Introduction

This Privacy Policy explains how BDM HARDWARE collects, uses, stores, and protects your personal data when you use our website or purchase our products.

BDM HARDWARE is established in Lesotho and complies with the EU General Data Protection Regulation (GDPR) for customers located in the European Union.

Data Controller: BDM HARDWARE, Maseru, Lesotho.

Information We Collect

Personal Information

We may collect the following data:

Name and contact details (email, phone, address)
Order and purchase information
Billing and payment information
Customer support correspondence
Website usage and analytics data (via cookies)

Technical / Product Information

Product serial numbers
Warranty details
Technical support information

How We Use Your Information

To process and ship your orders
To provide customer and technical support
To manage warranty and product registrations
To send updates related to your purchases
To comply with legal obligations
To send marketing communication (only with consent)

Legal Basis for Processing

Contract: To fulfil a purchase or service request
Legitimate interest: To operate and improve our services
Consent: For email marketing and optional cookies
Legal obligation: Compliance with accounting and consumer-protection laws

Data Sharing

We do not sell or rent your personal information.

We may share data only with:

Shipping and logistics partners
Payment processors
Technical support and warranty service partners
Government authorities when legally required

International Data Transfers

As BDM HARDWARE is based in Lesotho, your data may be transferred outside the EU. When processing data of EU residents, we implement appropriate contractual safeguards (Standard Contractual Clauses) to ensure GDPR-level protection.

Data Security

Encrypted storage and secure servers
Restricted access to personal data
Regular security audits
Secure payment processing

Data Retention

We retain personal data only as long as necessary:

Data Type	Retention Period	Purpose
Order & invoice data	7 years	Accounting and legal requirements
Warranty data	2 years after expiry	Service and legal obligations
Customer account	5 years of inactivity	Customer support
Marketing data	Until consent withdrawn	Marketing communications

Your GDPR Rights

If you are an EU resident, you may exercise the following rights:

Right to access your data
Right to correct inaccurate information
Right to delete your data
Right to restrict processing
Right to object to processing
Right to data portability
Right to withdraw consent at any time
Right to lodge a complaint with an EU supervisory authority

Cookies

We use essential, analytical, and preference cookies. You can control cookies in your browser settings or through our cookie banner.

EU GDPR Representative

For EU residents, our GDPR Article 27 representative is:

Company: (Add EU representative company here)
Address: (EU address)
Email: (EU rep email)

Contact Us

For privacy questions or data requests:

Company: BDM HARDWARE
Email: privacy@bdmhardware.com (or your real email)
Address: Maseru, Lesotho