Privacy Policy for eleniandsujay.com
At eleniandsujay.com (“we,” “us,” or “our”), we are committed to safeguarding your privacy and ensuring the protection and secure handling of your personal data. This Privacy Policy outlines how we collect, use, store, share, and protect your personal information when you visit our website, interact with our services, or communicate with us. We recognize our responsibility to handle your data lawfully, transparently, and fairly in accordance with applicable data protection regulations, including the General Data Protection Regulation (EU) 2016/679 (GDPR) and the California Consumer Privacy Act of 2018 (CCPA), as amended.
1. Scope of Policy and Data Controller Role
This Privacy Policy applies to the processing of personal data collected through eleniandsujay.com and any related digital properties operated by us. As the data controller, eleniandsujay.com determines the purpose and means of processing your personal data. If you have any questions regarding how your information is processed, you may contact us at [email protected].
2. Categories of Data We Process
We may collect and process the following categories of personal data through your use of eleniandsujay.com:
a. Usage Data:
This includes data about how you interact with our website, such as browser type and version, IP address, geographic location, time zone settings, page views, session duration, referring URLs, and website navigation paths.
b. Account Data:
If you create an account or provide us with your details, we may collect your full name, shipping and billing address, email address, telephone number, and other identifiers relevant to your account profile.
c. Profile Data:
This includes data you provide voluntarily or we infer from your interactions, including your language preferences, purchase history, product interests, and behavioral patterns while using our site.
d. Communication Data:
This consists of records arising from your interactions with us, such as support queries, emails, chat transcripts, contact forms, and any other communications you initiate or respond to.
e. Technical Data:
Technical data includes information about your device used to access eleniandsujay.com, such as device type, operating system, device identifiers, IP address, hardware identifiers, browser plugins, cookies, and other system-level data.
f. Transaction Data:
If you make purchases through our site, we will process your payment information (processed via secure third-party providers), billing details, order histories, fulfillment status, and delivery data.
g. Preference Data:
We collect your consents, marketing and communication preferences, as well as preferences derived through cookies or tracked interactions with our platform or marketing content.
3. Legal Bases for Data Processing
We process your personal data only when a lawful basis applies under relevant data protection laws. These legal bases include:
– Consent: When you have provided specific, informed, freely-given consent for a specific purpose (e.g., newsletter subscription).
– Contractual Necessity: When processing is necessary for the performance of a contract with you (e.g., order fulfillment).
– Legal Obligation: When processing is required to comply with legal or regulatory obligations.
– Legitimate Interests: When processing is necessary for our legitimate business interests, provided these are not overridden by your rights and interests (e.g., fraud prevention, website operation, analytics).
4. Your Data Subject Rights
Subject to the applicable laws, you may exercise the following rights concerning your personal data:
– Right of Access: You may request details on the personal data we process about you.
– Right to Rectification: You may request correction of incomplete or inaccurate personal data.
– Right to Erasure: You may request deletion of your data, subject to legal retention requirements.
– Right to Restrict Processing: You may request limitation of how your data is processed where legally applicable.
– Right to Data Portability: You may request the transmission of your personal data to you or another entity in a structured, machine-readable format.
– Right to Object: Where we process your data based on our legitimate interests or for direct marketing, you may object to such processing.
– Right to Withdraw Consent: Where processing is based on your consent, you may revoke that consent at any time without affecting the lawfulness of prior processing.
Residents of California may also exercise rights under the CCPA, including the right to know, delete, and opt out of the sale or sharing of personal information.
To exercise any of the above rights, you may contact us at [email protected]. We may request verification of your identity before fulfilling a rights request.
5. Data Security Measures
We have implemented robust technical and organizational measures to protect your data, which include:
– Encryption of stored and transmitted data using industry-standard protocols.
– Access controls ensuring restricted and role-based access to systems.
– Regular system patching and continuous monitoring for vulnerabilities.
– Secure backups and disaster recovery procedures.
– Mandatory employee training on data protection and information security best practices.
While we take all reasonable precautions, no system can be guaranteed as 100% secure. We encourage you to use best practices for keeping your account credentials safe.
6. International Data Transfers
Where we transfer your personal data outside of your jurisdiction (including outside the European Economic Area or California, USA), we ensure appropriate legal safeguards are in place, including:
– Standard Contractual Clauses approved by the European Commission;
– Data processing agreements with third-party processors;
– Transfers made with adequacy decisions where applicable.
7. Data Retention
We retain personal data only for as long as necessary to fulfill the purposes for which it was collected, including:
– Usage Data: retained for up to 12 months.
– Account Data: retained up to 6 years following account closure.
– Profile Data: retained for as long as the account is active or for service improvement (maximum 24 months after last interaction).
– Communication Data: retained for up to 3 years for record-keeping.
– Technical Data: retained for up to 12 months to support security and analytics.
– Transaction Data: retained as required by tax, accounting, and legal obligations (typically 7 years).
– Preference Data: retained until consent is withdrawn or the data becomes obsolete.
Data may be retained for longer as required by applicable law, or for legitimate interest where legally justified.
8. Cookie Policy
Our use of cookies on eleniandsujay.com supports a tailored user experience and includes the following types:
– Essential Cookies: Required for core site functionality, such as page navigation and secure access.
– Functional Cookies: Enable enhanced features, such as saved preferences or language selection.
– Analytics Cookies: Provide anonymous insights into user behavior and website performance.
– Performance Cookies: Used to monitor site uptime, load times, and performance optimization activities.
9. Cookie Management and Compliance
You have the ability to manage your cookie consent preferences at any time by adjusting your browser settings or using our cookie banner for granular control. In accordance with GDPR and CCPA:
– We do not deploy non-essential cookies without explicit consent when required by region.
– We provide the right to opt out of the sale or sharing of your data where applicable.
– Cookie identifiers and tracking data are handled as personal data under this policy.
10. Children’s Privacy
Our services are not directed at children under the age of 13, and we do not knowingly collect personal data from children. If we become aware that we have collected personal data from a child without verified parental consent, we will take steps to delete that information promptly. If you believe a child has submitted personal data to eleniandsujay.com, please contact us at [email protected].
11. Policy Amendments
We reserve the right to revise or update this Privacy Policy periodically. Material changes will be communicated through appropriate channels including notices on eleniandsujay.com or via direct communication. Continued use of our services following such updates constitutes your acceptance of the revised policy conditions.
12. Contact Us
For inquiries, concerns, or the exercise of your privacy rights, you may contact us via email at:
Email: [email protected]
We are committed to ensuring your privacy rights are respected and we aim to respond to any data protection requests in a prompt and transparent manner.
This policy reflects our ongoing commitment to complying with global privacy regulations including the GDPR and CCPA. If you have any concerns about your personal data or wish to learn more about how we protect your information, please reach out to us directly using the contact email above.