Privacy Policy

1. Overview & Scope

This Privacy Policy explains how Menglo ("we", "us", "our") collects, uses, discloses, and safeguards your information when you visit our website, make purchases, create an account, or interact with our services (collectively, the "Platform"). By using Menglo, you consent to the data practices described in this policy. We comply with applicable privacy laws including GDPR, CCPA, and global best practices.

2. Information We Collect

We collect information that identifies you personally ("Personal Data") as well as usage data to improve your experience.

We do NOT collect sensitive personal data (e.g., social security numbers, biometric data) unless required by law and with explicit consent.

3. Cookies & Tracking Technologies

Menglo uses cookies, web beacons, and similar technologies to enhance functionality, analyze trends, and personalize marketing. You can manage cookie preferences via your browser settings. Essential cookies are required for core features (shopping cart, login). Third-party analytics (e.g., Google Analytics, Hotjar) help us understand user flows — these services have their own privacy policies. You may opt out of targeted advertising by visiting Your Privacy Choices in account settings.

4. How We Use Your Information

We use your data for the following legitimate purposes:

• Order fulfillment: Process payments, ship products, provide order updates and returns.
• Account management: Create and maintain your Menglo account, loyalty rewards, and Menglo+ membership.
• Customer support: Respond to inquiries, resolve disputes, and provide technical assistance.
• Marketing & personalization: Send promotions, product recommendations, and tailored offers (you may opt out anytime).
• Security & fraud prevention: Detect and prevent malicious activity, unauthorized transactions.
• Legal compliance: Comply with applicable laws, court orders, or regulatory requests.

5. Sharing & Disclosure of Data

We never sell your personal information to third parties. We may share data only in the following scenarios:

• Service Providers: Trusted partners who assist with payment processing, shipping, email delivery, fraud analysis (contractually bound to confidentiality).
• Business Transfers: In the event of a merger, acquisition, or asset sale, your data may be transferred with notice.
• Legal Obligations: If required by law, subpoena, or to protect the rights and safety of Menglo, users, or the public.
• With Your Consent: For any other purpose disclosed at the time of data collection.

We do not share your payment card details directly — all transactions are encrypted via Stripe / PayPal.

6. Data Security & Retention

We implement industry-standard security measures, including SSL/TLS encryption, access controls, and regular vulnerability scans. However, no method of transmission over the internet is 100% secure. We retain your personal data only as long as necessary to fulfill the purposes outlined in this policy, plus any legal retention requirements (e.g., tax records for 7 years). Inactive accounts are anonymized after 24 months of no activity.

7. Your Privacy Rights

Depending on your location, you may have the following rights regarding your personal data:

• Access: Request a copy of the personal data we hold about you.
• Correction: Update inaccurate or incomplete information.
• Deletion: Request deletion of your data (subject to legal exceptions).
• Opt-out of marketing: Unsubscribe from promotional emails via the link in any message or account settings.
• Data portability: Receive a machine-readable copy of your data.
• Restrict processing: Limit how we use your data in certain circumstances.

To exercise these rights, contact us at privacy@Menglo.com or use our Privacy Request Form in account settings. We will respond within 30 days. Residents of California, Virginia, and the EU/UK have additional rights — see our Supplemental Notice.

8. Children's Privacy

Menglo does not knowingly collect personal information from children under the age of 13. If you believe we have inadvertently collected such data, please contact us immediately for removal. Users under 18 may only use the Platform with parental or guardian consent.

9. International Data Transfers

Menglo operates globally. Your data may be transferred to and processed in countries other than your own, including the United States. For transfers from the EU/UK, we rely on Standard Contractual Clauses (SCCs) and ensure an equivalent level of protection. By using our services, you acknowledge such transfers.

10. Policy Updates & Notifications

We may update this Privacy Policy periodically to reflect changes in our practices or legal requirements. The "Last updated" date at the top will indicate when changes were made. If we make material changes, we will notify you via email (if registered) or through a prominent notice on our website. Your continued use after updates constitutes acceptance of the revised policy.