PRIVACY POLICY

At hollyanneblake.com, your privacy is of paramount importance. We are committed to safeguarding the personal data of every visitor, client, and user of our website. This Privacy Policy explains in detail how we collect, store, utilize, and protect your information in compliance with the General Data Protection Regulation (GDPR), the California Consumer Privacy Act (CCPA), and other relevant privacy laws. Our goal is to maintain full transparency about your rights and the choices available to you regarding your personal information.

1. Scope of Policy and Data Controller

This Privacy Policy applies to all data collected through your use of the website hollyanneblake.com. The data controller responsible for determining the purposes and means of personal data processing is hollyanneblake.com. For any privacy-related inquiries, you may contact us at [email protected].

By accessing or interacting with hollyanneblake.com, you agree to the practices described herein. This policy extends to the website, its features, communications (including email), and all associated digital services.

2. Categories of Data We Process

We may collect and process the following categories of personal data:

a) Usage Data
We collect information about how you use our website. This may include your browser type, Internet Protocol (IP) address, pages visited, access dates and times, session duration, and referring URLs.

b) Account Data
Information you provide when creating an account, subscribing to services, or completing forms, such as your name, email address, mailing address, and phone number.

c) Profile Data
Information related to your behavior and interactions on the website, including preferences, past purchases, and engagement history.

d) Communication Data
Records of written or digital communications you send to us, including inquiries, feedback, support requests, and conversations via our contact forms or email.

e) Technical Data
Device-specific information such as operating system, device model, timezone settings, screen resolution, and system configuration parameters.

f) Transaction Data
Data relating to purchases and payment activities, including billing addresses, transaction references, items purchased, payment methods and delivery details.

g) Preference Data
Marketing and communication preferences, product interest indicators, and consent records for newsletters, promotional campaigns, and other outreach activities.

3. Legal Bases for Processing

We process your personal data in accordance with applicable data protection laws, relying on one or more of the following legal bases:

– Consent: Where you have expressly provided your consent to receive marketing or allow data collection via cookies and similar technologies.
– Contractual Necessity: When processing data is required to fulfill a contract with you, such as managing purchases or account registration.
– Legitimate Interests: To operate, analyze, improve, and secure hollyanneblake.com in a manner that does not override your rights or freedoms.
– Legal Obligations: Where we are required to collect or retain information to comply with legal and regulatory requirements.

4. Your Rights

Subject to applicable law, you may exercise the following rights in relation to your personal data:

– Right of Access: You may request details about the personal data we hold about you.
– Right of Rectification: You may request corrections to inaccurate or incomplete data.
– Right of Erasure: You may request deletion of your data (“right to be forgotten”) under certain conditions.
– Right to Restrict Processing: You may request temporary suspension of data processing under specific circumstances.
– Right to Data Portability: You may request your data in a structured, commonly used format to transfer to another service provider.
– Right to Object: You may object to the processing of data where we rely on legitimate interests or direct marketing.

To make such a request, please email us at [email protected]. We will respond in accordance with applicable law and within a reasonable timeframe.

5. Security Measures

We implement appropriate technical and organizational safeguards to protect your personal data against unauthorized access, disclosure, alteration, or destruction. These measures include, but are not limited to:

– End-to-end encryption of data transmissions.
– Secure server infrastructure and firewalls.
– Role-based access controls with multifactor authentication.
– Regular data backups and integrity checks.
– Ongoing staff training and awareness programs.

Despite our best efforts, no method of electronic transmission or storage is completely secure, and we cannot guarantee absolute security.

6. International Data Transfers

Your personal data may be transferred to and maintained on servers located outside your jurisdiction, including countries without equivalent data protection laws. When performing such international transfers, we ensure compliance through:

– Standard Contractual Clauses (SCCs) approved by the European Commission.
– Verification of the recipient’s participation in certified frameworks, where applicable.
– Supplemental security and privacy measures to safeguard your data during transfer.

7. Data Retention

We retain personal data only for as long as necessary to fulfill the purposes for which it was collected, including to comply with legal, regulatory, accounting, or reporting obligations. Retention periods include:

– Usage & Technical Data: Retained for up to 12 months for analytics and troubleshooting purposes.
– Account & Profile Data: Retained as long as you maintain an active account, and up to 6 years thereafter for legal and contractual purposes.
– Communication & Transaction Data: Retained for a minimum of 6 years to meet auditing and customer service needs.
– Preference Data: Retained until you withdraw consent or unsubscribe from communications.

8. Cookie Policy

Our website uses cookies and similar technologies to enhance the user experience and improve website functionality. These may include:

– Essential Cookies: Necessary for the operation of hollyanneblake.com and enabling core features.
– Functional Cookies: Enable personalized content and remember preferences.
– Performance Cookies: Measure website performance and usage patterns for optimization.
– Analytical Cookies: Provided by third-party services (e.g., Google Analytics) to understand visitor interactions.

Cookies may collect pseudonymized data such as IP addresses, browser types, device IDs, and browsing behavior.

9. Cookie Management and Compliance

Upon your first visit to hollyanneblake.com, you will be prompted to accept or manage your cookie preferences via a compliant cookie consent banner. You may:

– Set your preferences via our cookie management tool.
– Adjust your browser settings to refuse or restrict cookie usage.
– Opt-out of third-party analytics by visiting platforms such as optout.aboutads.info or tools offered by the cookie providers.

Users covered by GDPR and CCPA can update their consent preferences at any time from our cookie settings page or contact us at [email protected].

10. Children’s Privacy

We do not knowingly collect personal data from children under the age of 13. If we become aware that we have inadvertently gathered information from a child under 13 without appropriate consent, we will take prompt steps to delete such data from our records. Parents or legal guardians who believe that their child has submitted personal information may contact us at [email protected].

11. Policy Updates

We reserve the right to update or modify this Privacy Policy at any time in response to legal, technical, or operational changes. Any material changes to our data handling practices will be communicated prominently via hollyanneblake.com or by email notification where applicable. Your continued use of the website following these changes constitutes your acknowledgment of the revised policy.

12. Contact Us

If you have any questions, concerns, or data subject requests regarding this Privacy Policy or our handling of personal data, please contact us via:

Email: [email protected]

You also have the right to lodge a complaint with your regional data protection authority if you believe that your rights have been violated.

We are committed to full compliance with all applicable data protection regulations and will respond diligently to all concerns or requests. For additional information, please reach out to us at the email address above.