Privacy Policy for IrresistibleCathy.com
1. Introduction
At IrresistibleCathy.com (“we,” “us,” or “our”), we are fully committed to respecting and protecting your privacy. We understand the importance of safeguarding personal information and are dedicated to transparency in our practices regarding the collection, use, and sharing of your data. This Privacy Policy outlines how we manage your personal information in compliance with applicable data protection laws, including the General Data Protection Regulation (GDPR) and the California Consumer Privacy Act (CCPA).
2. Scope of Policy and Data Controller Role
This Privacy Policy applies to all personal data collected through our website, irresistiblecathy.com, and any related services, features, or content we provide. For purposes of data protection laws, IrresistibleCathy.com is the “data controller,” meaning we determine the purposes and means of processing your personal data. If you have any questions about this Policy or your data, you may contact us at: [email protected].
3. Categories of Data Processed
We may collect and process the following categories of personal data:
3.1. Usage Data
Information automatically collected when you interact with our website, such as your IP address, browser type and version, operating system, referral URL, pages visited, date and time of visit, and session duration.
3.2. Account Data
Information you provide when you create or update an account, including your name, email address, phone number, mailing address, username, and other identifiers.
3.3. Profile Data
Data relating to your website behavior and profile preferences, including saved items, viewing history, wishlist selections, user-generated content, and purchase behavior.
3.4. Communication Data
Information related to your correspondence with us, including support requests, email messages, chat interactions, and communication preferences.
3.5. Technical Data
Details about the devices and technologies you use to access our website, such as device type, hardware model, operating system, browser settings, mobile network data, and platform identifiers.
3.6. Transaction Data
Details related to orders, payments, shipping and billing addresses, payment confirmations, and order history.
3.7. Preference Data
Marketing communication preferences, opt-in or opt-out choices, interests, shopping preferences, and survey responses.
4. Legal Bases for Processing
We process your personal data only when there is a lawful basis to do so, which includes:
– Consent: Where you have explicitly provided consent (e.g., subscribing to our newsletter).
– Contract: Where processing is necessary to fulfill a contract with you (e.g., completing a product sale).
– Legal Obligation: When we are required to process data to comply with applicable law or regulation.
– Legitimate Interest: Where processing is necessary for our legitimate business interests and does not outweigh your rights and freedoms (e.g., website security, internal analytics).
5. Your Rights
As a data subject under GDPR or a consumer under CCPA, you have several rights, which include:
– Right of Access: You may request access to the personal data we hold about you.
– Right to Rectification: You can request that we correct any inaccuracies in your data.
– Right to Erasure: Also known as the “right to be forgotten,” you may request deletion of your data.
– Right to Restriction: You can request the temporary suspension of processing in certain circumstances.
– Right to Portability: You may request a copy of your data in a structured, machine-readable format.
– Right to Object: You can object to processing based on legitimate interests or direct marketing.
– Do Not Sell My Personal Information (CCPA): California residents have the right to opt-out of the sale of personal data.
6. Security Measures
To ensure the confidentiality, integrity, and availability of your personal data, we implement various technical and organizational safeguards, including:
– SSL encryption for data transmission
– Role-based access controls
– Periodic security audits and training for staff
– Secure data storage solutions and regular backups
These measures are designed to protect your information from unauthorized access, misuse, disclosure, or loss.
7. International Transfers
We may transfer your personal data to jurisdictions outside of your home country, including countries that may not offer the same level of protection. Where such transfers occur, we implement appropriate safeguards, such as:
– Standard Contractual Clauses approved by the European Commission
– Binding corporate rules with subcontracted processors
– Transfer based on adequacy decisions where applicable
8. Data Retention
We retain personal data only as long as necessary to fulfill the purposes for which it was collected, or as required by law. Guiding retention timeframes include:
– Account and profile data: Retained while your account is active and for up to 2 years after closure
– Communication records: Retained for 3 years for audit and legal compliance
– Transaction data: Retained for 7 years for accounting and tax compliance
– Technical and usage data: Retained for 12 months for analytics
– Marketing preferences: Retained until you opt out or request deletion
9. Cookie Policy
Our website uses cookies and similar technologies to enhance user experience and collect information for various purposes. Types of cookies used include:
– Essential Cookies: Necessary for website functionality, such as session management and navigation.
– Functional Cookies: Enable advanced features like remembering preferences or custom settings.
– Analytics Cookies: Help us understand website traffic and usage behavior through tools like Google Analytics.
– Performance Cookies: Evaluate the efficiency of our services and promotional efforts.
10. Cookie Management and Compliance
You have full control over the cookies we use. Upon visiting irresistiblecathy.com, you’ll be presented with a cookie consent tool that allows you to accept, reject, or customize cookie settings. You also have the ability to manage or delete cookies via your browser settings.
We comply with all applicable GDPR and CCPA obligations regarding cookie usage and user consent, including granular opt-in functionality for users in the EU and a “Do Not Sell My Personal Information” link for California residents.
11. Special Protections for Children
We do not knowingly collect or solicit personal information from children under the age of 13. If we discover that we have inadvertently collected such data, we will promptly delete it. Parents or legal guardians who believe their child has submitted personal data on irresistiblecathy.com are encouraged to contact us at: [email protected].
12. Policy Updates and User Notifications
We reserve the right to update this Privacy Policy at our discretion. When changes occur that materially affect your rights or the way we use your personal data, we will notify you through prominent updates on our website or via direct communication when appropriate. We encourage periodic review of this Privacy Policy to stay informed about how we are protecting your data.
13. Contact Us
If you have any questions, requests, or concerns regarding this Privacy Policy or your personal information, please contact us at:
Email: [email protected]
We are committed to upholding the highest standards of data protection. If you believe we have not fulfilled your rights under applicable law, you have the right to lodge a complaint with your local data protection authority.
This Privacy Policy reflects our dedication to compliance and user trust. For any privacy-related concerns, please don’t hesitate to reach out to us directly at [email protected].