Privacy Policy
This Privacy Policy explains how GMBF Group Holding Limited (“GMBF Group”, “we”, “us”) collects, uses, stores, and protects information when you use our website at www.gmbfgroup.com, our website AI assistant, our contact inquiry form, and our Facebook Messenger AI service bot. It also outlines information we may provide to Meta/Facebook for app review and platform requirements.
1. Who We Are
GMBF Group Holding Limited operates digital services including our corporate website, website AI assistant, contact inquiry form, and Facebook Messenger AI service bot to provide automated customer support, product and service information, and business communication.
2. Scope of This Policy
This policy applies to the following services:
- Website — pages hosted at gmbfgroup.com and related subpages.
- Website AI Assistant — the chat widget available on our website.
- Contact Inquiry Form — the “Send Us an Inquiry” form on our website.
- Facebook Messenger AI Bot — our automated assistant on Facebook Messenger.
3. Information We Collect
3.1 Website AI Assistant
When you use the website chat widget, we may collect:
- Messages and questions you send to the assistant.
- A session identifier stored in your browser (
localStorage) to maintain conversation context. - Technical metadata such as timestamps and server logs needed for operation and security.
We do not require you to create an account to use the website assistant. We do not intentionally collect sensitive personal data through the chat widget unless you choose to include it in your message.
3.2 Contact Inquiry Form
When you submit an inquiry through our website form, we collect:
- Your name.
- Your email address.
- Your phone number.
- Your message or inquiry description.
3.3 Facebook Messenger AI Bot
When you interact with our Messenger bot, we may collect:
- Public profile details provided by Messenger (such as name and user ID).
- Messages and interaction content sent to the bot.
- Technical metadata (timestamps, message IDs, language/locale where available).
- Contact details you voluntarily provide in conversation.
3.4 General Website Use
When you browse our website, limited technical information may be processed automatically, such as:
- Browser type, device type, and general usage data in server or hosting logs.
- Theme preference stored locally in your browser (
localStorage) if you change day/night mode. - Approximate location data (latitude/longitude for Yangon) sent only to a weather provider to display local weather on the homepage. No personal identity is attached to this request.
4. How We Use Information
- To respond to questions and provide requested services.
- To process and follow up on contact inquiries.
- To operate, maintain, and improve our website, chat assistant, and Messenger bot.
- To maintain service security, troubleshoot issues, and prevent abuse.
- To comply with legal, regulatory, and platform obligations.
5. Cookies and Local Browser Storage
Our website does not use advertising or tracking cookies. We
may use browser localStorage for essential
functionality only, including:
- Website AI assistant session ID (
gmbf_webassist_session). - Theme preference (day/night mode), where applicable.
You can clear this data at any time through your browser settings. Clearing stored data may reset your chat session or site preferences.
6. Third-Party Services
We use trusted third-party providers to operate our services:
- Google Gemini — processes chat messages from the website assistant and Messenger bot to generate automated replies. Message content is sent to Google’s API for this purpose.
- EmailJS — delivers contact form submissions from our website to GMBF Group email. Form fields (name, email, phone, message) are transmitted through EmailJS when you submit an inquiry.
- Meta/Facebook — hosts Messenger conversations and provides user identifiers needed for the Messenger bot.
- Open-Meteo — provides public weather data displayed on our homepage. Only approximate coordinates for Yangon are sent; no personal identifiers are included.
- Hosting and infrastructure providers — including services used to host our website and AI backend (for example, cloud hosting platforms).
- Content delivery services — such as Google Fonts and Font Awesome, used to load fonts and icons on our website.
These providers process data only as needed to deliver their service to us. We select providers with reasonable security practices and use them under applicable contractual and operational controls where available.
7. Data Shared with Facebook/Meta
For Messenger functionality and app review, GMBF Group may submit or provide the following information to Facebook/Meta:
- App details (app name, business verification details, contact email, domain).
- Requested Messenger permissions and justification for each permission.
- Bot functionality description, user flow, and use-case documentation.
- Screenshots or screen recordings for app review and feature demonstration.
- This public Privacy Policy URL and data handling explanations.
- Data deletion instructions and a contact method for user requests.
8. Legal Basis and User Rights
Depending on applicable law, you may have rights to request access, correction, deletion, restriction, or objection to processing of your data. You can exercise these rights using the contact details in Section 13.
9. Data Retention
We keep data only as long as needed for service delivery, support, security, legal compliance, and dispute resolution. Website chat session data is retained temporarily in server memory for active conversations and is not intended for long-term storage. Contact form submissions are retained as needed to respond to inquiries and for legitimate business records. Data no longer required is deleted or anonymized where feasible.
10. Data Security
We implement reasonable administrative, technical, and operational safeguards to protect user data against unauthorized access, loss, misuse, or disclosure. No method of transmission or storage is completely secure, and we cannot guarantee absolute security.
11. Data Deletion Requests
You may request deletion of your data by contacting us at contact@gmbfgroup.com. Please include enough information for us to verify your request, such as:
- Your Messenger account name or user ID (for Messenger bot data).
- The email address used in a contact form submission.
- Approximate date and content of a website chat conversation, if applicable.
You may also clear website assistant session data at any time through your browser’s local storage settings.
12. Updates to This Policy
We may update this Privacy Policy to reflect legal, technical, or service changes. The latest version will be published on this page with an updated effective date.
13. Contact
GMBF Group Holding Limited
Email: contact@gmbfgroup.com
Website: www.gmbfgroup.com