Privacy Policy - Havenspawn

1. Introduction

At Havenspawn.com, we are firmly committed to protecting and respecting your privacy. We recognize the importance of safeguarding your personal data and are dedicated to ensuring its confidentiality, integrity, and security. This Privacy Policy outlines how we collect, use, disclose, and protect your information when you interact with our website, and it demonstrates our adherence to international data protection regulations, including the General Data Protection Regulation (GDPR) and the California Consumer Privacy Act (CCPA).

By using Havenspawn.com, you agree to the practices described in this Privacy Policy. If you do not agree with any part of this policy, we encourage you to discontinue your use of our website.

2. Scope of Policy and Data Controller Role

This Privacy Policy applies to all visitors, users, and others who access Havenspawn.com (“you”, “your”). Havenspawn.com acts as the data controller for the purposes of GDPR and is responsible for determining the means and purposes of processing your personal data. For any queries relating to this policy, please contact us at [email protected].

3. Categories of Data Processed

We collect and process various categories of personal and technical data based on your interaction with Havenspawn.com:

– Usage Data: Includes information on how you navigate and use the website, such as IP address, browser type, referring URLs, pages viewed, and session frequency.
– Account Data: Includes your name, postal address, email address, and phone number registered when you create an account or place an order.
– Profile Data: Includes your preferences, order history, browsing behavior, and feedback submissions.
– Communication Data: Includes records of your interactions with our support team, inquiries via email or forms, and other related correspondence.
– Technical Data: Includes device type, operating system, browser version, language preferences, and network identifiers.
– Transaction Data: Includes payment details, billing/shipping addresses, order contents, and transaction history. We do not store full credit card details; payments are processed securely via third-party gateways.
– Preference Data: Includes your marketing and communication preferences as well as stated product or service interests.

4. Legal Bases for Processing

We process your personal data only where we have a lawful basis to do so under applicable data protection laws. The bases upon which we rely include:

– Performance of a Contract: To fulfill an agreement with you, such as processing your purchase or providing account services.
– Legitimate Interest: To improve our website, communicate with users, prevent fraud, and protect our assets and users.
– Consent: Where you have given explicit permission, for example, for receiving newsletters or accepting non-essential cookies.
– Legal Obligation: When required to comply with applicable legal or regulatory requirements.

5. Your Rights

Subject to applicable laws, you have the following rights with respect to your personal data:

– Right of Access: To receive confirmation about whether we process your personal data and access to that data.
– Right to Rectification: To request correction of inaccurate or incomplete personal information.
– Right to Erasure (“Right to be Forgotten”): To request deletion of your personal data where there is no legal basis for retaining it.
– Right to Restriction of Processing: To limit the way we process your data under certain conditions.
– Right to Data Portability: To receive your personal data in a structured, commonly used format and request transfer to another controller.
– Right to Object: To object to our processing of your personal data based on legitimate interests or for direct marketing.

You can exercise any of these rights by contacting us at [email protected]. We may request appropriate verification to protect the integrity of your data.

6. Security Measures

Havenspawn.com implements robust technical and organizational safeguards to protect your personal data. These measures include, but are not limited to:

– End-to-end encryption of data in transit and at rest using industry-standard protocols;
– Secured servers and firewalls;
– Role-based access controls and authentication protocols;
– Regular security audits, penetration testing, and vulnerability assessments;
– Staff training in data handling and confidentiality;
– Routine data backups to maintain data integrity.

Despite our efforts, no method of data transmission over the internet or storage is 100% secure. We therefore encourage you to protect your own data by using strong passwords and managing access to your devices.

7. International Transfers

In the course of providing our services, your data may be transferred to, and processed in, countries outside the European Economic Area (EEA). We ensure all such transfers are compliant with applicable data protection laws by using one or more of the following safeguards:

– Standard Contractual Clauses approved by the European Commission;
– Transfer to countries with an Adequacy Decision;
– Binding Corporate Rules for group entities;
– Other lawful transfer mechanisms as approved by data protection authorities.

8. Data Retention

We retain personal data only for as long as necessary to fulfill the purposes described in this Privacy Policy, or as required by law:

– Usage Data: 12 months after collection;
– Account Data: Retained for the duration of your account plus 2 years;
– Profile Data: Retained while your account is active and anonymized thereafter;
– Communication Data: 3 years from the date of last correspondence;
– Technical Data: 12 months after collection;
– Transaction Data: 7 years to comply with financial and tax obligations;
– Preference Data: Retained until consent is withdrawn or 2 years from last interaction.

9. Cookie Policy

Havenspawn.com uses cookies and other tracking technologies to improve your user experience. We categorize our use of cookies as follows:

– Essential Cookies: These are crucial for website functionality and cannot be disabled (e.g., login sessions, security).
– Functional Cookies: These store preferences and previous selections (e.g., language and region settings).
– Analytics Cookies: These help us understand website usage through aggregate data (e.g., Google Analytics).
– Performance Cookies: These measure the effectiveness of marketing campaigns and website operation performance.

We do not use cookies to collect sensitive information without your consent.

10. Cookie Management and Compliance with GDPR & CCPA

On your first visit to Havenspawn.com, you will be prompted with a cookie consent banner allowing you to accept or decline non-essential cookies. You may update your preferences or revoke consent at any time via the Cookie Settings link on our website.

Under GDPR and CCPA, users have the right to:

– Understand what personal data is being collected via cookies;
– Opt-out of the sale or sharing of personal information;
– Request deletion of cookie-collected data.

We honor Do Not Track (DNT) signals to the extent technically possible.

11. Special Protections for Children Under 13

Havenspawn.com is not intended for use by individuals under the age of 13. We do not knowingly collect or solicit personal data from children under 13. If we become aware of such collection, we will delete it promptly. Parents or legal guardians who believe that we may have collected personal data from a child are encouraged to contact us at [email protected].

12. Policy Updates and User Notifications

We reserve the right to modify this Privacy Policy at our discretion. Substantive changes will be communicated to users by notice on our website or via email to registered users, where appropriate. We advise reviewing this Privacy Policy regularly to remain informed about our data practices.

By continuing to use Havenspawn.com after changes have been posted, you acknowledge your acceptance of those changes.

13. Contact

If you have questions, concerns, or wish to exercise your rights regarding your personal data as detailed herein, please contact us:

Email: [email protected]

Your trust is important to us. We strive to ensure full compliance with GDPR, CCPA, and all applicable data protection legislation. Please contact us if you suspect any misuse of your data or need clarity on your rights under this policy.