Privacy Policy

1. Introduction

At Biruwa, your privacy is our priority. We are committed to protecting your personal data and complying with the General Data Protection Regulation (GDPR).

2. Data We Collect

To provide our services, we collect:

• Identity Data: Name, Date of Birth.
• Contact Data: Email address, Phone number, Delivery addresses.
• Transaction Data: Order history and payment status.
• Technical Data: IP address, login data, browser type.

3. How We Protect Your Data

We use industry-standard **AES-256-GCM encryption** to secure your sensitive information (Email, Address, DOB). This ensures that even in the event of a breach, your data remains unreadable without authorized keys.

4. Your GDPR Rights

You have the following rights under GDPR:

• Right to Access: You can download a full export of your personal data from your account settings.
• Right to Rectification: You can update your profile information at any time.
• Right to Erasure ("Right to be Forgotten"): You can request account deletion. We provide a 30-day grace period before your data is permanently anonymized.
• Right to Restrict Processing: You can opt-out of marketing communications through your Privacy Settings.

5. Contact Us

For any privacy-related queries, please contact us at privacy@biruwapasa.com.