Privacy Policy - HavenSpawn

1. Introduction

At Havenspawn (“we,” “our,” or “us”), accessible at https://www.havenspawn.com, we are committed to protecting the privacy, confidentiality, and security of our users’ personal data. This Privacy Policy outlines the types of information we collect, how we use, process, and safeguard that information, and your rights under applicable privacy legislation, including the General Data Protection Regulation (GDPR) and the California Consumer Privacy Act (CCPA). We take a privacy-first approach to protect individuals’ rights and ensure transparency at every step of your interaction with our services.

2. Scope of Policy and Data Controller Role

This Privacy Policy applies to all users, visitors, and customers accessing or using the website havenspawn.com and any associated services offered by us. For the purposes of applicable data protection law, Havenspawn is the “Data Controller” responsible for determining the purposes and means of processing personal data collected through this website.

3. Categories of Data Processed

We collect and process various categories of personal data depending on your interactions with our website and services, as described below:

a. Usage Data

We automatically collect data related to your use of our website, including but not limited to your IP address, browser type, pages visited, time spent on pages, referring/exit URLs, and timestamps of access.

b. Account Data

When you create an account on havenspawn.com, we may collect your name, mailing address, email address, and phone number as part of our account registration and user verification process.

c. Profile Data

We collect data that you voluntarily provide to develop your user profile, such as preferences, purchase history, interests, wishlist items, and consumer behavior patterns.

d. Communication Data

This includes records of communications you send to us, including support requests, inquiries submitted via forms or email, and any other correspondence, including metadata associated with such communications.

e. Technical Data

We collect device-specific technical information such as device type, operating system, screen resolution, system configuration, language preference, browser settings, and country or region inferred from your device.

f. Transaction Data

Where applicable, we may collect payment processing information (e.g., masked credit card details), billing addresses, purchase amounts, shipping/delivery addresses, and order history when you buy products or services on havenspawn.com.

g. Preference Data

This includes marketing preferences, opt-in/opt-out consent records, product interests, and communication settings.

4. Legal Bases for Processing

We process your personal data on the following lawful bases as defined under applicable data protection laws:

– Consent: You have given explicit permission for processing certain information (e.g., for marketing communications or optional cookies).
– Contractual Necessity: The processing is necessary to perform the contract between you and Havenspawn, such as delivering purchased goods or maintaining your account.
– Legitimate Interests: We may process your data where we have a legitimate business interest, provided these interests do not override your fundamental rights and freedoms.
– Legal Obligation: In specific cases, we may be required to process your data to comply with a legal obligation or defend against legal claims.

5. Your Rights

Under applicable data privacy laws, you have the following rights:

– Right of Access – to request access to your personal data.
– Right to Rectification – to request correction of inaccurate or incomplete data.
– Right to Erasure – to request deletion of your data under specific circumstances.
– Right to Restrict Processing – to temporarily halt processing while a request is being evaluated.
– Right to Data Portability – to receive your personal data in a structured, commonly used, and machine-readable format and to transmit it to another controller.
– Right to Object – to object to processing where we rely on legitimate interests or direct marketing.

To exercise any of these rights or for related inquiries, please contact us at: [email protected].

6. Security Measures

We have implemented a comprehensive set of technical and organizational measures to safeguard your personal data, including:

– Industry-standard encryption for data in transit and at rest.
– Access controls based on user roles and authentication.
– Regular security audits and vulnerability assessments.
– Secure data backups to prevent data loss.
– Staff training and strict internal data handling policies.

7. International Transfers

Your data may be processed or stored outside your country of residence, including in jurisdictions that may not provide equivalent data protection standards. Where such transfers occur, we implement appropriate safeguards, such as Standard Contractual Clauses (SCCs), to ensure adequate protection of your personal data.

8. Data Retention

We retain your data only for as long as necessary to fulfill the purposes outlined in this Privacy Policy, including satisfying legal, regulatory, contractual, or audit obligations. Retention periods vary based on the nature of the data:

– Usage and Technical Data: Retained for up to 12 months for analytics and security diagnostics.
– Account and Profile Data: Retained for up to 6 years after account closure for legal and operational compliance.
– Transaction Data: Retained for 7 years to align with financial record-keeping obligations.
– Communications Data: Retained for up to 3 years post-interaction to ensure continuity in support and service.
– Preference Data: Retained until you update or withdraw your consent.

9. Cookie Policy

We use cookies and similar technologies to enhance user experience and analyze site performance. The types of cookies we use include:

– Essential Cookies: Required for functional website operation (e.g., login, checkout processes).
– Functional Cookies: Enhance usability by remembering preferences and settings.
– Analytics Cookies: Used for internal analytics and traffic measurement tools (e.g., Google Analytics).
– Performance Cookies: Improve website speed, responsiveness, and reliability.

10. Cookie Management and Compliance with GDPR & CCPA

You can grant or revoke cookie consent at any time via our cookie banner or browser settings. Under both GDPR and CCPA, you have the right to opt-out of non-essential cookie collection. We honor Do Not Track (DNT) signals where legally required and provide cookie preference controls accessible on havenspawn.com.

11. Special Protections for Children Under 13

Havenspawn.com is not intended for use by children under the age of 13, and we do not knowingly collect or solicit personal information from minors. If we become aware that we have inadvertently collected data from a child under 13, we will promptly delete such information.

12. Policy Updates & User Notifications

We reserve the right to amend or update this Privacy Policy at our discretion. Any changes will be posted on this page. Where required by law, we will notify users directly of significant changes via email or on-page notice. Continued use of our services following any updates reflects your acceptance of the revised terms.

13. Contact Information

For any questions, concerns, data access requests, or complaints regarding this Privacy Policy or our data handling practices, please contact:

Havenspawn
Email: [email protected]

We are committed to maintaining full compliance with applicable data protection laws, including GDPR and CCPA, and fostering ongoing transparency. Please contact us at the above address if you have any concerns regarding our privacy practices.