Privacy Policy for Hovis21.com
1. Introduction
At Hovis21.com (“we,” “our,” “us”), your privacy and the protection of your personal data are of paramount importance. We are committed to upholding the highest standards of data protection, transparency, and security in accordance with the General Data Protection Regulation (EU) 2016/679 (“GDPR”), the California Consumer Privacy Act of 2018 (“CCPA”), and other applicable data protection laws. This Privacy Policy outlines how we collect, use, disclose, and protect your personal data when you visit or interact with our website.
2. Scope of Policy and Data Controller Role
This Privacy Policy applies to all visitors, users, and customers of Hovis21.com and governs the processing of personal data through our website and related digital services. For the purposes of applicable data protection legislation, Hovis21 is the “data controller” responsible for determining the means and purposes of processing your personal data.
3. Categories of Data Processed
We collect and process the following categories of personal data:
a. Usage Data
We collect information about how you interact with our website, including browser type and version, Internet Protocol (IP) address, pages visited, duration of visit, referral URLs, and other diagnostic data gathered through log files or automated tools.
b. Account Data
When you register or create an account, we collect identifiable information such as your full name, email address, mailing address, and telephone number.
c. Profile Data
We may collect information relating to your personal preferences, purchase history, browsing behavior, and interactions with our content or services.
d. Communication Data
This includes any data you provide when contacting our support team or interacting with us through contact forms, support chats, or email. This may include the content of communications, response history, and related metadata.
e. Technical Data
We collect information about the device and software you use to access the site, including device type, operating system, browser configuration, language preferences, and system settings.
f. Transaction Data
If you make a purchase on Hovis21.com, we collect order details, billing and shipping addresses, transaction identifiers, and limited payment information, processed securely via our payment provider.
g. Preference Data
This category includes your marketing and communication preferences, choices regarding newsletters, and product interests indicated during browsing or account registration.
4. Legal Bases for Processing
We process your personal data based on the following legal bases:
– Consent: We rely on your consent for activities such as sending marketing communications or placing certain cookies.
– Contractual Necessity: We process data necessary to enter into or perform a contract, such as fulfilling orders or managing your account.
– Legitimate Interests: We may process data to improve the website, detect fraud, analyze usage patterns, and secure our digital infrastructure, provided that such interests are not overridden by your rights and freedoms.
– Legal Obligation: We retain and process data as required to comply with applicable laws and regulatory requirements.
5. Your Rights
In accordance with GDPR and CCPA, you may exercise various rights in relation to your personal data, including:
– Right of Access: Obtain confirmation of whether we process your personal data and receive a copy of that data.
– Right to Rectification: Request the correction of inaccurate or incomplete personal data.
– Right to Erasure (“Right to be Forgotten”): Request the deletion of your personal data, subject to regulatory and contractual retention requirements.
– Right to Restriction: Limit processing of your personal data under specific conditions.
– Right to Data Portability: Receive your data in a structured, commonly used, and machine-readable format and transmit it to another controller where applicable.
– Right to Object: Object to the processing of your data based on legitimate interest or direct marketing.
– Rights under CCPA: Californian residents have the right to know about personal data collected, disclosed, or sold and may request deletion or opt-out of the sale of personal information.
To exercise your rights or submit a privacy-related request, please contact us using the details in Section 13.
6. Security Measures
We employ a robust framework of technical and organizational measures to safeguard your personal data. These include:
– Data encryption (SSL/TLS) for secure communication;
– Restricted access controls and user authentication protocols;
– Routine malware scans and system audits;
– Regular data backups and fail-safes;
– Employee training on data protection obligations and best practices.
7. International Transfers
Your personal data may be transferred to countries outside the European Economic Area (EEA) or your jurisdiction, including to service providers who process data on our behalf. When transferring data internationally, we implement standard contractual clauses and appropriate safeguards, in line with GDPR requirements, to ensure an adequate level of data protection.
8. Data Retention
We retain personal data for no longer than necessary to fulfill the purposes outlined in this policy, including legal, accounting, or reporting requirements. Specific retention periods include:
– Usage Data: up to 12 months, for analytics and security purposes;
– Account and Profile Data: retained as long as your account is active;
– Communication Data: retained for up to 2 years, or longer if required for legal reasons;
– Transaction Data: retained for a minimum of 7 years for compliance with financial regulations;
– Preference Data: retained until you modify or withdraw your consent.
9. Cookie Policy
Cookies are small data files placed on your device when you visit Hovis21.com. We use the following categories:
– Essential Cookies: Necessary for core website functionality, such as login authentication and cart management.
– Functional Cookies: Enable enhanced features like personalized settings or remembering preferences.
– Analytics Cookies: Collect aggregated and anonymized data on site performance and user behavior.
– Performance Cookies: Help us improve site speed, responsiveness, and usability.
10. Cookie Management and Legal Compliance
As required under GDPR and CCPA, we obtain your consent to place non-essential cookies on your device. On your first visit to Hovis21.com, you are presented with a cookie consent banner allowing you to accept, reject, or customize cookie preferences. You can update or withdraw your consent at any time via the cookie settings link located in the website footer. Most browsers also allow you to manage cookie settings through your browser controls.
11. Protection of Children’s Privacy
Hovis21.com is not intended for children under 13 years of age, and we do not knowingly collect personal data from anyone in this age group. If we become aware that we have inadvertently obtained personal information from a child under 13, we will take immediate steps to delete such data from our servers. Parents or legal guardians who believe that their child has submitted personal data to us are encouraged to contact us directly.
12. Policy Updates and Notification
We reserve the right to amend this Privacy Policy at any time to reflect changes in our data processing activities, legal obligations, or technological advancements. If material changes are made, we will notify users through appropriate means, including prominent notice on our website or direct communication where applicable. Continued use of Hovis21.com following such modifications will be deemed as acceptance of the updated terms.
13. Contact Us
For any questions, concerns, or requests relating to this Privacy Policy or your personal data, you may contact us at:
Email: [email protected]
We are dedicated to ensuring your privacy rights are respected and upheld in accordance with applicable data protection laws. You may also contact your relevant supervisory authority to lodge a complaint if you believe your rights have been violated.
—
Hovis21.com is committed to protecting your personal data and complying fully with GDPR, CCPA, and other applicable privacy regulations. If you have concerns about how your data is handled, please reach out to us at [email protected].