Privacy Policy - WillowSpawn

1. Introduction

At Willowspawn.com (“we,” “our,” or “us”), we are fully committed to upholding the privacy, security, and data protection of all individuals who interact with our website. We understand that your personal data is valuable and deeply personal, and we strive to ensure it remains protected at all times. Our privacy practices are rooted in transparency, fairness, and a privacy-first approach, strictly adhering to applicable data protection laws, including the General Data Protection Regulation (GDPR) and the California Consumer Privacy Act (CCPA).

2. Scope of Policy and Data Controller Role

This Privacy Policy applies to all users who visit, register with, make purchases from, or otherwise interact with willowspawn.com. As the data controller, Willowspawn.com determines the purposes and means of processing your personal data. This policy governs data collected via our website, communication channels, and third-party services integrated with our platform.

3. Categories of Personal Data We Process

We collect and process the following categories of personal data to provide, maintain, and improve our services:

a) Usage Data:
Includes information such as browser type and version, IP address, geographical location, referring site, pages viewed, session duration, and navigation paths. This data helps us analyze and enhance user experience.

b) Account Data:
Information provided upon account creation or order placement, including your full name, billing and shipping address, email address, and telephone number.

c) Profile Data:
Includes preferences, previous purchases, browsing behavior on our website, product interests, and other interactions that personalize your experience with our services.

d) Communication Data:
Covers any correspondences sent through contact forms, email communication, support inquiries, customer service interactions, and associated metadata.

e) Technical Data:
Device-specific data such as operating system, device type, system configuration, browser plug-in types and versions, and other information assisting with functionality and troubleshooting.

f) Transaction Data:
Includes order history, payment details, card verification data, fulfillment records, and related billing or shipping information processed during purchases.

g) Preference Data:
Refers to your consent for marketing communications, customer engagement preferences, and indications of product categories of interest.

4. Legal Bases for Processing Personal Data

We process your personal data lawfully under one or more of the following legal bases, depending on the context and nature of the data:

– Contractual Necessity: Where data is required to fulfill a contractual obligation, such as processing an order.
– Consent: For marketing communications and preference tracking, where you have explicitly opted in.
– Legitimate Interest: To improve our services, prevent fraud, ensure security, and conduct business analytics, where these interests are not overridden by your rights.
– Legal Obligations: Where necessary to comply with applicable laws or respond to lawful requests.

5. Your Rights

You have specific rights in relation to your personal data under GDPR and CCPA, which include:

– Right of Access: Request a copy of the personal information we hold about you.
– Right to Rectification: Request correction of incomplete or inaccurate personal data.
– Right to Erasure (“Right to be Forgotten”): Request deletion of your personal data in certain circumstances.
– Right to Restriction: Limit the processing of your data under certain conditions.
– Right to Portability: Receive your personal data in a structured, machine-readable format and transfer it to another controller where applicable.
– Right to Object: Object to processing based on legitimate interests or for direct marketing purposes.
– Right to Non-Discrimination (CCPA): Exercise any of the above rights without facing discrimination from us.

To exercise any of these rights, please contact us at [email protected].

6. Security Measures

We implement robust technical and organizational measures to safeguard your data, including:

– End-to-end encryption of sensitive data in transit and at rest
– Role-based access control and authentication procedures
– Frequent data backups and integrity checks
– Security awareness training for personnel handling personal information

These efforts are designed to protect against unauthorized access, alteration, disclosure, or destruction of data.

7. International Data Transfers

Where necessary, personal data may be transferred to jurisdictions outside your country of residence. All such transfers are governed by appropriate safeguards, including the European Commission’s Standard Contractual Clauses (SCCs), ensuring that your data is treated in a manner consistent with EU and CCPA regulations, regardless of the country to which it is transferred.

8. Data Retention

We retain your personal data only as long as necessary to fulfil the purposes set out in this policy, subject to legal and regulatory obligations:

– Usage and technical data: retained for 12 months for performance analytics
– Account and profile data: retained for active account duration and up to 5 years post-deactivation
– Transaction data: retained for 7 years for compliance with financial regulations
– Communication data: retained for 2 years for quality assurance and response tracking
– Preference data: maintained until you withdraw consent or update preferences

9. Cookie Policy

Willowspawn.com uses cookies and similar tracking technologies to enhance user experience, performance, and personalization. These include:

– Essential Cookies: Necessary for site functionality, such as logging in and shopping cart integrity
– Functional Cookies: Remember choices and preferences to tailor user experience
– Analytics Cookies: Collect aggregated data to analyze website usage and performance
– Performance Cookies: Measure site responsiveness and technical errors

10. Cookie Management and Compliance

You may customize your cookie preferences through your browser settings or via our cookie consent banner, which provides granular control over non-essential cookies. We honor “Do Not Track” signals in accordance with CCPA and offer granular opt-out mechanisms as required under GDPR.

11. Children’s Privacy

Willowspawn.com does not knowingly collect or solicit personal data from children under the age of 13. If we become aware that information has been collected from a child under this age, we will promptly delete that data. Parents or guardians who believe personal data has been provided by a child may contact us at [email protected] to request deletion.

12. Policy Updates and User Notifications

We reserve the right to update this Privacy Policy at our discretion to reflect changes in legal frameworks, industry practices, or company processes. Substantive changes will be communicated through prominent notices on our website. You are encouraged to review this policy periodically.

13. Contact Us

For questions, requests, or complaints related to this Privacy Policy or your personal data, you may contact our privacy team at:

Email: [email protected]
Website: www.willowspawn.com

We are committed to full compliance with privacy laws and best practices. If you believe your data has been processed in a manner inconsistent with this policy, we encourage you to reach out so we may address your concerns appropriately.

Your trust is important to us—thank you for visiting willowspawn.com.