legal grounds:
-
Contractual Necessity: To fulfil orders, manage accounts, and provide customer support.
-
Legitimate Interests: For fraud prevention, service improvement, and marketing (where balanced against your rights).
-
Consent: For cookies, newsletters, and third-party advertising. You may withdraw consent at any time.
-
Legal Obligations: To comply with tax, regulatory, or law enforcement requirements.
​
3. Personal Data We Collect
A. Data Provided Directly
-
Contact Details: Name, address, email, phone number.
-
Transaction Data: Payment information (processed securely by third-party processors).
-
Communications: Messages submitted via customer support channels.
B. Automatically Collected Data
-
Usage Data: IP address, device/browser type, pages visited, and interactions. Collected via cookies and similar technologies.
-
Cookies: We use:
-
Essential Cookies: For site functionality (no consent required).
-
Analytics Cookies: To improve services (consent required).
-
Marketing Cookies: For personalised ads (consent required).
C. Third-Party Sources
-
Payment Processors: Transaction details (e.g., Stripe, PayPal).
-
Analytics Providers: Aggregated usage metrics (e.g., Google Analytics).
-
Ad Networks: Hashed identifiers for targeted advertising (e.g., Google Ads, Meta Ads).
4. How We Use Your Data
Order Fulfilment: Processed under Contractual Necessity using contact details and transaction data to complete purchases and manage returns.
Account Management: Maintained under Contractual Necessity using login credentials and account preferences.
Fraud Prevention: Analysed under Legitimate Interest using IP addresses and device information to detect suspicious activity.
Marketing/Advertising: Conducted under Consent (or Legitimate Interest for existing customers per GDPR Recital 47) using cookie data and usage patterns to personalise ads.
Analytics: Processed under Legitimate Interest using aggregated usage data to improve site functionality.
​
5. Data Sharing and Third Parties
We disclose data to:
-
Service Providers: Payment processors (e.g., Stripe), hosting services (e.g., Wix), and shipping partners.
-
Advertising Networks: Google Ads and Meta Ads for targeted campaigns. Data is pseudonymised and shared only with consent.
-
Legal Authorities: When required by law or to protect rights.
We ensure third parties comply with GDPR through Data Processing Agreements (DPAs) and SCCs for international transfers.
6. International Data Transfers
Data may be transferred outside the EU/EEA. We safeguard transfers using:
-
Standard Contractual Clauses (SCCs).
-
Adequacy Decisions (e.g., EU-US Data Privacy Framework).
7. Your Rights
You have the right to:
-
Access: Request a copy of your data.
-
Rectification: Correct inaccurate information.
-
Erasure: Delete data (subject to legal limits).
-
Restriction: Limit processing during disputes.
-
Portability: Receive data in a machine-readable format.
-
Object: Opt out of processing based on legitimate interests.
-
Withdraw Consent: For cookies or marketing.
​
To exercise these rights, email info@domivi.com. We respond within 30 days and may request identity verification.
8. Data Retention
We retain data only as long as necessary:
-
Orders: 7 years (for tax compliance).
-
Marketing Data: Until consent withdrawal or 2 years of inactivity.
-
Cookies: Session cookies expire after 24 hours; analytics cookies persist for 12 months.
9. Security Measures
We implement:
-
Encryption: TLS for data in transit; AES-256 for stored data.
-
Access Controls: Role-based permissions and MFA.
-
Audits: Annual penetration testing and vulnerability scans.
​
10. Advertising and GDPR Compliance
We use anonymised/pseudonymised data for ad optimisation on platforms like Google Ads and Meta Ads:
-
Consent Management: Cookie banners obtain explicit consent before activating tracking scripts.
-
Legitimate Interest Assessments (LIAs): Conducted for ad targeting based on past purchases.
-
Data Minimisation: Only essential identifiers (e.g., hashed emails) are shared with ad networks.
-
For programmatic advertising:
-
We use contextual targeting (e.g., page content) where consent is unavailable.
-
No sensitive data (e.g., race, health) is used for ads.
11. Updates and Complaints
We update this policy annually or after material changes. Major revisions will be notified via email.
If unsatisfied with our response, you may lodge a complaint with your local supervisory authority (e.g., Ireland’s DPC for EU residents).