Privacy Policy
Hearth Roots Victory (“we,” “us,” or “our”) is committed to protecting your privacy and ensuring the responsible handling of your personal data. This Privacy Policy outlines how we collect, use, process, and protect personal information through our website, hearthrootsvictory.com (the “Site”). We are dedicated to maintaining the trust and confidence of our users and complying with applicable data protection laws, including the General Data Protection Regulation (GDPR) and the California Consumer Privacy Act (CCPA).
1. Commitment to Privacy and Data Protection
At Hearth Roots Victory, we place a high value on the privacy and confidentiality of our users. We collect and process personal data thoughtfully and transparently, always in accordance with legal and regulatory obligations. We implement strong privacy and security standards to ensure that your personal information is safeguarded at all times.
2. Scope of This Policy and Data Controller Role
This Privacy Policy applies to users and visitors of hearthrootsvictory.com. It covers all interactions with the Site, including any personal data collected during your use of our services, browsing, purchasing, or communicating with us. Hearth Roots Victory acts as the Data Controller for the personal data collected on this Site, meaning we determine the purposes and means of processing your data.
3. Categories of Data We Process
We may collect and process the following categories of personal information:
– Usage Data: Includes information gathered through cookies and server logs such as IP address, browser type and version, session duration, pages visited, and time stamps.
– Account Data: Provided when registering, purchasing, or communicating through the Site, including full name, billing and shipping address, email address, and phone number.
– Profile Data: Consists of your preferences, interests, purchase history, site behavior, and other data collected to understand your interaction with our services.
– Communication Data: Covers inquiries, support requests, customer feedback, and communication history with our support team.
– Technical Data: Includes information about the device used to access the Site, such as operating system, network type, browser settings, and screen resolution.
– Transaction Data: Pertains to payment information (processed through secure third-party providers), purchase records, fulfillment status, and delivery details.
– Preference Data: Encompasses your choices around marketing communications, product preferences, newsletter subscriptions, and cookie consent selections.
We process only the data necessary to provide our services, and we strive to limit our data collection to purposes aligned with offering, maintaining, and improving your user experience on hearthrootsvictory.com.
4. Legal Bases for Processing
We process personal data only when there is a lawful basis to do so under applicable regulations. These legal bases include:
– Contractual Necessity: When data is required to fulfill a contract with you, such as processing orders or customer service requests.
– Legitimate Interests: Where necessary for our legitimate business interests, such as improving Site functionality, detecting fraud, or performing analytics, provided these interests are not overridden by your rights.
– Consent: When you provide explicit consent, for example, by subscribing to our newsletters or accepting non-essential cookies.
– Compliance with Legal Obligations: Where required to comply with applicable laws, governmental requests, or enforceable legal processes.
5. Your Data Protection Rights
If you are located in the European Economic Area or California (or otherwise have rights under applicable data protection law), you may be entitled to exercise the following rights:
– Right of Access: You have the right to request access to your personal data we hold about you.
– Right to Rectification: You may request that we correct any inaccuracies or complete incomplete data.
– Right to Erasure: You can request deletion of your data where appropriate, subject to retention obligations.
– Right to Restriction: You may request restriction of data processing under certain circumstances.
– Right to Data Portability: You have the right to receive your personal data in a structured, commonly used, and machine-readable format.
– Right to Object: You may object to certain processing activities, including profiling and direct marketing.
To exercise any of these rights, please contact us at [email protected].
6. Security Measures
We implement appropriate technical and organizational security measures to protect your data against unauthorized access, loss, misuse, alteration, or disclosure. These measures include, but are not limited to:
– Data encryption in transit and at rest
– Role-based access controls and authentication procedures
– Routine system audits and vulnerability assessments
– Regular data backups and disaster recovery protocols
– Staff training on data privacy and security responsibilities
Despite our efforts, no digital transmission or storage method is completely secure. We encourage users to take precautions, such as using strong passwords and logging out of unsecured devices.
7. International Data Transfers
Where applicable, personal data may be transferred or stored on servers located outside your country of residence. When such transfers occur, we ensure they are protected under recognized transfer mechanisms, including Standard Contractual Clauses (SCCs) and supplementary safeguards as required by GDPR and similar regulatory frameworks.
By using our Site and providing your information, you consent to such transfers in accordance with this Privacy Policy.
8. Data Retention
We retain your personal data only for as long as is necessary to fulfill the purposes stated in this Policy and to comply with legal obligations, resolve disputes, and enforce agreements. Retention durations include:
– Account and Profile Data: Retained for as long as you maintain an active relationship with us
– Transaction Data: Retained for tax, accounting, and fraud-prevention purposes (typically up to 7 years)
– Communication Data: Retained for up to 3 years after last interaction
– Technical and Usage Data: Retained for 1-2 years for analytical purposes and system performance monitoring
When retention is no longer necessary, we securely delete or anonymize your data.
9. Cookie Policy
Our Site uses cookies and similar tracking technologies to enhance user experience. Types of cookies used include:
– Essential Cookies: Required for functionality such as secure login and order processing.
– Functional Cookies: Used to remember preferences and provide personalized features.
– Analytics Cookies: Collected for monitoring site performance and user trends through services such as Google Analytics.
– Performance Cookies: Help improve speed and resource loading efficiency.
Third-party services may also use cookies subject to their own privacy policies.
10. Cookie Management and Compliance
Users are given the option to accept or reject non-essential cookies upon first visit, in compliance with GDPR and CCPA standards. You may also modify cookie settings at any time via the cookie consent manager on the Site or through your browser’s settings functionality.
Opting out of non-essential cookies may affect the functionality and personalization of the Site.
For residents of California:
– Do Not Sell My Personal Information: Hearth Roots Victory does not sell your personal data.
– Opt-Out Rights: You may contact us at [email protected] to exercise your right to opt out of the use of cookies for targeted advertising or request information specific to CCPA.
11. Children’s Data Protection
We do not knowingly collect personal information from individuals under the age of 13. If a parent or guardian becomes aware that a child has provided us with personal data without appropriate consent, they should contact us at [email protected]. We will take immediate steps to delete such information from our records.
12. Policy Updates
We may periodically update this Privacy Policy to reflect changes in legal, technical, or business practices. Changes will be posted to this page, and where appropriate, you may be notified through prominent notices on the Site. Continued use of hearthrootsvictory.com following any update indicates your acceptance of the revised policy.
13. Contact Information
If you have any questions, concerns, or requests regarding this Privacy Policy or your personal data, you may contact us at:
Hearth Roots Victory
Email: [email protected]
Website: https://hearthrootsvictory.com
We are committed to upholding your data rights with transparency and integrity. Please do not hesitate to reach out if you wish to exercise your data protection rights or have concerns about how your information is being utilized.