Privacy Policy for CribSaga
1. Introduction
At CribSaga, we are firmly committed to protecting your privacy and ensuring the responsible use of your personal data. We recognize the importance of safeguarding your information and handling it in accordance with applicable laws, including the General Data Protection Regulation (GDPR) and the California Consumer Privacy Act (CCPA). This Privacy Policy describes how CribSaga collects, uses, discloses, and protects personal data obtained through our website at cribsaga.com and our related services.
2. Scope of Policy and Data Controller Role
This Privacy Policy applies to all personal data collected via the website cribsaga.com and any associated services, mobile applications, or customer communications. CribSaga is the data controller and is responsible for determining the purposes and means of processing your personal data. If you have any questions or requests related to this policy, you may contact us at [email protected].
3. Categories of Data Processed
We may collect and process the following categories of personal data:
– Usage Data: Information automatically collected when you visit the site, such as your IP address, browser type, browsing behaviors, date and time of access, and referring URLs.
– Account Data: Personal details you provide when creating an account, including your name, email address, mailing address, and phone number.
– Profile Data: Information associated with your account preferences, demographic characteristics, purchase history, and behavioral insights.
– Communication Data: Records and metadata related to your interactions with us, such as emails, customer support inquiries, and feedback submissions.
– Technical Data: Device information such as operating system, device identifiers, browser configurations, language settings, and network identifiers.
– Transaction Data: Details related to purchases and transactions, including billing addresses, payment methods (excluding full payment card details), order histories, and delivery instructions.
– Preference Data: Marketing preferences, communication consents, and product interests or favorites you choose to share with us.
4. Legal Bases for Processing
We process your personal data pursuant to the following legal bases, as defined under the GDPR:
– Performance of a Contract: To fulfill transactions or provide services that you request through cribsaga.com.
– Legitimate Interests: To analyze website usage, safeguard the site from fraud, improve user experience, and conduct direct marketing in compliance with applicable law.
– Consent: Where legally required, we will seek your affirmative consent before processing specific categories of data (e.g., marketing communications, cookie storage).
– Legal Obligations: Where compliance with legal or regulatory requirements necessitates collection or disclosure.
For users located in the United States, including California residents, we collect and use your data in accordance with the rights and obligations established under the CCPA and other applicable laws.
5. Your Rights
Subject to applicable legal provisions, you have the following rights:
– Right of Access: Obtain confirmation on whether your data is being processed and request access to personal data held about you.
– Right to Rectification: Request correction of inaccurate or incomplete personal data.
– Right to Erasure: Request deletion of your personal data, where legally permissible.
– Right to Restriction: Request that processing of your personal data be limited under certain circumstances.
– Right to Portability: Receive your personal data in a structured, commonly used, machine-readable format, and transmit that data to another controller where feasible.
– Right to Object: Object to processing based on legitimate interests or for marketing purposes, subject to applicable exceptions.
You may exercise these rights by contacting us at [email protected]. We will respond in accordance with applicable laws and within legally defined timelines.
6. Security Measures
CribSaga implements appropriate technical and organizational security measures to protect your personal data against unauthorized access, disclosure, alteration, or destruction. These measures include, but are not limited to:
– Encryption protocols for data transmission and storage;
– Role-based access control and authentication systems;
– Secure data backups and disaster recovery planning;
– Internal training on information security and privacy compliance.
7. International Data Transfers
Personal data collected by CribSaga may be transferred to and processed in jurisdictions outside your country of residence, including countries that may not provide the same level of data protection. Where such transfers occur, we use industry-standard mechanisms such as the European Commission’s Standard Contractual Clauses to ensure adequate safeguards are in place, in compliance with GDPR and equivalent regional laws.
8. Data Retention
We retain personal data only as long as necessary to fulfill the purposes for which it was collected, or as otherwise required by applicable laws. Our default retention periods include:
– Account Data and Profile Data: Retained for the duration of your account and thereafter for a limited period consistent with operational and legal needs.
– Transaction Data: Retained for up to 7 years for tax and accounting compliance.
– Communication Data: Retained for 2 years following the last user interaction.
– Technical and Usage Data: Typically retained for no longer than 12 months, unless needed for security or performance analytics.
– Preference Data: Retained until consent is withdrawn or updated.
9. Cookie Policy
CribSaga uses cookies and similar technologies to enhance user experience on cribsaga.com. These may include:
– Essential Cookies: Necessary for the website to function properly, including session authentication and navigation.
– Functional Cookies: Enhance site functionality (e.g., language settings, saved preferences).
– Analytics Cookies: Help us understand how users interact with the site and improve performance (e.g., Google Analytics).
– Performance Cookies: Monitor uptime, load speed, and system errors for optimization.
Third-party service providers may also place cookies as part of integrated services. No cookies are deployed for tracking or marketing without obtaining prior consent if required by applicable law.
10. Cookie Management and Compliance
In accordance with GDPR and CCPA requirements, you have the ability to manage your cookie preferences when visiting cribsaga.com. You may adjust cookie settings via your browser or through our website’s cookie consent tool. Users in California may also opt out of “sale” or “sharing” of personal data, where definitions apply, by following designated links provided in the footer of the website.
11. Children’s Privacy
CribSaga does not knowingly collect or process personal data from children under the age of 13. If we become aware that personal data of a child has been inadvertently collected, we will take immediate steps to delete such information and prevent future collection. If you believe that we may have collected information from a child under 13, please notify us at [email protected].
12. Policy Updates
We reserve the right to amend this Privacy Policy at our discretion. Material changes will be communicated in a manner appropriate to the sensitivity of the data involved and the nature of the changes made. Continued use of cribsaga.com following any updates to this policy constitutes your acknowledgement of those changes.
13. Contact Us
If you have any questions, concerns, or requests regarding this Privacy Policy or how we handle your data, please contact us at:
Email: [email protected]
We are committed to full compliance with all applicable data protection laws and encourage you to reach out with any concerns regarding your privacy or your rights under this policy.