PRIVACY POLICY
1. Introduction
At kirkbymalzeard.com (“we”, “us”, or “our”), we are committed to safeguarding the privacy and personal data of our website visitors, users, and customers (“you”, “your”). Your trust is important to us, and we take our obligations under data protection laws very seriously. This Privacy Policy explains how we collect, use, disclose, and protect your personal information in accordance with the General Data Protection Regulation (GDPR), the California Consumer Privacy Act (CCPA), and other applicable data protection laws.
2. Scope and Data Controller
This Privacy Policy applies to all personal data processed through kirkbymalzeard.com and any related services, features, or communications. For the purposes of applicable data protection legislation, the data controller responsible for your personal data is kirkbymalzeard.com. If you have questions or concerns about your data privacy, please contact us at [email protected].
3. Categories of Data Processed
We collect and process the following categories of personal data, depending on your interactions with our website and services:
a) Usage Data
This includes information such as your IP address, browser type, geographical location, referral source, pages visited, session duration, and how you interact with our website.
b) Account Data
If you register for an account with our website or services, we may collect your name, postal address, email address, and telephone number.
c) Profile Data
We may process information relating to your preferences, online behavior, purchase history, and other profile details linked to your user account or usage of our services.
d) Communication Data
This includes information you voluntarily provide when communicating with us, such as through customer support inquiries, contact forms, or email correspondence.
e) Technical Data
We may collect data about your device and software, including operating system, device identifiers, screen resolution, language settings, and browser settings.
f) Transaction Data
For purchases or service orders, we may collect payment details (processed securely via third-party payment processors), billing/shipping information, and order history.
g) Preference Data
This includes your marketing preferences, such as opt-in/opt-out status, areas of interest, and other related information gathered in connection with consent and communication preferences.
4. Legal Bases for Processing Personal Data
Legal justifications for data processing activities on kirkbymalzeard.com include:
– Consent: Where you have given explicit consent (e.g., for email marketing or optional cookies).
– Contractual Necessity: To fulfill contractual obligations or pre-contractual requests.
– Legitimate Interests: To manage our operations and improve our services, provided such interests are not overridden by your rights.
– Legal Obligation: Where processing is required for compliance with applicable laws or court orders.
5. Your Data Subject Rights
Under GDPR and CCPA (where applicable), you have the following rights:
– Right of Access: The right to confirm whether we process your personal data and to request a copy of such data.
– Right of Rectification: The right to have incomplete or inaccurate data corrected.
– Right to Erasure: The “right to be forgotten” — to have your personal data removed from our systems, subject to exceptions.
– Right to Restrict Processing: To limit our processing under certain conditions (e.g., contested accuracy).
– Right to Data Portability: To obtain and reuse your data across different services, where our processing is based on consent or contract and is automated.
– Right to Object: To object to our processing relying on legitimate interests or direct marketing.
– Right to Opt-Out of Sale: Under CCPA, California residents can request that their personal information not be sold.
To exercise any of these rights, please contact us at [email protected]. We will respond in accordance with applicable data protection laws.
6. Security Measures
We apply technical and organizational measures to maintain the security of your personal data, including:
– Data encryption in transit and at rest.
– Access controls and secure authentication procedures for system administrators.
– Regular data backups and testing of disaster recovery protocols.
– Ongoing staff training on privacy and data protection principles.
While we strive to use commercially acceptable means to protect your personal data, no method of transmission over the internet is 100% secure. Therefore, we cannot guarantee absolute security.
7. International Data Transfers
Where data is transferred outside the European Economic Area (EEA) or jurisdictions with similar data protections, we ensure such transfers are protected through the use of:
– Standard Contractual Clauses (SCCs) approved by the European Commission.
– Other appropriate safeguards as required by applicable laws.
We ensure that your data continues to be protected to GDPR standards wherever it is processed.
8. Data Retention
We retain personal data only for as long as necessary for the purposes described in this Privacy Policy or as required by law. Retention periods vary based on data type:
– Usage and Technical Data: Up to 24 months, for analytics and system monitoring.
– Account and Profile Data: As long as the account remains active and for up to six years thereafter for legal or operational purposes.
– Communication Data: Up to six years to maintain support history and record communications.
– Transaction Data: Retained for up to seven years for financial auditing and tax compliance.
– Preference Data: Until you withdraw consent or update your preferences.
Once data is no longer needed, it will be securely deleted or anonymized.
9. Cookie Policy
Our website uses cookies and similar technologies to enhance your browsing experience and provide essential services. Categories include:
– Essential Cookies: Required for core functionalities such as account access or transaction processing.
– Functional Cookies: Enable enhanced user experience features, like personalisation or remembering settings.
– Analytics Cookies: Help us understand user behavior and website performance via aggregated data.
– Performance Cookies: Improve the speed and usability of our website.
Third-party service providers such as Google Analytics may also set cookies, which are subject to their own privacy policies.
10. Cookie Management and Compliance
We provide a cookie management tool in accordance with GDPR and CCPA requirements. Upon first visit to kirkbymalzeard.com, users are presented with a cookie consent banner that allows them to:
– Accept or reject specific categories of cookies.
– Modify their preferences later through the cookie settings panel.
– Opt-out of non-essential cookies.
For California residents, we honor “Do Not Track” signals and permit requests to opt out of data sales or shared advertising practices.
11. Children’s Privacy
Our website and services are not intended for children under the age of 13. We do not knowingly collect personal data from children. If we become aware that data has been collected from a child without verified parental consent, we will delete such information promptly. Parents or guardians who believe that their child may have submitted personal data may contact us at [email protected].
12. Policy Updates
We reserve the right to update this Privacy Policy from time to time in response to legal, technical, or business developments. Users will be notified of material changes via announcements on our website or direct communication when required by law. Continued use of the website after any updates constitutes agreement to the revised Privacy Policy.
13. Contact Us
For any inquiries or concerns regarding this Privacy Policy or our privacy practices, you may contact us at:
Email: [email protected]
We are committed to complying with all applicable privacy regulations and providing transparent, responsible data stewardship to all users of kirkbymalzeard.com.
