Privacy policy
At dalemisczynski.com, we adhere to the California Consumer Privacy Act (CCPA), General Data Protection Regulation (GDPR) (for EU residents), and other applicable U.S. state privacy laws (e.g., Virginia Consumer Data Protection Act, Colorado Privacy Act) to protect your personal information. This policy details your rights and our obligations in collecting, using, and safeguarding your data.
1. Information We Collect
We categorize collected information to ensure transparency, and only collect data necessary for business operations:
2. Legal Bases for Using Your Information
Under U.S. and EU privacy laws, we only use your data if we have a valid legal basis, including:
- Performance of a Contract: To process orders (e.g., verify payment, ship products) or fulfill account services (e.g., order tracking).
- Legitimate Interest: To improve website functionality (e.g., fix broken links using usage data), prevent fraud (e.g., flag unusual payment activity), or send personalized product recommendations (with opt-out options).
- Consent: To send marketing emails, use third-party analytics tools, or collect data via non-essential cookies (you can withdraw consent at any time).
- Legal Obligation: To comply with tax laws (retain order records for 7 years) or respond to government subpoenas.
3. Third-Party Data Sharing
We never sell your PII to third parties. We only share data with trusted partners who act as "data processors" (bound by confidentiality agreements):
- Payment Processors: Stripe/PayPal to securely process payments (they only receive data needed to complete transactions).
- Shipping Carriers: USPS, UPS, DHL to deliver orders (receive your shipping address and order ID).
- Fraud Prevention Services: Sift/MaxMind to detect unauthorized transactions (receive limited PII like email and IP address).
If a third party needs to use your data for their own purposes (e.g., a marketing partner for co-branded promotions), we will obtain your explicit consent first.
4. Your Privacy Rights
As a U.S. or EU resident, you have the following rights under applicable laws (you can exercise these rights by emailing service.vip.lris@gmail.com or using the "Privacy Dashboard" in your account):
5. Cookie Management
Our website uses two types of cookies, and you can control them via your browser or our cookie banner:
To view or delete existing cookies stored on your device, refer to your browser’s help documentation (e.g., Safari: Preferences > Privacy > Manage Website Data).
6. Data Retention
We retain your data only for as long as necessary:
- PII (Account/Orders): Retained for 2 years after your last account activity (or 7 years for tax compliance, whichever is longer).
- Marketing Data: Retained until you opt out of emails (then deleted within 30 days).
- Usage Data: Anonymized after 12 months (e.g., IP addresses are stripped of identifying segments).
When data is no longer needed, we securely delete it (e.g., shred physical records, overwrite digital files) or anonymize it so it can no longer identify you.
7. Children’s Privacy
Our website is not intended for users under 13 years old. We do not knowingly collect PII from children under 13. If we discover we have collected data from a child under 13, we will delete it immediately and notify parents/guardians via the provided contact information.
8. Changes to This Policy
We may update this policy to reflect new laws (e.g., upcoming U.S. federal privacy legislation) or business practices. When we make material changes:
- We will post the updated policy on the website with a new "Last Updated" date.
- We will send a notification to users who have opted in to policy updates (via email or in-account alert) at least 7 days before changes take effect.
Your continued use of the website after the effective date constitutes acceptance of the updated policy.
9. Contact for Privacy Concerns
If you have questions about this policy, want to exercise your privacy rights, or file a complaint, please contact:
- Email: service.vip.lris@gmail.com (marked "Privacy Request" in the subject line)
- Data Protection Officer (DPO): Attn: DPO, 123 Fashion Avenue, New York, NY 10001, USA
- California Residents: You may also file a complaint with the California Attorney General’s Office.
We will acknowledge your request within 3 business days and resolve it in compliance with applicable laws.