Privacy Policy for jasonperryrock.com

1. Introduction

At jasonperryrock.com (“we,” “us,” or “our”), we are firmly committed to protecting your personal information and upholding your rights to privacy. We recognize the importance of safeguarding data and maintaining transparency concerning how we collect, use, and store your information. This Privacy Policy sets forth our privacy practices aligned with applicable privacy laws and regulations, including the European Union General Data Protection Regulation (“GDPR”) and the California Consumer Privacy Act (“CCPA”).

2. Scope of This Policy and Role as Data Controller

This Privacy Policy applies to all visitors, users, and others accessing our website at jasonperryrock.com (“Site”) and associated services. For the purposes of applicable data protection laws, jasonperryrock.com is the data controller of your personal data. If you reside in the European Economic Area (“EEA”), the United Kingdom, or California, your jurisdiction grants you certain rights, which are described in this Policy.

3. Categories of Data We Process

We may collect and process the following categories of personal data:

A. Usage Data:
Information regarding your interactions with the Site, including IP addresses, browser type, operating system, referring URLs, access times, pages visited, and session durations. We collect this data to better understand user engagement and functionality performance.

B. Account Data:
When you create an account, make a purchase, or communicate with us, we may collect your full name, postal address, email address, and telephone number.

C. Profile Data:
Includes your interests, preferences, purchase history, behavioral data, and any personal customizations.

D. Communication Data:
Records of communications between you and us, including support inquiries, requests for information, survey responses, and other contact-related content.

E. Technical Data:
Device identifiers, system configurations, software versions, mobile identifiers, and platform-specific information for security and optimization purposes.

F. Transaction Data:
Details of products or services purchased, payment gateway logs, card type (last 4 digits only if applicable), billing details, and delivery addresses.

G. Preference Data:
Marketing communication preferences, product or content interests, opt-in or opt-out statuses for newsletters and promotions.

4. Legal Bases for Processing Personal Data

We only process your personal data when there is a lawful basis to do so, including:

– Consent: Where you have provided explicit consent for processing (e.g., for email marketing).
– Contractual Necessity: When processing is necessary for the performance of a contract or to enter into a contract with you.
– Legal Obligation: Where we are legally required to process data.
– Legitimate Interests: To pursue our legitimate interests — such as improving the functionality of jasonperryrock.com, analytics, fraud prevention, and marketing — while ensuring that your data protection rights are not overridden.

5. Your Rights

Subject to applicable law, you have the following rights regarding your personal data:

– Right to Access: Access a copy of the personal data we hold about you.
– Right to Rectification: Request correction of inaccurate or incomplete data.
– Right to Erasure: Request the deletion of your personal data under certain conditions.
– Right to Restriction: Request limits on our use and processing of your data under defined circumstances.
– Right to Data Portability: Receive your data in a structured, commonly used, and machine-readable format for use with another controller.
– Right to Object: Object to our processing of your data under legitimate interest or for direct marketing purposes.
– California Residents’ Rights: Under CCPA, you may request information about categories of data we collect, request deletion of personal information, and opt-out of sale (although we do not sell personal data).

To exercise any right under applicable law, please contact us via [email protected]. We will respond as required by legal timelines.

6. Security Measures

We implement appropriate technical and organizational safeguards to protect your personal data. Security measures include, but are not limited to:

– End-to-end encryption for sensitive transfers.
– Role-based access control and strong authentication requirements.
– Regularly maintained system backups and disaster recovery procedures.
– Staff training programs focused on data protection and IT security hygiene.
– Secure data storage and robust firewall technologies.

7. International Data Transfers

Your information may be transferred to and processed in countries outside your jurisdiction, including those that do not provide equivalent data protection laws. Where such transfers occur, we implement standard contractual clauses approved by the European Commission or adopt other lawful safeguards to ensure adequate protection in compliance with GDPR and similar legislation.

8. Data Retention

We only retain your personal data as long as necessary to fulfill the purposes for which it was collected or to comply with legal, regulatory, or contractual obligations:

– Usage and Technical Data: Up to 18 months for analytics purposes.
– Account and Transaction Data: Retained for up to 7 years for legal and audit purposes.
– Communication and Support Data: Kept for up to 2 years following the last correspondence.
– Marketing Preference Data: Retained unless and until you withdraw consent or opt out.
– Inactive Accounts: Deleted or anonymized after 24 months of inactivity.

9. Cookie Policy

We use cookies and similar tracking technologies to enhance your experience on jasonperryrock.com. These include:

– Essential Cookies: Required for the Site’s functionality, such as navigation and user logins.
– Functional Cookies: Enable personalized content and remember your settings and preferences.
– Performance/Analytics Cookies: Collect anonymized usage data to monitor performance and improve our Site.
– Third-Party Cookies: Set by services integrated into our Site, such as payment providers or embedded social media content.

10. Cookie Management & Compliance

In compliance with GDPR and CCPA, you have the right to control your cookie settings. Upon visiting jasonperryrock.com, you will be prompted with a cookie preference banner. You can accept, reject, or customize cookie usage at any time. Browser settings may also be configured to block non-essential cookies. Instructions for major browsers can be found on their respective support pages.

Do Not Track (DNT) signals sent from browsers are recognized where required by law. Additionally, California residents may exercise the right to opt-out of data selling through an available link (note: we do not sell your data).

11. Children’s Privacy

We do not knowingly collect or solicit personal data from children under the age of 13. If we become aware that a child has provided us with personal data without verified parental consent, we will take steps to delete that information promptly. If you believe that a child under 13 has unnecessarily provided personal information to us, please contact us at [email protected].

12. Policy Updates and Notifications

We reserve the right to update this Privacy Policy at any time to reflect changes in legal obligations, data processing practices, or Site functionality. Where material changes are made, users will be notified via prominent means such as email or a notice on jasonperryrock.com. We recommend reviewing this Policy periodically to remain informed about how your data is protected.

13. Contacting Us

If you have questions, concerns, or requests regarding this Privacy Policy or our data processing activities, you may contact us at:

Email: [email protected]

We are committed to full compliance with privacy and data protection regulations. Your trust and privacy are of paramount importance, and we are here to support your rights at any time.