Privacy Policy for katherinetarbox.com
1. Introduction
At katherinetarbox.com (“we,” “us,” or “our”), we are committed to safeguarding the privacy of our website visitors, users, and customers. Your personal data and trust are important to us, and we take our obligations under applicable data protection laws very seriously. This Privacy Policy outlines how we collect, use, store, and protect your personal information in full compliance with legal standards, including the General Data Protection Regulation (GDPR) and the California Consumer Privacy Act (CCPA). Our aim is to be transparent and accountable in our data practices and to provide you with clear information about your rights.
2. Scope of this Privacy Policy and Data Controller Role
This Privacy Policy applies to all users of katherinetarbox.com and governs the collection, use, and sharing of personal data obtained through our website or in the course of providing our services. For the purpose of the GDPR, katherinetarbox.com acts as the “Data Controller” of your personal data, meaning we determine the purposes and means of its processing. If you have any inquiries regarding this policy, you may contact us at: [email protected].
3. Categories of Data We Process
We collect and process the following categories of personal data, depending on your interaction with our website and services:
a. Usage Data
Information about how you use our website, such as IP addresses, browser type, operating system, referral URLs, pages viewed, timestamps, and interaction patterns.
b. Account Data
Information provided when you register or create an account, including your full name, postal address, email address, and phone number.
c. Profile Data
Details related to your preferences, interests, purchase history, and behavior on our platform.
d. Communication Data
Records of correspondence with us, including support inquiries, contact submissions, and customer service interactions.
e. Technical Data
Device identifiers (such as MAC address, device ID), device type, configuration settings, internet service provider information, and other technical diagnostics.
f. Transaction Data
Details about payments made and services received through katherinetarbox.com, including billing addresses, order information, delivery data, and payment methods (excluding full credit card numbers, which are handled by third-party payment processors).
g. Preference Data
Choices and consents you provide with regard to newsletters, promotional content, marketing communications, and specific interests in our services or content.
4. Legal Bases for Processing
We process your personal data on the following lawful bases, in accordance with both GDPR and CCPA:
– Consent: Where you have given explicit permission (e.g., to receive newsletters or analytics tracking).
– Contractual Necessity: When processing is essential to fulfill a service or transaction at your request.
– Legitimate Interests: To analyze usage and improve our services, protect against fraud, and maintain website performance.
– Legal Obligation: Where required by law or to comply with a lawful request from public authorities.
5. Your Rights
You are entitled to exercise various rights over your personal data under applicable privacy laws. These rights include:
– Right of Access: You may request a copy of your personal data and details about how it is processed.
– Right to Rectification: You may request correction of inaccurate or incomplete data.
– Right to Erasure (Right to be Forgotten): You may request deletion of your personal data under certain conditions.
– Right to Restriction: You may request limitation of processing when accuracy is contested, processing is unlawful, or the data is no longer required.
– Right to Data Portability: You may request a copy of your data in a structured, machine-readable format and/or transfer it to another controller.
– Right to Object: You may object to processing based on legitimate interests or direct marketing.
– Right to Withdraw Consent: You may withdraw previously granted consent at any time.
To exercise any of these rights, please contact us at [email protected].
6. Security Measures
We implement rigorous technical and organizational measures to protect your data, including:
– Encryption of data in transit and at rest;
– Regular system and software security updates;
– Role-based access controls and authentication procedures;
– Secure data backups and disaster recovery mechanisms;
– Regular employee training on privacy and data handling.
Despite our efforts, no system can be completely secure. We encourage you to protect your own data by using strong passwords and practicing safe browsing habits.
7. International Data Transfers
Should your data be transferred outside the European Economic Area (EEA) or other jurisdictions with similar protections, we ensure that appropriate safeguards are in place. This includes the use of standard contractual clauses and compliance with applicable cross-border data transfer regulations. Wherever your data is processed, we require that privacy and security standards remain consistent with those within your jurisdiction.
8. Data Retention
We retain your personal data only for as long as necessary for the purposes stated in this Privacy Policy. Specific retention periods include:
– Usage Data and Technical Data: retained for up to 12 months for analytics and security purposes.
– Account and Profile Data: retained for as long as your account remains active.
– Communication and Transaction Data: retained for up to 6 years to fulfill obligations under business and financial regulations.
– Preference Data: retained until you update or withdraw your preferences.
Once the applicable retention period expires, your data will be securely deleted or anonymized.
9. Cookie Policy
katherinetarbox.com uses cookies and similar tracking technologies to enhance your browsing experience. Cookies fall into the following categories:
– Essential Cookies: Necessary for the website to function (e.g., login, navigation).
– Functional Cookies: Enable enhanced functionality such as remembering preferences.
– Analytics Cookies: Help us understand how visitors interact with the site (e.g., Google Analytics).
– Performance Cookies: Monitor website performance and help us optimize usability.
10. Cookie Management & Regulatory Compliance
You will be asked to consent to the use of non-essential cookies upon visiting our site. You may adjust your cookie preferences at any time via your browser settings or through our cookie consent management tool (where available). We comply with the GDPR’s requirements for prior user consent and the CCPA’s requirements for clear notice and opt-out rights.
CCPA: If you are a California resident, you may opt out of the sale or sharing of your personal information by contacting us. Note that katherinetarbox.com does not sell personal information as defined by the CCPA.
11. Children’s Privacy
We do not knowingly collect personal data from children under the age of 13. If we become aware that personal data has been collected from a child without verifiable parental consent, we will take appropriate steps to delete such data. If you believe that we may have collected data from a child under the age of 13, please contact us immediately at [email protected].
12. Policy Updates
We reserve the right to amend this Privacy Policy from time to time in response to legal or operational changes. Any updates will be posted on this page, and where appropriate, we will notify you of significant changes by email or notice on our website. Continued use of katherinetarbox.com following such updates will constitute your acceptance of the changes.
13. Contact
If you have any questions, concerns, or requests regarding this Privacy Policy or your personal data, you may contact us at:
Email: [email protected]
Website: https://katherinetarbox.com
We are committed to full compliance with applicable privacy laws and to promptly addressing any concerns you may raise pertaining to your data.