This policy explains what personal data we collect when you use buylanmaoasiatica.com, why we collect it and what we do with it. Last updated: 14 October 2026.
What we collect
- Order details: email address, phone number, recipient name, delivery address and, if you give it, your institution. We need these to ship the order and contact you about it.
- Payment details: the cryptocurrency, amount and transaction ID of your payment. Blockchain transactions are public by design. We never see or store wallet keys.
- Newsletter and waitlist: your email address and the date you confirmed it.
- Technical data: your IP address is used briefly to guess your country (to pre-fill the destination and phone prefix) and to limit abusive requests. We store only a truncated hash of it with an order.
Cookies
We set one functional cookie, bla_draft, which keeps your unfinished order attached to your browser for up to 30 days. It is HttpOnly and is not used for tracking. We do not use advertising cookies or third-party analytics cookies. Marketing emails contain a pixel that records whether the email was opened.
Third parties that receive data
- Exchange-rate and blockchain services (CoinGecko, Coinbase, mempool.space, Blockstream, Litecoinspace, BlockCypher, Etherscan, Blockscout) receive our wallet addresses, never your personal details.
- Address autocomplete (Photon by Komoot, or Google Places if enabled) receives the text you type in the street address field.
- Country lookup (ipwho.is or ipinfo.io) receives your IP address.
- Email delivery through our email provider, which processes your address to deliver messages.
- Couriers and customs authorities receive the delivery name, address and phone number needed to deliver the parcel.
How long we keep data
Unfinished orders without an email are deleted after 30 days. Unfinished orders with an email are deleted after 90 days. Completed order records are kept for as long as tax and accounting law requires. Newsletter data is kept until you unsubscribe.
Your rights
You can ask for a copy of your data, ask us to correct it, or ask us to delete it where we are not required to keep it. Every marketing email has an unsubscribe link. To make a request, use the contact form and give the email address you used.
Security
The site runs over HTTPS. Order links use random single-use tokens rather than order numbers, API keys are stored encrypted, and staff access to order data is limited to people who handle fulfilment.