Privacy Policy

Privacy Policy for Mahasan.org

Last updated: November 23, 2025

Mahasan.org (“we,” “our,” or “us”) is a Lao news website committed to protecting your privacy. This Privacy Policy explains what information we collect, how we use and share it, and the choices you have. It applies to all visitors and users of https://mahasan.org and its subpages (the “Site”).

If you do not agree with this Policy, please discontinue use of the Site.

1) Information We Collect

We collect information to operate our services, improve content and user experience, ensure security, and comply with legal requirements.

a) Information you provide directly

  • Newsletter subscriptions / Email updates: Name and email address.
  • Contact forms: Name, email, phone (optional), and the content of your message.
  • Comments / User submissions: Name or display name, email (may be required to prevent spam), and comment content.
  • Account information (if user accounts are enabled): Username, email, profile data.

b) Information collected automatically

  • Device and usage data: IP address, browser type and version, operating system, referring/exit pages, timestamps, pages viewed, approximate location (city/country from IP), and performance metrics.
  • Cookies and similar technologies: Session cookies, preference cookies, analytics cookies, and advertising cookies (see “Cookies” below).

c) Information from third parties

  • Analytics: We may use services like Google Analytics to understand traffic and usage patterns.
  • Advertising & measurement tools: We may use tools such as Meta (Facebook) Pixel and other ad networks to measure conversions and improve ad relevance.
  • Social media: If you interact with our content via social media plugins or links, those platforms may share aggregated insights in accordance with their policies.

2) How We Use Your Information

We use personal data to:

  • Provide and maintain the Site, publish content, and deliver features you request.
  • Send communications you opt into (e.g., newsletters, breaking news alerts).
  • Respond to inquiries and provide support.
  • Analyze performance and improve the Site (content quality, navigation, speed).
  • Personalize content and ads (where applicable) and measure campaign performance.
  • Prevent fraud, secure the Site, and enforce our terms.
  • Comply with legal obligations and regulatory requirements.

3) Legal Bases (EEA/UK users)

Where applicable, we process personal data on the following bases:

  • Consent (e.g., for email marketing and certain cookies).
  • Legitimate interests (e.g., site security, analytics to improve content).
  • Contract (e.g., providing an account or services you request).
  • Legal obligation (e.g., recordkeeping, responding to lawful requests).

You may withdraw consent at any time. See “Your Rights” below.

4) Cookies and Tracking Technologies

We use cookies, pixels, and local storage to:

  • Keep you signed in and remember preferences.
  • Perform analytics (e.g., Google Analytics).
  • Support advertising and measurement (e.g., Meta/Facebook Pixel).

Managing cookies: You can control cookies in your browser settings, opt out of Google Analytics via the Google Analytics Opt-out Add-on, and manage ad preferences through your device and ad platforms. Some features may not work properly if you disable cookies.

5) Analytics and Advertising Partners

Google Analytics

We use Google Analytics to collect anonymized or pseudonymized usage data for performance and user experience improvements. Google may process this data as described in its policies.

Meta (Facebook) Pixel

We may use the Meta Pixel to measure conversions and improve ad relevance for our audience. Meta may use cookies and similar technologies to collect or receive information from our Site and elsewhere, and use that information to provide measurement services and target ads.

You can opt out of Meta’s interest-based advertising through your Facebook settings and via industry tools such as YourAdChoices.

6) How We Share Information

We do not sell personal data. We may share information with:

  • Service providers (e.g., hosting, security, analytics, email delivery) under contracts that protect your data.
  • Advertising and measurement partners (as described above), subject to your consent and choices.
  • Legal and compliance: If required by law, regulation, court order, or to protect rights, safety, and security.
  • Business transfers: In connection with a merger, acquisition, or asset transfer. We will take reasonable steps to ensure continuity of protections.

7) Data Retention

We retain personal data only as long as necessary for the purposes described in this Policy:

  • Contact inquiries and support records: up to 24 months.
  • Newsletter data: until you unsubscribe plus a short period to honor the request.
  • Analytics data: per our analytics provider’s standard retention settings (e.g., 14–26 months), unless legally required otherwise.
  • Logs and security data: for a reasonable period to monitor abuse and ensure integrity.

We may retain aggregated or anonymized data for analysis.

8) Your Rights and Choices

Depending on your location, you may have rights to:

  • Access the personal data we hold about you.
  • Correct inaccurate or incomplete data.
  • Delete your data (subject to legal exceptions).
  • Object to or restrict certain processing.
  • Withdraw consent where processing is based on consent.
  • Data portability (receive a copy in a usable format).

To exercise these rights, contact us at [insert email address]. We may need to verify your identity. We will respond within the timeframes required by law.

Email marketing: You can unsubscribe at any time using the link in our emails.

Cookies/Tracking: See “Cookies and Tracking” above for opt-out options.

California residents (CCPA/CPRA): We do not “sell” personal information as defined by California law. You may request access and deletion by contacting us at [insert email address].

9) Children’s Privacy

Our Site is not directed to children under the age of 13, and we do not knowingly collect personal information from children. If you believe a child has provided us personal data, please contact us; we will promptly delete such information.

10) International Transfers

We may process data on servers located outside your country (including outside Laos). When we transfer data internationally, we implement appropriate safeguards consistent with applicable laws.

11) Security

We use reasonable administrative, technical, and physical measures to protect personal data against accidental or unlawful destruction, loss, alteration, and unauthorized disclosure or access. No method of transmission or storage is completely secure; we cannot guarantee absolute security.

12) Third-Party Links

Our Site may contain links to third-party sites, apps, and services. We are not responsible for their privacy practices. Please review their policies before providing personal information.

13) Changes to This Policy

We may update this Privacy Policy from time to time. The “Last updated” date at the top indicates when the latest changes were made. Significant changes will be highlighted on the Site where feasible.

14) Contact Us

If you have questions or requests regarding this Privacy Policy or your personal data, you can reach us at:

  • Email: support@eds.la
  • Postal Address: 302/3B, 3F Vieng Vang Tower, Boulichan Rd., Dongpalan Thong Village, Sisattanak District, Vientiane Capital, Lao P.D.R
  • Website: https://mahasan.org