Privacy Policy - GoodNightSweetheartLocations

1. Introduction

At GoodNightSweetheartLocations.com (“we,” “us,” or “our”), we are deeply committed to safeguarding the privacy and personal data of our visitors, users, and customers. This Privacy Policy outlines our practices with respect to the collection, use, disclosure, and protection of your personal information. We adhere to all applicable data protection laws, including the General Data Protection Regulation (EU 2016/679) (“GDPR”) and the California Consumer Privacy Act (“CCPA”), as amended by the California Privacy Rights Act (“CPRA”), and are devoted to implementing the mechanisms necessary to protect your privacy and uphold your legal rights.

2. Scope of Policy and Data Controller Role

This Privacy Policy applies to all personal data collected and processed through your use of our website located at https://goodnightsweetheartlocations.com (the “Site”). For the purposes of data protection law, GoodNightSweetheartLocations.com is the data controller responsible for your personal information.

This policy covers data collected through browsing the Site, making purchases, submitting inquiries, subscribing to services, and interacting with our content and systems. By using the Site, you consent to the data practices described herein.

3. Categories of Data Processed

We process several categories of personal data depending on your interaction with our Site:

a. Usage Data
Includes information collected automatically when you visit the Site, such as IP address, browser type, geographic location, referral source, length of visit, operating system, session duration, clickstream data, and interaction with page elements.

b. Account Data
Includes information voluntarily submitted when creating an account, such as name, billing/shipping addresses, email address, and contact number.

c. Profile Data
Includes information about preferences, interests, activity history, purchase behavior, saved locations, and other behavioral data derived from your interactions with the Site.

d. Communication Data
Includes records of correspondence between you and us, including support requests, inquiry submissions, feedback, and any communication via online forms or email.

e. Technical Data
Includes device information, such as hardware model, operating system version, browser configurations, screen resolution, and system diagnostics.

f. Transaction Data
Includes payment details (processed securely by third-party payment services), transaction identifiers, delivery details, order history, and fulfillment status.

g. Preference Data
Includes data regarding marketing preferences, notification settings, email subscriptions, cookie consent choices, and expressed interests in particular categories or services.

4. Legal Bases for Processing

We collect and process your personal data only when legally permissible under applicable laws. The lawful bases include:

– Consent: Where you have given clear, informed consent to the processing of your personal information.
– Contractual Necessity: When data processing is necessary for the performance of a contract to which you are a party.
– Legitimate Interests: When the processing is necessary to pursue our legitimate interests (e.g., improving the Site, enhancing user experience, preventing fraud), so long as such interests are not overridden by your fundamental rights and freedoms.
– Legal Obligations: Where processing is necessary to comply with applicable legal requirements.

5. Your Rights

As a data subject, you are entitled to exercise your rights under the GDPR and CCPA, as applicable:

– Right of Access: Obtain confirmation of whether we process personal data about you and access a copy of such data.
– Right to Rectification: Request corrections to any inaccurate or incomplete personal data.
– Right to Erasure: Request deletion of your personal data, subject to certain exceptions.
– Right to Restrict Processing: Request limitations on the processing of your personal data under specified conditions.
– Right to Data Portability: Request to receive personal data you provided in a structured, accessible, machine-readable format and transmit to another controller.
– Right to Object: Object to the processing of your data on grounds related to your particular situation.
– Right to Withdraw Consent: Withdraw your consent at any time where processing is based on your consent.
– Do Not Sell or Share My Personal Information (CCPA): California residents may opt out of the sale or sharing of their personal data by submitting a request through the mechanisms available on the Site.

To exercise any of the above rights, please contact us using the information provided in Section 13.

6. Security Measures

We implement robust technical and organizational safeguards to protect your personal data from unauthorized access, accidental loss, destruction, damage, misuse, or disclosure. These include, but are not limited to:

– SSL encryption and secure data transmission protocols
– Access controls and authentication mechanisms for internal data access
– Frequent system backups and data recovery procedures
– Ongoing training of staff on data protection principles and security awareness

7. International Transfers

Some of your personal information may be transferred to, and maintained on, servers located outside of your jurisdiction, including countries not recognized by the European Commission as providing an adequate level of data protection. Where applicable, we rely on Standard Contractual Clauses approved by the European Commission or other legally adopted transfer mechanisms to ensure your data is adequately protected abroad.

8. Data Retention

We retain personal data only for as long as necessary to fulfill the purposes for which it was collected, including for the satisfaction of legal, accounting, or reporting obligations. Retention periods are as follows:

– Usage and Technical Data: 12 months
– Account and Transaction Data: 7 years after your last transaction
– Communication Data: 3 years from last interaction
– Profile and Preference Data: As long as the user maintains an active account or subscription
– Cookie Data: As defined in our Cookie Policy (see Section 9)

When data is no longer necessary for the stated purposes, it will be securely deleted, anonymized, or aggregated.

9. Cookie Policy

We use cookies and similar technologies to enhance user experience and optimize the functionality of GoodNightSweetheartLocations.com. Cookies are small text files stored on your device by your browser.

Our Site uses the following categories of cookies:

– Essential Cookies: Necessary for core site functionality such as user authentication or secure form submissions.
– Functional Cookies: Enable customization and remembered preferences for improved usability.
– Analytics Cookies: Collect anonymized usage data to help us understand how users interact with the Site and improve performance.
– Performance and Optimization Cookies: Monitor site responsiveness, uptime, and load performance.

10. Cookie Management and Compliance with GDPR & CCPA

On your first visit to the Site, and periodically thereafter, you will be prompted to manage your cookie preferences via a cookie consent banner. You may accept or reject non-essential cookies. If you wish to modify your preferences at any time, you may adjust them through your browser settings or revisit our cookie settings interface.

Pursuant to the GDPR, we seek affirmative, informed consent for non-essential cookies. Under the CCPA, California residents are provided clear options to opt out of tracking and data sharing activities.

11. Children’s Privacy

Our services are not intended for children under 13 years of age. We do not knowingly collect or solicit personal information from anyone under the age of 13. If you are a parent or guardian and believe that your child has provided us with personal information, please contact us using the details in Section 13. Upon verification, we will promptly delete any such information in compliance with applicable laws.

12. Policy Updates

We reserve the right to modify or update this Privacy Policy at any time as business practices, technology, or legal obligations evolve. You are encouraged to review this Policy periodically to stay informed of any changes. Where appropriate or required by law, we will notify you of material changes via the Site or direct communication.

13. Contact Us

If you have any questions, concerns, or requests related to this Privacy Policy, your rights, or our data processing practices, please contact us at:

Email: [email protected]

We will make every effort to respond to queries or requests concerning your personal data in a timely and thorough manner.

GoodNightSweetheartLocations.com is fully committed to protecting your personal data and ensuring our ongoing compliance with the GDPR, CCPA, and other applicable privacy regulations. Your trust and privacy are of paramount importance to us.