Privacy Policy
1. Introduction
At Ipswich Witches, we are committed to safeguarding the personal data of our website visitors, users, customers, and partners. Your privacy is of paramount importance to us, and we are dedicated to upholding the highest standards of data protection in accordance with applicable legislation, including the General Data Protection Regulation (GDPR) and the California Consumer Privacy Act (CCPA). This policy outlines how we collect, use, disclose, and protect your information when you visit or engage with our website, ipswich-witches.com.
2. Scope of This Policy and Role of Data Controller
This Privacy Policy applies to all individuals who access or use the services and content provided through ipswich-witches.com. For the purposes of applicable privacy legislation, Ipswich Witches acts as the Data Controller for the personal data processed through this website. This means we are responsible for determining the purpose and means of processing your personal data.
3. Categories of Data We Process
We collect and process a variety of personal data throughout your interaction with our website and services:
– Usage Data: Information collected automatically through ipswich-witches.com, including your IP address, browser details, referring URLs, pages viewed, session duration, and interactions with the website.
– Account Data: When you create an account or make a purchase, we may collect your name, postal address, email address, and phone number.
– Profile Data: Includes your preferences, communication settings, past purchases, behavioral history, and website usage patterns to provide personalized services and recommendations.
– Communication Data: Correspondence between you and our support team, inquiries submitted through contact forms, and all historical communication between you and Ipswich Witches.
– Technical Data: Device identifiers, browser type and version, OS type and version, mobile device information, system configurations, and security settings.
– Transaction Data: Details related to purchases made through our site, including payment information, billing and shipping details, transaction history, and fulfillment status.
– Preference Data: Your marketing preferences, opt-in or opt-out choices for newsletters and campaigns, and information about your interest in our products or services.
4. Legal Bases for Processing
We rely on the following lawful bases for processing your personal data:
– Contractual Necessity: Processing is necessary for the performance of a contract with you, including account creation, order processing, and service delivery.
– Legitimate Interest: Processing is conducted for the legitimate business interests of Ipswich Witches, such as improving site functionality, customer experience, and security—provided such interests are not overridden by your rights.
– Consent: Where required, we obtain your explicit consent before processing your personal data for specific purposes, such as direct marketing or the use of non-essential cookies.
– Legal Obligation: Processing may be necessary to comply with applicable laws, regulatory requirements, or legal processes.
5. Your Rights
Under applicable privacy laws, you have the following rights regarding your personal data:
– Access: You may request a copy of the personal data we hold about you.
– Rectification: You may request that we correct inaccurate or incomplete personal data.
– Erasure: You may request the deletion of your personal data, subject to applicable limitations.
– Restriction: You may ask us to limit our use of your data in certain circumstances.
– Data Portability: You have the right to request that your personal data be provided to you or to another controller in a structured, commonly used, and machine-readable format.
To exercise any of the above rights, please contact us at [email protected].
6. Security Measures
We implement robust technical and organizational measures to safeguard your personal data against unauthorized access, alteration, disclosure, or destruction. Measures include industry-standard encryption, secure servers, user-access controls, routine security audits, data minimization practices, encrypted backups, and regular privacy and data protection training for staff.
7. International Data Transfers
Some of the service providers or data processors we use may be located outside your jurisdiction. Where applicable, we implement appropriate safeguards for international data transfers, including the use of Standard Contractual Clauses approved by the European Commission or ensuring services comply with the GDPR through recognized frameworks or certifications.
8. Data Retention
We retain personal data only for as long as necessary to fulfill the purposes for which it was collected, to comply with legal obligations, or to resolve disputes. Retention periods may vary based on the nature of the data:
– Usage and Technical Data: retained for 12 months for analytics and performance monitoring.
– Account and Profile Data: retained while your account remains active and for up to 6 years thereafter for legal or auditing purposes.
– Communication and Transaction Data: retained for up to 7 years for financial and support reference and legal compliance.
– Preference Data: retained until you change your preference or withdraw your consent.
9. Cookie Policy
ipswich-witches.com uses cookies and similar tracking technologies to enhance user experience and analyze usage data. Cookies fall into the following categories:
– Essential Cookies: Required for the basic operation of the website, including navigation and access to secure areas.
– Functional Cookies: Help the website remember user choices to provide customized content and interface usability.
– Analytics Cookies: Collect information on how visitors use the site, helping us improve functionality and content performance.
– Performance Cookies: Enable performance tracking and optimization, including error reporting and load testing.
10. Cookie Management and Compliance
In compliance with GDPR and CCPA, we provide transparency and control over your cookie preferences. Upon your first visit, you will be prompted to accept or reject non-essential cookies. You may update your cookie settings at any time via our cookie consent banner or through your browser settings. California residents may opt out of “selling” or sharing of personal information as defined under CCPA by contacting us directly.
11. Children’s Privacy
Our website and services are not directed to, nor intentionally collect data from, children under the age of 13. If we become aware that we have inadvertently gathered personal data from a child under 13 without verified consent from a parent or guardian, we will take appropriate steps to delete such information. If you believe a child has provided us with personal information, please contact us at [email protected].
12. Changes to This Policy
We reserve the right to update, amend, or revise this Privacy Policy at any time. All updates will become effective upon publication to ipswich-witches.com. We encourage users to regularly review this page to remain informed of any changes. Where material changes occur, we may notify you by email or via website notifications.
13. Contact Us
If you have any questions about this Privacy Policy or your personal data, or if you wish to make a complaint or exercise your data protection rights, please contact our Data Protection Officer by emailing [email protected].
We take your privacy seriously and strive to ensure full compliance with all applicable data protection laws, including the GDPR and CCPA. We welcome any feedback or inquiries regarding your personal data rights and privacy concerns.