Privacy Policy - Twin For George

1. Introduction

At Twin For George (“we,” “our,” or “us”), accessible via https://twinforgeorge.com, we are committed to safeguarding your personal data. Respecting your privacy and complying with applicable data protection laws, including the General Data Protection Regulation (GDPR) and the California Consumer Privacy Act (CCPA), are core to how we operate. This Privacy Policy explains how your personal information is collected, used, disclosed, and protected when you use our website and services. We prioritize transparency and accountability in all aspects of data processing.

2. Scope of Policy and Data Controller Role

This Privacy Policy applies to all users who interact with our website, digital services, and communications. Twin For George is the designated data controller for the purposes of the GDPR, which means we determine the purposes and means of processing your personal information. By using twinforgeorge.com, you accept the practices detailed in this Privacy Policy.

3. Categories of Data Processed

We collect and process various categories of personal data, including:

a) Usage Data
This may include data about how you use our website and services, such as your browser type and version, IP address, device identifiers, operating system, referral sources, session timestamps, pages viewed, and interactions with website elements.

b) Account Data
Information you provide while creating or updating an account with us, including your full name, physical address, email address, and telephone number.

c) Profile Data
Preferences related to your shopping behaviors, content interactions, purchase history, favorited products, and user profile settings.

d) Communication Data
Details of communications made between you and Twin For George, including support tickets, messages, contact form submissions, and any other correspondence.

e) Technical Data
Details about the device you use to access our site, such as device model, operating system version, browser settings, installed plugins, language settings, time zone, and screen resolution.

f) Transaction Data
Payment and order details including billing and shipping addresses, payment method (e.g., masked credit card), transaction reference numbers, and order history.

g) Preference Data
Marketing preferences, communication consents, feedback submissions, and product or service interests gathered through your interactions with our site.

4. Legal Bases for Processing

We process your personal data under one or more of the following legal bases:

– Contractual Necessity: Where processing is required to fulfill a contract with you, including access to our services and order fulfillment.
– Legitimate Interest: Where we have a business interest that does not override your privacy rights, such as fraud prevention, network security, and service improvement.
– Consent: Where you have provided meaningful consent, particularly for marketing communications and non-essential cookies.
– Legal Obligation: Where processing is necessary to comply with regulatory obligations.

5. Your Rights Under Data Protection Laws

In accordance with GDPR and CCPA, you may have the following rights:

– Access: You may request confirmation whether we hold personal data about you and obtain a copy.
– Rectification: You have the right to correct inaccurate or incomplete information regarding your personal data.
– Erasure: You may request deletion of your data under certain conditions.
– Restriction of Processing: You may request us to temporarily halt processing where you contest the accuracy or object to processing.
– Data Portability: You have the right to obtain your data in a portable format and transmit it to another controller.
– Objection: You may object to direct marketing or processing based on our legitimate interests.

To exercise these rights, please contact us at [email protected]. We may need to verify your identity before responding to your request.

6. Security Measures

We implement industry-standard security protocols to protect your personal data using:

– Data encryption during transmission and at rest
– Access controls based on role and authorization
– Regular system monitoring against threats and intrusions
– Frequent backups and data recovery procedures
– Employee privacy and security training

Although we strive to protect your data, no online transmission or storage method is fully secure. We encourage you to contact us immediately if you suspect unauthorized activity on your account.

7. International Data Transfers

We may transfer and store personal data outside your country of residence, including to countries not recognized as providing adequate protection by the European Commission. In such cases, we implement appropriate safeguards, including the use of Standard Contractual Clauses approved by the European Commission. Any transfers conducted will fully comply with GDPR, CCPA, or other relevant data protection regulations.

8. Data Retention

We retain personal data only for as long as necessary for the purposes for which they were collected, including:

– Usage Data: 12 months
– Account and Profile Data: As long as the account remains active
– Communication Data: 24 months
– Technical and Preference Data: 12 months
– Transaction Data: 6 years for compliance with financial regulations

Once data is no longer needed, it is securely deleted or anonymized in accordance with our internal data retention policies.

9. Cookie Policy

We use cookies and similar technologies to enhance your experience, analyze site performance, and facilitate personalized services. Our cookie categories include:

– Essential Cookies: Necessary for site functionality, such as authentication and shopping cart management.
– Functional Cookies: Enable enhanced features such as remembering user preferences.
– Performance Cookies: Collect anonymized usage data to help us improve website functionality.
– Analytics Cookies: Allow us to track visitor behavior for optimization and marketing analysis.

10. Cookie Management and Compliance

When you visit twinforgeorge.com for the first time, you will be presented with a cookie consent banner allowing you to accept, reject, or configure cookie settings. You may also manage your cookie preferences via your browser settings. Our cookie usage complies with GDPR’s prior consent requirements and the CCPA’s “Do Not Sell My Personal Information” provisions.

11. Children’s Privacy

Our website and services are not directed to children under 13 years of age. We do not knowingly collect personal information from children. If we become aware that we have collected personal information from a child under the applicable age threshold without parental consent, we will take appropriate action to delete such information.

12. Policy Updates and Notifications

We reserve the right to modify this Privacy Policy at any time to reflect necessary operational, legal, or regulatory changes. Material changes will be communicated through notices on our site or via email where appropriate. Continued use of the site after changes indicates acceptance of the updated Privacy Policy.

13. Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy or the handling of your personal data, please contact us:

Email: [email protected]
Website: https://twinforgeorge.com/contact

We are committed to protecting your privacy and ensuring transparent data practices in line with applicable global data protection laws. If you suspect any misuse of your data or wish to raise a complaint, please reach out via the contact information above, and we will address your concern promptly.