Privacy Policy for spawnrift.com
1. Introduction
At Spawn Rift (“we,” “us,” or “our”), accessible via spawnrift.com (the “Website”), we are firmly committed to safeguarding the privacy, security, and data protection rights of visitors, users, and customers (“you” or “your”). We uphold the highest standards of data governance and align our practices with global privacy frameworks, including the General Data Protection Regulation (GDPR) and the California Consumer Privacy Act (CCPA). This Privacy Policy details how we collect, use, disclose, and protect your personal data, ensuring your privacy and control over your information.
2. Scope of Policy and Data Controller Role
This Privacy Policy applies to all personal data collected or processed through the Website or related communications. Spawn Rift acts as the “data controller” for the purposes of GDPR and the “business” under the CCPA with respect to the personal data you provide. As the controller, we determine the purpose and means of processing your personal information in accordance with applicable laws.
3. Categories of Personal Data Collected and Processed
We may collect and process the following categories of personal data:
a. Usage Data
Information automatically collected when you interact with spawnrift.com, which may include your IP address, browser type, device identifiers, session duration, pages visited, referring URLs, access times, and geographic location.
b. Account Data
Information necessary for registration or purchases, such as your full name, email address, telephone number, postal address, and login credentials.
c. Profile Data
Data generated as part of your engagement with our services, which may include product preferences, shopping behavior, ratings, wish lists, and browsing patterns.
d. Communication Data
Records of your interactions with us, including customer service requests, email communications, social media interactions, or other support-related correspondence.
e. Technical Data
Device-specific data including hardware model, operating system, platform settings, and configurations, as well as performance diagnostics relevant to your device or browser.
f. Transaction Data
Details pertaining to purchases and orders, such as billing addresses, payment confirmations (via secure third-party providers), transaction history, and delivery information.
g. Preference Data
Information related to your preferences regarding marketing communications, product categories, notification settings, and engagement metrics collected from surveys or opt-ins.
4. Legal Bases for Processing Personal Data
We process your personal data only when justified by a valid legal basis under applicable law. These include:
– Performance of a contract: To fulfill obligations related to purchases, support requests, or account management.
– Legitimate interests: To ensure the Website’s security, perform analytics, prevent fraud, and improve services, provided such interests do not override your rights.
– Compliance with legal obligations: To meet statutory requirements, including tax or anti-fraud regulations.
– Consent: When required, especially in relation to marketing communications or non-essential cookies, we rely on your explicit consent.
5. Your Privacy Rights
We respect your right to control your personal data. Subject to applicable law, you are entitled to:
– Access: Request confirmation on whether we process your personal data and receive a copy.
– Rectification: Request correction of incomplete or inaccurate data.
– Erasure: Request deletion of your data, where applicable.
– Restriction: Request that processing be limited under certain conditions.
– Data Portability: Request transfer of your data to another service provider in machine-readable format.
– Objection: Object to processing where based on legitimate interests or direct marketing.
To make a request, please contact us at [email protected].
If you are a California resident, additional rights under the CCPA include:
– Right to Know: You may request information about the categories and specific pieces of data we collect and how we use them.
– Right to Delete: You may request deletion of personal information, subject to limitations.
– Right to Opt-Out: You have the right to opt-out of the sale of your personal data, though we do not sell your data in the sense defined by CCPA.
– Non-Discrimination: You will not be penalized for exercising any of your rights under applicable law.
6. Security Measures
To protect your personal data, we implement appropriate security measures in accordance with industry standards, including:
– Data encryption in transit (HTTPS/SSL) and at rest.
– Role-based access control and authentication layers.
– Continuous data backup and recovery planning.
– Ongoing employee training in secure data-handling procedures and privacy awareness.
– Regular monitoring of system vulnerabilities and incident response protocols.
7. International Data Transfers
Your data may be transferred to and processed in jurisdictions outside your country of residence, including the United States. In doing so, we ensure that adequate protection is guaranteed by:
– Implementing Standard Contractual Clauses approved by the EU Commission.
– Ensuring recipient jurisdictions are covered under adequacy decisions or equivalent protections.
– Applying supplementary safeguards as necessary to meet GDPR and CCPA expectations.
8. Data Retention
We retain personal data only for as long as necessary to fulfill the purposes for which it was collected or to comply with legal, contractual, or regulatory obligations. Typical retention periods include:
– Usage Data: up to 12 months for analytics and operational logging.
– Account and Profile Data: retained while the account is active and up to 6 years thereafter for legal compliance.
– Communication Data: retained for up to 3 years following the last correspondence.
– Transaction Data: retained for up to 7 years for tax and accounting requirements.
– Preference Data: stored only as long as necessary to manage consent and marketing preferences.
9. Cookie Policy
spawnrift.com utilizes cookies and similar tracking technologies to enhance user experience, deliver functionality, and measure site performance. Categories include:
– Essential Cookies: Strictly necessary for Website functionality and security, such as authentication and shopping cart integrity.
– Functional Cookies: Enable personalization like remembering user preferences and settings.
– Analytics Cookies: Collect anonymized data on user interactions, time spent on pages, and navigation flows to improve our services.
– Performance Cookies: Monitor site performance, track error messages, and improve loading efficiency.
10. Cookie Management and Compliance
Visitors are presented with a Cookie Consent Manager that allows full control over non-essential cookies. Cookies requiring consent are disabled unless specific permission is granted through the consent prompt. You may also control or delete cookies manually via your browser settings.
In compliance with GDPR and CCPA, we respect user signals such as Global Privacy Control (GPC) and do not process non-essential cookies without appropriate consent. For California residents, the “Do Not Sell or Share My Personal Information” option is available through our cookie settings.
11. Children’s Privacy Protection
spawnrift.com is not intended for children under the age of 13, and we do not knowingly collect or process personal data from minors without appropriate parental or guardian consent. If it becomes evident that we have collected personal data from a child in violation of applicable laws, we will take appropriate steps to delete it.
12. Policy Updates
We reserve the right to update this Privacy Policy to reflect changes in technology, operational practices, legal obligations, or regulatory guidance. Where material changes are made, we will notify users through the Website interface or other appropriate communication channels.
13. Contact Us
If you have questions, concerns, or requests regarding this Privacy Policy or your personal data, you may contact us at:
Email: [email protected]
Website: spawnrift.com
We are dedicated to maintaining an open dialogue and will respond as promptly as compliance obligations allow.
Spawn Rift is committed to full compliance with applicable data protection laws and industry best practices. If you have any concerns about your personal data being misused or not properly handled, we encourage you to reach out to us directly using the contact information above.