Privacy Policy
At StHelenaCity.com, we are firmly committed to safeguarding your privacy and protecting the personal data you entrust to us. This Privacy Policy outlines how we collect, use, share, and protect your information in compliance with the General Data Protection Regulation (GDPR), the California Consumer Privacy Act (CCPA), and other applicable data protection laws. We are dedicated to maintaining the transparency, integrity, and security of your data.
1. Introduction
We recognize that your privacy is foundational to building trust. At StHelenaCity.com, we process your personal data responsibly, lawfully, and fairly. This Privacy Policy explains how we collect and process your personal data when you interact with our website, services, and communications. By using this site, you agree to the data practices described herein.
2. Scope of This Policy and Data Controller
This Privacy Policy applies to all users and visitors of StHelenaCity.com. The data controller responsible for your personal data is StHelenaCity.com. When you engage with our platform in any capacity, whether as a visitor, registered user, or customer, we act as the controller of your data under the applicable laws.
If you have any questions or requests regarding your data, please contact us at [email protected].
3. Categories of Data We Process
We process the following categories of personal data, which may be collected directly from you or through your interaction with our website:
a. Usage Data
Includes your browser type and version, IP address, referring URLs, pages visited, login timestamps, session durations, and navigation patterns on StHelenaCity.com.
b. Account Data
Includes your full name, email address, telephone number, postal address, and account credentials, if applicable.
c. Profile Data
Includes your interests, preferences, login behavior, purchase history, content interactions, and feedback submitted via our site.
d. Communication Data
Includes support requests, customer service records, email correspondence, feedback submissions, and communication preferences.
e. Technical Data
Includes device identifiers, operating system details, hardware configurations, mobile network information, and system diagnostics.
f. Transaction Data
Includes purchase information, payment methods (excluding full payment card numbers), billing details, shipping addresses, and transaction history.
g. Preference Data
Includes your choices regarding marketing communications, newsletter subscriptions, demographic interests, and product or service preferences.
4. Legal Bases for Processing
We only process your personal information when legally permitted to do so. The primary legal bases under GDPR for processing include:
– Performance of a contract: When it is necessary to process your data to fulfill a contract to which you are a party.
– Consent: When you have given us clear affirmative consent to process your personal data for a specific purpose (e.g., marketing).
– Legitimate interests: When processing is necessary for our legitimate business interests, provided those interests are not overridden by your privacy rights.
– Compliance with a legal obligation: When processing is required by law or regulation.
For users covered by the CCPA, we do not sell personal data and only process data in accordance with permitted legal categories.
5. Your Rights
Under applicable privacy regulations, you have the following rights regarding your personal data:
– Right of Access – You may request confirmation that we hold your personal data and request copies of that information.
– Right to Rectification – You may request that inaccurate or incomplete information be corrected.
– Right to Erasure – You may request that we permanently delete your personal data under specific circumstances.
– Right to Restrict Processing – You may ask us to limit the use of your data in certain scenarios.
– Right to Data Portability – You may request a copy of your data in a structured, machine-readable format for use elsewhere.
To exercise any of these rights, please contact us at [email protected]. We may require you to verify your identity before we fulfill your request.
6. Security Measures
StHelenaCity.com employs advanced technical and organizational measures to secure your personal data. These include:
– Data encryption for stored and transmitted data
– Role-based access controls and authentication protocols
– Daily system back-ups and disaster recovery systems
– Ongoing staff training in data privacy and security protocols
– Monitoring systems to detect and mitigate unauthorized access
Despite our efforts, no online system is entirely immune to threats. We encourage users to take standard precautions to protect their accounts.
7. International Data Transfers
Data collected from users may be processed or stored in jurisdictions outside your country of residence. Where such international transfers occur, we apply safeguards including the use of European Commission Standard Contractual Clauses and equivalent provisions for CCPA compliance. These ensure that your data is protected with the same level of care as required by EEA, UK, and US privacy laws.
8. Data Retention
We retain your personal data only for as long as necessary to fulfill the purposes for which it was collected, or as required by law. General retention periods include:
– Account and Profile Data: Up to 6 years after account closure
– Transaction Records: 7 years (for tax and legal compliance)
– Communication Logs: 2 years from last contact
– Cookie and Usage Data: 24 months from collection or latest activity
After such periods, your data is securely destroyed or anonymized.
9. Cookie Policy
Our website uses cookies to enhance user experience, measure website performance, and offer relevant content. Types of cookies used include:
– Essential Cookies: Required for site functionality and security.
– Functional Cookies: Help remember your settings and preferences.
– Analytics Cookies: Gather aggregated usage data to improve site performance.
– Performance Cookies: Optimize responsiveness and website delivery speeds.
10. Cookie Management and User Choices
You may manage your cookie preferences at any time through your browser settings or through cookie consent banners provided on StHelenaCity.com. Where required by GDPR and CCPA, we obtain your prior consent before placing non-essential cookies. You may withdraw consent or adjust preferences without affecting essential website services.
For CCPA-specific rights, California residents may opt-out of the sale of personal information (though we do not sell your personal data) and request disclosure of collected categories and third-party disclosures.
11. Protection of Children
StHelenaCity.com does not knowingly collect or solicit personal data from children under the age of 13. If you believe that a child under 13 has provided us with personal information without appropriate parental consent, please contact us immediately at [email protected], and we will take steps to delete such information promptly.
12. Policy Updates
We reserve the right to update or modify this Privacy Policy at any time, in accordance with legal or operational requirements. We will notify users of material changes via our website or by email where appropriate. Continued use of StHelenaCity.com after such updates constitutes acknowledgment and acceptance of the revised terms.
13. Contact Us
If you have questions, concerns, or requests regarding this Privacy Policy or your personal data, please contact:
Email: [email protected]
We are committed to ensuring your data privacy and regulatory rights are fully respected. If you believe your data protection rights have not been addressed appropriately, you may also have the right to lodge a complaint with a supervisory authority in your jurisdiction.
StHelenaCity.com operates in full compliance with the GDPR, CCPA, and relevant data protection frameworks. We welcome your questions and are here to assist you with any privacy concerns.