Privacy Policy for GeorgiaSantafe.com
1. Introduction
At GeorgiaSantafe.com (“we,” “us,” or “our”), we value and respect the privacy of our users and are committed to protecting the personal information you share with us. We recognize our responsibility to handle your personal data with care, transparency, and security. This Privacy Policy outlines how we collect, use, and protect your personal information in compliance with the General Data Protection Regulation (GDPR), the California Consumer Privacy Act (CCPA), and applicable international privacy laws.
2. Scope of this Policy and Data Controller Role
This Privacy Policy applies to all users, visitors, and customers who access our website at georgiasantafe.com and interact with our services. GeorgiaSantafe.com serves as the data controller for all personal data processed in connection with the website and related services. As a data controller, we determine the purposes and means of processing your personal information as detailed herein.
3. Categories of Personal Data We Process
We collect various categories of data to operate efficiently and provide you with seamless access to our services. The personal data we collect includes the following:
a) Usage Data
Information about how you access and use our website, including your IP address, browser type, geographic region, operating system, referral sources, pages visited, session duration, and clickstream behavior.
b) Account Data
Information you provide when creating an account or placing an order, such as your full name, mailing address, email address, phone number, and account credentials.
c) Profile Data
Preferences, interests, purchase history, wish lists, and behavioral patterns collected through your interactions and customizations on our platform.
d) Communication Data
Records of correspondence between you and GeorgiaSantafe.com, including inquiries, support requests, feedback messages, and internal notes regarding communication history.
e) Technical Data
Device-related information including hardware model, mobile device identifiers, browser plug-ins, language settings, and system configuration parameters.
f) Transaction Data
Payment details (processed via third-party providers and stored securely), billing and shipping addresses, order contents, and delivery tracking identifiers.
g) Preference Data
User-submitted preferences regarding marketing communications, newsletter subscriptions, advertising reach, product affinities, and cookie consent choices.
4. Legal Bases for Processing
We process your personal data in accordance with one or more of the following lawful bases under GDPR and CCPA:
– Consent: Where you have given us explicit consent (e.g., signing up for marketing emails).
– Contractual Necessity: To fulfill a contract with you, such as processing an order or delivering services.
– Legal Obligation: When required to comply with legal or regulatory obligations.
– Legitimate Interests: When processing is necessary for our legitimate business interests, such as enhancing user experience, fraud prevention, or maintaining website functionality, provided those interests are not overridden by your rights and interests.
5. Your Rights
As a data subject, you have the following rights regarding your personal information:
– Right of Access: You may request a copy of the personal data we hold about you.
– Right to Rectification: You may request correction of inaccurate or incomplete information.
– Right to Erasure: You may request deletion of your data, where allowed by law.
– Right to Restrict Processing: You may request limitations on how we use your data.
– Right to Data Portability: You may request your data in a structured, commonly used, and machine-readable format.
– Right to Object: You have the right to object to data processing based on legitimate interest or for direct marketing purposes.
To exercise any of these rights, please contact us at [email protected]. We strive to comply with all verified requests in accordance with applicable laws.
6. Security Measures
We employ industry-standard security safeguards to protect your personal data, including but not limited to:
– Data encryption during transmission and at rest.
– Strict access controls and authentication protocols.
– Regular backups and failover mechanisms to protect data continuity.
– Staff training on data privacy, internal audits, and secure data handling procedures.
Although we take all reasonable precautions, no system is completely secure. We advise all users to take necessary steps to protect their personal information while accessing GeorgiaSantafe.com.
7. International Data Transfers
Where data is transferred outside the European Economic Area (EEA), we ensure adequate protection through:
– Standard Contractual Clauses (SCCs) approved by the European Commission;
– Data transfer agreements consistent with GDPR mandates;
– Adherence to applicable privacy regulations in the recipient’s jurisdiction.
By using GeorgiaSantafe.com, you acknowledge and consent to such international data transfers as necessary.
8. Data Retention
We retain your personal data only for as long as necessary to fulfill the purposes for which it was collected, including:
– Usage Data: Up to 12 months for analytics and diagnostics.
– Account and Profile Data: Retained for the duration of your account and deleted upon request.
– Communication Data: Stored for up to 24 months for quality control and service improvement.
– Transaction Data: Retained for 7 years for tax and legal compliance.
– Preference Data: Maintained until you revoke consent or update your preferences.
We periodically review and securely dispose of non-essential or outdated information.
9. Cookie Policy
We use cookies and similar technologies to enhance user experience and gather insights. These include:
– Essential Cookies: Enable basic features like page navigation and secure access.
– Functional Cookies: Remember your site preferences and customization settings.
– Analytics Cookies: Help us understand how users interact with the site (e.g., Google Analytics).
– Performance Cookies: Optimize load speeds, responsiveness, and feature availability.
Third-party tools integrated into GeorgiaSantafe.com may also place cookies in accordance with their own privacy policies.
10. Cookie Management and Compliance
Upon your first visit, and intermittently thereafter, we seek your explicit consent to place non-essential cookies. You may manage cookie preferences at any time via your browser settings or dedicated tools provided on the website.
California residents have the right to:
– Opt-out of the sale or sharing of personal information;
– Request disclosure of what categories of personal information we collect;
– Request deletion of personal information on file.
We process CCPA requests within the permitted timeframes and do not discriminate against users who exercise their privacy rights.
11. Children’s Privacy
GeorgiaSantafe.com is not intended for use by children under the age of 13. In compliance with the Children’s Online Privacy Protection Act (COPPA) and applicable international laws, we do not knowingly collect personal data from minors. Parents or legal guardians who believe that their child has provided us with personal information should contact us at [email protected] to request deletion.
12. Updates to this Privacy Policy
We reserve the right to revise, amend, or update this Privacy Policy at our discretion to reflect changes in legal requirements or functionality offered at GeorgiaSantafe.com. Updates will be posted on this page. You are encouraged to review this policy periodically to stay informed about how we protect your information.
13. Contact Us
If you have any questions, concerns, or requests regarding this Privacy Policy or how we handle your personal data, please contact us at:
Email: [email protected]
Website: https://georgiasantafe.com
We are committed to upholding the highest standards of data protection and privacy compliance. If you believe your rights under GDPR, CCPA, or relevant privacy regulations have been violated, you also have the right to lodge a complaint with your local data protection authority.