Privacy Policy for SpawnRift.com
1. Introduction
At SpawnRift, accessible via spawnrift.com, we are committed to safeguarding the privacy and personal data of our users, customers, and stakeholders. We fully recognize the importance of securing your personal information and are dedicated to ensuring transparency, security, and compliance with applicable data protection laws, including the General Data Protection Regulation (GDPR) and the California Consumer Privacy Act (CCPA).
We adopt a privacy-first approach across our operations and have implemented technical and organizational measures to ensure your data is handled with the utmost care and integrity.
2. Scope of Policy and Data Controller
This Privacy Policy governs the collection, use, storage, disclosure, and protection of personal information processed through our website and associated services.
SpawnRift acts as the data controller for the purposes of GDPR and the business under CCPA with respect to your personal information collected via spawnrift.com.
If you have any questions about this policy or how we process your personal data, you may contact us at: [email protected].
3. Categories of Data Processed
Depending on your interaction with spawnrift.com, we may collect and process the following categories of personal data:
a. Usage Data
Information about how you use our website, including browser type, device identifiers, internet protocol (IP) address, geographic location, pages visited, access times, and session duration.
b. Account Data
Personal identifiers and contact details such as full name, email address, mailing address, phone number, and login credentials when you create or manage an account.
c. Profile Data
Information related to your interests, preferences, purchase history, shopping behavior, browsing patterns, and other behavioral insights derived from your interactions with the website.
d. Communication Data
Content of your communications with us, such as support tickets, email correspondences, contact forms, survey responses, and chat logs.
e. Technical Data
Device-level information, including operating system, hardware model, browser settings, language preferences, time zones, and network configurations.
f. Transaction Data
Details of transactions carried out through spawnrift.com, including payment information (processed securely via third-party providers), product selection, billing address, order tracking, and delivery details.
g. Preference Data
Your choices concerning marketing communications, product interests, subscription settings, and cookie preferences.
4. Legal Bases for Processing
We rely on the following legal bases to collect and process personal data under GDPR:
– Consent: Where you have given clear permission for us to process your data for specific purposes (e.g., newsletter subscriptions).
– Contract Performance: Where processing is necessary to fulfill our contractual obligations with you (e.g., order fulfillment).
– Legitimate Interests: Where processing is necessary for our legitimate business interests, provided such interests are not overridden by your privacy rights (e.g., fraud prevention, website optimization).
– Legal Obligations: Where processing is required to comply with applicable laws or legal processes.
For users under the CCPA, we disclose whether personal information is collected, the purposes for such collection, and whether it is sold or shared. We do not sell your personal information.
5. Your Rights
Subject to applicable laws, you may exercise the following rights in connection with your personal data:
– Right of Access: Request confirmation of whether we process your personal information and receive a copy of it.
– Right to Rectification: Request corrections to incomplete or inaccurate data.
– Right to Erasure: Request the deletion of your personal data under certain conditions.
– Right to Restriction: Request to limit the processing of your data in certain circumstances.
– Right to Data Portability: Receive your data in a structured, machine-readable format and transmit it to another controller.
– Right to Object: Object to the processing of your data on grounds relating to your specific situation, including opt-out of direct marketing.
California residents additionally have the right to:
– Know what personal information is collected and disclosed.
– Request deletion of personal data.
– Opt-out of the sale or sharing of personal information (SpawnRift does not sell personal data).
– Not be discriminated against for exercising privacy rights.
To exercise your rights, please contact us at [email protected].
6. Security Measures
We maintain robust security protocols to protect your data, including:
– End-to-end encryption of data in transit and at rest.
– Role-based access controls and administrative safeguards.
– Regular backups stored in secure environments.
– Intrusion detection monitoring and vulnerability scanning.
– Employee training and privacy awareness programs.
7. International Transfers
Where data is transferred outside the European Economic Area (EEA) or other jurisdictions with similar data protection regulations, such transfers are conducted under approved mechanisms such as Standard Contractual Clauses and other legal safeguards. We ensure that equivalent levels of data protection are maintained regardless of the destination jurisdiction.
8. Data Retention
We retain your personal information only for as long as necessary to fulfill the purposes for which it was collected, including:
– Account Data: Retained as long as your account is active or until requested for deletion.
– Transaction Data: Retained for a minimum of 7 years to satisfy tax and audit obligations.
– Communication and Support Data: Retained for 3 years.
– Marketing Preference Data: Retained until you withdraw consent.
– Usage and Technical Data: Retained in aggregated form for analytics and site security for 12 months.
Where legal or regulatory obligations require longer retention, we will adhere to those timelines.
9. Cookie Policy
Spawnrift.com uses cookies and similar tracking technologies to provide essential functionality and enhance your browsing experience. We classify our cookies as follows:
– Essential Cookies: Necessary for site operation, including user authentication and security.
– Functional Cookies: Enable customized features such as language preferences or remembering login details.
– Analytics Cookies: Collect anonymized statistics about site usage to help us improve performance.
– Performance Cookies: Measure the effectiveness of advertisements and user interactions for optimization.
10. Cookie Management and Compliance
In compliance with GDPR and CCPA, we provide cookie consent tools upon your first visit to spawnrift.com. You may manage or withdraw your consent to cookies at any time via our Cookie Settings page.
Browser settings may also allow you to block or delete cookies; however, doing so may impact your experience on our site.
California residents may use browser or opt-out signals such as the Global Privacy Control (GPC) to signal their preferences on data collection.
11. Children’s Privacy
SpawnRift does not knowingly collect or solicit personal information from children under the age of 13. If we become aware that such data has been collected inadvertently, we will take immediate steps to delete it. Parents or guardians who believe we may have collected data from a child may contact us at [email protected].
12. Policy Updates
We reserve the right to update or modify this Privacy Policy from time to time in response to changing legal, regulatory, or operational requirements. Any material changes to the policy will be communicated through appropriate channels such as a prominent notice on spawnrift.com.
We encourage you to review this Privacy Policy periodically to stay informed about how your data is protected.
13. Contact
If you have any questions, concerns, or requests related to this Privacy Policy or your personal data rights, please contact:
SpawnRift Privacy Team
Email: [email protected]
We are committed to complying with all applicable privacy laws and providing you with clear and accessible ways to exercise your rights. Please do not hesitate to reach out for any data protection or privacy-related inquiries.