Privacy Policy
1. Introduction
At rickygrayclemency.com, we are committed to protecting your privacy and ensuring that your personal data is handled with the utmost care, integrity, and transparency. We prioritize the privacy of our users and comply with all applicable data protection laws, including the General Data Protection Regulation (GDPR) and the California Consumer Privacy Act (CCPA). This Privacy Policy explains how we collect, use, disclose, safeguard, and retain your data.
2. Scope of Policy and Role as Data Controller
This Privacy Policy applies to all users of rickygrayclemency.com, including visitors, donors, and subscribing parties. We act as the data controller for the personal data we collect and process through our website and related services. As a data controller, we determine the purposes and means of processing your data.
If you are located in the European Union, the European Economic Area, or California, this Policy outlines your data privacy rights pursuant to applicable laws.
3. Categories of Data We Process
We only collect information necessary to operate effectively and provide you with the best user experience. The personal data we process fall under the following categories:
a. Usage Data:
Information collected automatically when you visit our site, including your browser type, IP address, referring pages, unique device identifiers, time and date of visits, and site interaction metrics.
b. Account Data:
Information you provide when creating an account or submitting forms on our website—for example, your full name, mailing address, email address, and telephone number.
c. Profile Data:
Data such as your stated preferences, past donations or transactions, completed forms, communication preferences, and observed behavior on rickygrayclemency.com.
d. Communication Data:
Correspondence you send to us, including support requests and contact submissions, as well as our responses and notes related to those communications.
e. Technical Data:
Information about your device and platform, such as type, operating system, settings, language preferences, screen resolution, browsing agent, and system configuration.
f. Transaction Data:
Data associated with financial transactions you may initiate on the website, including payment history, billing addresses, and delivery or fulfillment details.
g. Preference Data:
Details about your marketing preferences, opt-in/opt-out statuses for communications, and your expressed interests in particular causes or content.
4. Legal Bases for Processing
We use different legal grounds depending on the type of data and the purpose for which it is processed:
– Consent: Where required, we rely on your freely given, specific, informed, and unambiguous consent for the processing of personal data, particularly for marketing communications and optional data collection.
– Contract: Processing may be necessary to fulfill services you request, such as responding to inquiries or processing donations.
– Legal Obligation: In certain cases, we are required by law to process your data for compliance and legal reporting purposes.
– Legitimate Interests: We may process data based on our legitimate interests, such as maintaining and improving our website, ensuring site security, and addressing inquiries, provided such interests are not overridden by your rights and freedoms.
5. Your Data Protection Rights
You have certain rights under GDPR and CCPA. These include:
– Right of Access: Request information about the personal data we hold about you.
– Right to Rectification: Request correction of inaccurate or incomplete data.
– Right to Erasure: Request deletion of your personal data, subject to retention obligations.
– Right to Restriction: Limit how we use your personal data under specific circumstances.
– Right to Data Portability: Request your data in a structured, machine-readable format, and have it transmitted to another controller when feasible.
– Right to Object: Object to our reliance on legitimate interest as a basis for data processing or to direct marketing.
– Right to Withdraw Consent: Withdraw consent at any time where consent was previously given.
– Right Not to Be Discriminated Against (under CCPA): You will not be denied services or charged differing prices for exercising your rights.
To exercise your rights, contact us at [email protected]. Identity verification may be required to fulfill your request.
6. Security Measures
We prioritize the security of your data and implement reasonable administrative, technical, and organizational safeguards, including:
– Encryption (TLS/SSL) of data in transit.
– Role-based access controls restricting data to authorized personnel only.
– Regular system backups and secure physical storage, where applicable.
– Employee training on privacy and data protection protocols.
– Periodic assessments and updates to our security practices.
7. International Data Transfers
Where personal data is transferred outside of the country in which it was provided, we ensure appropriate safeguards are in place. For data subjects in the European Economic Area, all international transfers comply with GDPR via mechanisms such as Standard Contractual Clauses approved by the European Commission or equivalent agreements ensuring adequate protection.
8. Data Retention
We retain personal data only for as long as necessary for the purposes outlined in this Policy or where otherwise required by law. Specific retention periods include:
– Usage and Technical Data: Up to 12 months.
– Account and Profile Data: Until account termination or 24 months after inactivity.
– Communication Data: Up to 36 months for administrative records.
– Transaction Data: 7 years, for financial compliance and reporting.
– Preference Data: Retained as long as the user opts in, or until consent is revoked.
After these periods, data is securely deleted or anonymized.
9. Cookie Policy
rickygrayclemency.com uses cookies and similar technologies to enhance user experience, analyze performance, and customize content. Our use includes:
– Essential Cookies: Necessary for site operation and navigation.
– Functional Cookies: Enhance functionality, such as remembering user preferences.
– Analytical Cookies: Collect information on how visitors use the site to improve performance, such as page load times and interaction metrics.
– Performance Cookies: Help us test and optimize features and user flow through aggregated behavioral analysis.
10. Cookie Management and Compliance
You may manage your cookie preferences at any time via your browser settings or through our on-site cookie banner where applicable. In compliance with GDPR and CCPA, we request explicit consent for non-essential cookies prior to their deployment.
You also have the right to opt out of the sale of your personal information (as defined by CCPA). We do not “sell” personal data in the traditional sense, but if legally interpreted otherwise, we will honor opt-out requests at [email protected].
11. Children’s Privacy
Our website and services are not intended for children under 13 years of age, and we do not knowingly collect personal data from minors. If we become aware that a child under 13 has provided us with personal data without verified parental consent, such data will be promptly deleted.
If you are a parent or guardian and believe that your child has disclosed personal information to us, please contact us immediately at [email protected].
12. Policy Updates
We reserve the right to update this Privacy Policy to reflect changes in law, technology, or our operational practices. When we make material changes, we will notify you by posting a prominent notice on rickygrayclemency.com and, where applicable, reaching out via email or your preferred contact method.
13. Contact
If you have any questions, concerns, or requests regarding this Privacy Policy or our data handling practices, you may contact us at:
Email: [email protected]
We are committed to maintaining full legal compliance with all applicable data protection laws and ensuring our users’ rights are respected. For any privacy-related inquiry, you may reach out to us at the address provided above.