Privacy Policy

Last updated: December 14, 2025

This Privacy Policy explains how CMA DISHMACHINES (“we,” “us,” or “our”) collects, uses, shares, and protects personal information when you visit our website, purchase our products, or otherwise interact with us.

1. Information We Collect

We may collect the following categories of personal information:

Information you provide directly

• Name
• Company or organization name
• Email address
• Phone number
• Billing and shipping address
• Account login credentials
• Order history and purchase details
• Communications with us (emails, support requests)

Information collected automatically

• IP address
• Browser type and device information
• Pages visited and actions taken on the site
• Cookies and similar tracking technologies

Information from third parties

• Payment confirmation from payment processors
• Shipping updates from logistics providers
• Analytics and advertising partners (where consent is given)

2. How We Use Your Information

• Process and fulfill orders
• Create and manage customer accounts
• Provide customer support
• Communicate about orders, products, or updates
• Improve website functionality and performance
• Comply with legal and regulatory obligations
• Prevent fraud and ensure security

3. Legal Bases for Processing (GDPR)

• Contractual necessity – to fulfill purchases and provide services
• Legitimate interests – to operate, improve, and secure our business
• Consent – for marketing communications and non-essential cookies
• Legal obligation – to comply with applicable laws

4. Cookies and Tracking Technologies

We use cookies and similar technologies to operate our website, analyze usage, and (with consent) support marketing activities.

You may manage your cookie preferences at any time through our cookie consent tool or browser settings.

5. Data Retention

We retain personal information only as long as necessary to:

• Fulfill the purposes outlined in this policy
• Meet contractual and legal requirements
• Resolve disputes and enforce agreements

Retention periods vary depending on data type and legal obligations.

6. International Data Transfers

We are based in the United States and may transfer personal data to the U.S. and other countries.

Where required by law, we rely on appropriate safeguards such as:

• Standard Contractual Clauses (SCCs) approved by the European Commission
• Other lawful transfer mechanisms

7. Sharing of Personal Information

• Payment processors
• Shipping and fulfillment providers
• Website hosting and IT service providers
• Analytics and marketing providers (with consent)
• Legal or regulatory authorities when required

We do not sell personal information for money.

8. California Privacy Rights (CPRA)

Categories of Personal Information Collected

• Identifiers (name, email, address, IP address)
• Commercial information (purchase history)
• Internet activity (website usage)
• Geolocation data (approximate location based on IP)

Sources of Personal Information

• Directly from you
• Automatically through website interactions
• From service providers involved in transactions

Selling or Sharing of Personal Information

We do not sell personal information for monetary compensation. Some data sharing for analytics or advertising may be considered “sharing” under California law.

California Consumer Rights

• Know what personal information we collect and share
• Request access to your personal information
• Request deletion of your personal information
• Request correction of inaccurate information
• Opt out of selling or sharing
• Not be discriminated against for exercising your rights

9. GDPR & UK-GDPR Rights

• Access your personal data
• Correct inaccurate data
• Request deletion of your data
• Restrict or object to processing
• Request data portability
• Withdraw consent at any time
• Lodge a complaint with a supervisory authority

10. Canada Privacy Rights (PIPEDA)

We collect personal information only for identified business purposes and with appropriate consent.

• Request access to personal information
• Request corrections to inaccurate data
• Ask questions about our privacy practices

11. Data Security

We use reasonable administrative, technical, and physical safeguards to protect personal information from unauthorized access, disclosure, or misuse.

12. Children’s Privacy

Our services are not directed to individuals under 16 years of age, and we do not knowingly collect personal information from children.

13. Contact Information

14. Changes to This Policy

We may update this Privacy Policy from time to time. Updates will be posted on this page with a revised effective date.