PRIVACY POLICY
1. Introduction
At holisticcircumcisions.com (“Website,” “we,” “our,” or “us”), we are committed to respecting your privacy and safeguarding your personal data. We recognize your right to control your personal information and are dedicated to protecting it through our compliance with applicable data protection and privacy laws, including the General Data Protection Regulation (EU) 2016/679 (“GDPR”) and the California Consumer Privacy Act (“CCPA”), as amended.
This Privacy Policy explains how we collect, use, disclose, and safeguard your personal data when you visit our Website or engage with our services. We apply strict privacy practices and technical safeguards to ensure your data is handled lawfully, transparently, and with respect.
2. Scope of This Policy & Data Controller
This Privacy Policy applies to all users visiting or interacting with holisticcircumcisions.com, or otherwise providing personal data to us in connection with our services or Website.
For purposes of the GDPR and other applicable laws, holisticcircumcisions.com is the Data Controller for the personal data collected through our Website. If you have any questions regarding this Policy, you may contact our Data Protection contact via email at [email protected].
3. Categories of Personal Data Processed
We collect and process the following categories of personal data, depending on your interactions with the Website:
a. Usage Data
Includes information about how you use the Website, including IP addresses, pages visited, browser type, referral URLs, access time, session duration, and browsing logs.
b. Account Data
Includes personal identifiers you provide when creating an account or ordering services. This may include your full name, email address, phone number, billing/shipping address, and account login credentials.
c. Profile Data
Includes your preferences, interests, purchase history, lifestyle data, online behavior, and service selections.
d. Communication Data
Includes all correspondence and communications with us, such as support inquiries, messages submitted through contact forms, or chat interactions.
e. Technical Data
Includes device identifiers, browser plug-in types, operating system, platform, mobile network information, and other device configuration details.
f. Transaction Data
Includes payment details (processed securely via third-party gateways), order history, shipping information, and service fulfillment data.
g. Preference Data
Includes information you provide concerning marketing preferences, communication opt-ins, product or content interest indicators, and survey responses.
4. Legal Bases for Processing Personal Data
We process personal data based on the following legal bases, as required under GDPR:
– Performance of a Contract: To fulfill our contractual obligations with you, such as processing service orders or providing customer support.
– Consent: Where you have explicitly consented to data processing, such as subscribing to our newsletter or accepting non-essential cookies.
– Legitimate Interests: Where necessary to pursue our legitimate business interests, provided such interests are not overridden by your rights. These include Website functionality, marketing strategy optimization, fraud prevention, and service development.
– Legal Obligation: Where processing is required to comply with applicable legal obligations or regulatory requirements.
Where CCPA applies, we do not “sell” personal data as defined under California law. We process consumer personal data solely for disclosed business purposes.
5. Your Rights Under Data Protection Law
You have robust data protection rights under GDPR and CCPA. These include:
– Right to Access: You may request confirmation as to whether we process your personal data, and access a copy of that data.
– Right to Rectification: You may request correction of inaccurate or incomplete personal data we hold about you.
– Right to Erasure: You may request deletion of your data, subject to legal and contractual retention requirements.
– Right to Restriction: You may request restricted processing under certain circumstances.
– Right to Data Portability: You may request to receive your data in a structured, commonly used, and machine-readable format.
– Right to Object: You may object to processing based on legitimate interests or direct marketing.
– Right to Withdraw Consent: You may withdraw previously given consent at any time without affecting the lawfulness of prior processing.
To exercise these rights, email [email protected]. We will respond without undue delay in accordance with legal obligations.
6. Security Measures
We implement and maintain industry-standard administrative, technical, and physical safeguards to protect your personal data from unauthorized access, use, disclosure, alteration, or destruction. These measures include:
– Data encryption in transit and at rest
– Secure socket layer (SSL) protocols
– Access control mechanisms and multi-factor authentication
– Regular vulnerability assessments and backups
– Staff training on data protection practices
While no system is completely immune to cyber threats, we are committed to the highest standards of data security.
7. International Data Transfers
Where necessary, personal data may be transferred to and processed in countries outside of the European Economic Area (EEA) or United States. In such cases, we ensure adequate protection by implementing one or more of the following:
– Standard Contractual Clauses approved by the European Commission
– Binding Corporate Rules
– Transfers based on legal adequacy decisions
Your data will continue to be protected in accordance with this Privacy Policy and applicable laws.
8. Data Retention
We retain personal data only for as long as necessary to fulfill the purposes outlined in this Privacy Policy, unless a longer retention period is required or permitted by law.
Data type retention periods:
– Usage and Technical Data: up to 12 months
– Account and Transaction Data: 7 years (for tax and contractual reasons)
– Communication Data: 3 years from last interaction
– Preference and Profile Data: until you withdraw consent or update preferences
Data that is no longer necessary is securely anonymized or deleted.
9. Cookie Policy
holisticcircumcisions.com uses cookies and similar technologies to enhance user experience, analyze traffic, and support our marketing efforts.
Types of cookies used:
– Essential Cookies: Necessary for Website operation and core functions (e.g., login, checkout).
– Functional Cookies: Help provide enhanced functionality and personalization.
– Analytics Cookies: Collect data on Website usage to help improve user experience (e.g., Google Analytics).
– Performance Cookies: Track Website performance metrics such as page load times and error reporting.
10. Cookie Management and Compliance
Upon first visit to the Website, we request your consent for non-essential cookies in compliance with GDPR. You may adjust your cookie settings at any time via our cookie management tool or your browser settings.
CCPA residents may opt out of the “sale” of personal information (where applicable) and request limitations on the use of certain cookies through notification banners and dedicated links.
11. Special Protections for Children
Our Website is not directed toward children under the age of 13, and we do not knowingly collect or solicit personal information from minors. Any data inadvertently collected will be promptly deleted upon verification. Parents or guardians with questions should contact us at [email protected].
12. Policy Updates
We reserve the right to amend or update this Privacy Policy from time to time to reflect changes in lawful requirements, technology, or our business practices. Material changes will be posted prominently on holisticcircumcisions.com. Continued use of the Website following any updates constitutes your acceptance of those changes.
13. Contact
If you have any questions regarding this Privacy Policy, or if you wish to exercise any of your privacy rights, please contact us:
Email: [email protected]
We are committed to full compliance with applicable privacy laws and to addressing your concerns promptly and transparently.