Privacy Policy

Last updated: June 6, 2025

“`

MayanCraft.org (“we”, “our”, or “us”) is committed to protecting your privacy and handling your personal data in an open and transparent manner. This policy explains how we collect, use, share, and protect the personal information of individuals who visit our website, submit inquiries, or interact with our content. As a Guatemalan-based business offering handcrafted wholesale products, we recognize the importance of data privacy and the trust you place in us.

1. Who We Are

MayanCraft.org is the digital wholesale platform of Mayan Craft, a company based in Guatemala, dedicated to supporting indigenous artisans through the promotion and export of handmade products. All operations and data processing activities take place within Guatemala. This Privacy Policy governs the data collected through our website, forms, communications, and any related tools or services we implement.

2. Types of Data We Collect

We collect various types of personal and technical data depending on how you interact with our website:

A. Data You Provide Directly

  • Full Name
  • Email Address
  • Phone Number
  • Company Name
  • Country of Origin
  • Product Interests and Customization Requests
  • Any other data voluntarily submitted via contact forms, quote requests, or email correspondence

B. Data We Collect Automatically

  • IP Address
  • Browser Type and Version
  • Operating System and Device Type
  • Pages Visited and Time Spent
  • Referring URL
  • Search Terms Used (if applicable)

3. Purpose of Data Collection

We collect and process your data for the following legitimate business purposes:

  • To respond to contact form submissions and quote requests
  • To manage customer communication and support
  • To personalize our product recommendations and services
  • To understand user behavior and improve website performance
  • To maintain security and prevent unauthorized access

4. Legal Bases for Processing

Although Guatemala does not have specific data protection legislation equivalent to GDPR or CCPA, we adopt international best practices. The legal bases for processing include:

  • Consent: When you voluntarily provide your information through forms
  • Contractual necessity: When preparing or responding to a quotation or wholesale inquiry
  • Legitimate interest: For analytics, security, and operational improvements

5. Data Retention

We retain your personal data only for as long as necessary to fulfill the purposes for which it was collected or as required by applicable law. The retention periods may vary:

  • Inquiries and quotations: Up to 12 months
  • Email correspondence: Up to 24 months
  • Analytics data: Per Google Analytics default retention settings

6. Use of Cookies

We use cookies and similar tracking technologies to:

  • Enable core website functionality
  • Analyze traffic and user behavior
  • Track performance and troubleshoot issues

We currently use:

  • Google Search Console
  • Google Analytics (planned)
  • HubSpot CRM (planned)

For detailed cookie use, refer to our Cookie Policy page.

7. Data Sharing and Disclosure

We do not sell, rent, or trade your personal information. Data may be shared with the following service providers strictly for operational needs:

  • Hosting Provider (for secure storage and website uptime)
  • Google (Search Console, Analytics)
  • HubSpot (for CRM and lead management)
  • Email Service Provider (SMTP services to ensure delivery)
  • CDN or caching systems to optimize website speed

8. International Data Transfers

Our website is accessible globally, but all data is processed and managed from Guatemala. We do not target users from the EU, California, or other jurisdictions with specific data protection laws. However, we take all reasonable precautions to handle any received data with care and compliance.

9. Your Rights

As part of our voluntary commitment to transparency and ethical business practices, we provide the following rights to all users:

  • Right to Access
  • Right to Rectification
  • Right to Erasure
  • Right to Object
  • Right to Withdraw Consent

To exercise any of these rights, please email support@mayancraft.org.

10. Security Measures

We take data security seriously and apply a range of measures:

  • SSL encryption on all form submissions
  • Password-protected access to our backend and CRM tools
  • Regular software updates and vulnerability checks
  • Security plugins and firewall protection

11. Children’s Privacy

Our website is intended for professional buyers and not designed for children under 16. We do not knowingly collect personal data from minors. If we become aware that a child has submitted personal information, we will take steps to delete it immediately.

12. Third-Party Links

This site may include links to third-party websites (e.g., FedEx, social media platforms). Clicking those links may allow third parties to collect or share data about you. We do not control these websites and are not responsible for their privacy policies.

13. Email Communication

If you contact us or subscribe to updates, your email may be used to:

  • Respond to your request or question
  • Share product information
  • Provide quotations or follow-ups

We will never send spam, and every communication will include an option to opt out.

14. Commitment to Transparency

Mayan Craft is built on ethical principles. Our use of your data reflects our broader commitment to fair trade, cultural respect, and responsible business. We consider data privacy part of this ethos.

15. Changes to This Policy

We reserve the right to modify this policy as needed. Updates will be posted here with the revised date. Major changes may be communicated via email if applicable.

16. Contact Details

If you have questions about this Privacy Policy or want to exercise your rights, contact:

Mayan Craft – Data Protection Officer
support@mayancraft.org
Antigua Guatemala, Guatemala

Thank you for trusting Mayan Craft with your information.

“`