Privacy Policy for iredhanded.com
1. Our Commitment to Privacy and Data Protection
At iredhanded.com, we value and respect your privacy. We are committed to protecting your personal information and handling data in a responsible and transparent manner in accordance with applicable data protection legislation, including the General Data Protection Regulation (GDPR) and the California Consumer Privacy Act (CCPA). This Privacy Policy describes how we collect, use, store, and disclose your personal data when you access or interact with our website and services.
2. Scope of this Policy and Data Controller Information
This Privacy Policy applies to all users of the website iredhanded.com, including visitors, customers, and registered account holders. For the purposes of applicable data protection laws, iredhanded.com is the controller of your personal data. As the data controller, we determine the purposes and means of processing your personal information. Should you have any questions about data processing or wish to exercise your rights, you may contact us at [email protected].
3. Categories of Personal Data Collected and Processed
We collect and process the following categories of personal data, depending on your interaction with our website:
a. Usage Data
Includes information such as your IP address, browser type, referring URLs, time and duration of page visits, pages viewed, and navigation paths.
b. Account Data
Includes your name, billing and shipping addresses, email address, phone number, and login credentials created during account registration.
c. Profile Data
Includes your communication preferences, order history, interests, feedback, and behavior while interacting with the website.
d. Communication Data
Includes all correspondence with our support team and contact forms submitted through the website.
e. Technical Data
Includes system configuration details, operating system, browser plug-ins, screen resolution, device type, and other diagnostic information.
f. Transaction Data
Includes payment records, purchased items, delivery details, invoicing, and returns or refunds, when applicable.
g. Preference Data
Includes your consent for marketing communications, preferred shopping categories, and any personal settings configured within your account.
4. Legal Bases for Processing Personal Data
We process your personal data on the following legal bases in compliance with GDPR:
– Contractual Necessity: Processing required to fulfill an agreement with you or to take pre-contractual steps at your request, such as order processing or account creation.
– Legitimate Interests: Operating and improving our services, ensuring security, and analyzing usage trends (always balanced against your privacy rights).
– Consent: For sending marketing communications, non-essential cookies, and other optional uses of data where affirmative opt-in is required.
– Legal Obligations: Compliance with legal and regulatory requirements, such as financial reporting and fraud prevention.
5. Your Data Protection Rights
Under applicable data protection laws, you have the following rights:
– Right of Access: Request confirmation and a copy of the personal data we hold about you.
– Right to Rectification: Request correction of inaccurate or incomplete data.
– Right to Erasure (“Right to be Forgotten”): Request deletion of your personal data under certain conditions.
– Right to Restriction: Request a temporary halt to data processing in specific circumstances.
– Right to Data Portability: Receive your data in a structured, commonly used format and/or request we transmit it directly to another controller.
– Right to Object: Object to processing based on legitimate interest, public interest, or profiling.
– Right to Withdraw Consent: Withdraw your consent at any time, where processing is based on consent.
To exercise any of these rights, please contact us at [email protected].
6. Security Measures
We implement comprehensive security practices to safeguard your personal data, including:
– Encryption of data in transit and at rest.
– Logical access controls and authentication protocols restricting system access to authorized personnel.
– Secure server infrastructure and backups to ensure data resilience.
– Ongoing employee awareness and data protection training.
7. International Data Transfers
Where personal data is transferred to countries outside the European Economic Area (EEA) or your jurisdiction, we ensure such transfers are subject to appropriate safeguards. These include reliance on Standard Contractual Clauses (SCCs), adequacy decisions from the European Commission, or legally recognized equivalents under other data regimes, ensuring your personal data remains protected during cross-border transmissions.
8. Data Retention
We retain your personal data only for as long as necessary for the purposes for which it was collected, or as required for compliance with legal, regulatory, accounting, or reporting obligations. Specifically:
– Account and Transaction Data: Retained for up to 7 years after your last purchase for accounting and tax compliance.
– Communication and Support Logs: Retained for 2 years for customer service and resolution tracking.
– Usage and Technical Data: Retained for up to 18 months for diagnostic analysis and performance optimization.
– Marketing Preferences: Retained until you revoke consent or unsubscribe.
Once data is no longer required, it will be securely deleted or anonymized.
9. Cookie Policy
We use cookies and similar technologies to enhance your experience on iredhanded.com. Cookies are small text files stored on your device that help us analyze website usage, remember user preferences, and enable key functionalities.
Our use of cookies falls into the following categories:
– Essential Cookies: Necessary for core website functions like navigation and secure access.
– Functional Cookies: Remember user settings and preferences to improve usability.
– Analytics Cookies: Gather data on site usage, pages visited, and traffic sources to improve website performance.
– Performance Cookies: Optimize website speed, loading times, and responsiveness.
10. Cookie Management and Compliance
We provide a cookie consent tool in compliance with GDPR and CCPA, allowing users to:
– Select or reject non-essential cookies upon first visit.
– Adjust cookie preferences at any time via the website’s cookie settings module.
– Obtain information about each cookie type and how it impacts your privacy.
We honor global privacy control signals and Do Not Track (DNT) preferences where applicable.
11. Children’s Data Protection
Our website and services are not intended for children under the age of 13. We do not knowingly collect or process personal data from children without parental consent. If we discover that we have collected information from a child under 13 without proper authorization or in violation of applicable laws, we will promptly delete such data. If you become aware of such a case, please contact us immediately at [email protected].
12. Policy Updates
We may revise this Privacy Policy from time to time to reflect changes in our data practices, technologies, or legal obligations. We encourage users to review this page regularly. Where required under law, we will notify you of significant changes via email or prominent notices on iredhanded.com.
13. Contacting Us
For any questions, requests to exercise your rights, or concerns regarding this Privacy Policy or our data processing activities, please contact us at:
Email: [email protected]
We are committed to responding to privacy queries promptly and in accordance with all applicable data protection regulations.
—
At iredhanded.com, safeguarding your data is a foundational priority. We operate in compliance with GDPR, CCPA, and other applicable laws to ensure your personal information is treated with the highest level of security and transparency. For any privacy-related concerns, feel free to reach out to us at [email protected].