Privacy Policy
1. Introduction
At Ridge Willow (“we,” “our,” or “us”), accessible via ridgewillow.com, we are committed to safeguarding your personal data and respecting your privacy. This Privacy Policy outlines our practices regarding the collection, use, disclosure, and protection of personal data in accordance with applicable laws, including the General Data Protection Regulation (GDPR), the California Consumer Privacy Act (CCPA), and other relevant privacy frameworks. We strive to ensure that your personal information remains confidential, accurate, and secure.
2. Scope and Data Controller
This Privacy Policy applies to all users of ridgewillow.com and to all personal data collected through our website and services. Ridge Willow is the data controller of all personal data collected, determining the purposes and means of processing. For any concerns regarding this policy or the processing of your personal information, please contact us at [email protected].
3. Categories of Personal Data We Collect and Process
We may collect and process the following categories of personal data:
a. Usage Data
We collect data on how you interact with our website, including browser type, IP address, referring/exit pages, operating system, date/time stamps, and session duration.
b. Account Data
Information provided during account creation or update, such as your full name, mailing address, email address, and contact number.
c. Profile Data
Includes preferences, product interests, past purchases, browsing behavior, and personalized settings associated with your user profile.
d. Communication Data
Records of support requests, email correspondence, and other communications between you and us, including customer service inquiries.
e. Technical Data
Details about the devices and systems used to access our website, including device model, operating system, browser configuration, and screen resolution.
f. Transaction Data
History of purchases, billing addresses, delivery data, payment method (excluding full credit card numbers), and related documentation.
g. Preference Data
Marketing preferences, consent records, product affinity choices, and opt-in or opt-out selections for communications.
4. Legal Bases for Processing
We rely on several legal grounds to process your personal data, including:
– Consent: When you grant explicit permission (e.g., email marketing).
– Contractual Necessity: When data processing is required to perform a contract (e.g., purchases).
– Legal Obligation: Where processing is necessary to comply with legal responsibilities.
– Legitimate Interest: Where processing supports business activities, such as website performance analysis, provided this does not override your fundamental rights and freedoms.
5. Your Rights
As a data subject, you have the following rights, subject to applicable laws and limitations:
– Right of Access: Request information about the personal data we hold about you.
– Right to Rectification: Request correction of inaccurate or incomplete information.
– Right to Erasure: Request deletion of your personal data under certain conditions.
– Right to Restrict Processing: Ask us to restrict processing where appropriate.
– Right to Data Portability: Request a copy of your data in a structured, commonly used electronic format.
– Right to Object: Object to processing based on legitimate interests or direct marketing.
– Right to Non-Discrimination (CCPA): You will not be discriminated against for exercising your rights.
To exercise your rights, please email us at [email protected].
6. Security Measures
We have implemented a range of organizational, administrative, and technical safeguards to protect your personal data, including:
– Data encryption in transit and at rest
– Role-based access controls and authentication protocols
– Routine backups and incident response protocols
– Staff training on data protection best practices
These measures are regularly reviewed and updated to ensure ongoing security.
7. International Transfers
When transferring personal information outside the European Economic Area (EEA) or other jurisdictions, we apply appropriate safeguards. These may include the use of Standard Contractual Clauses approved by the European Commission or reliance on adequacy decisions for jurisdictions deemed to provide equivalent protection.
8. Data Retention
We retain personal data only for as long as necessary to fulfill the purposes for which it was collected and to comply with legal or regulatory requirements:
– Account Data: Retained during your account’s active status and for up to 6 years following closure
– Transaction Data: Retained for 7 years for tax and audit compliance
– Communication Data: Retained for 2 years following last interaction
– Marketing Preferences: Retained until you update or withdraw your preferences
– Usage and Technical Data: Retained for up to 12 months for analytics purposes
9. Cookie Policy
Our website uses cookies and similar tracking technologies to improve functionality and analyze usage. The types of cookies employed include:
– Essential Cookies: Necessary to operate core functions of the website (e.g., login, cart)
– Functional Cookies: Enhance usability by remembering user choices and preferences
– Analytics Cookies: Collect aggregated data to analyze trends and user engagement
– Performance Cookies: Optimize content delivery and website responsiveness
10. Cookie Management and Compliance
You may manage cookie preferences through your browser settings or via the cookie consent tool on ridgewillow.com. We comply with both GDPR and CCPA requirements by offering clear options to accept or decline non-essential cookies and providing transparent notices at the time of data collection.
California residents may opt out of the “sale” or “sharing” of personal information using applicable mechanisms on our site. We honor “Do Not Track” signals in alignment with CCPA mandates.
11. Children’s Privacy
ridgewillow.com is not intended for children under the age of 13. We do not knowingly collect, solicit, or process personal data from minors under this age. If we become aware that we have collected personal data from a child under 13, we will promptly delete such information. Parents or legal guardians may contact us at [email protected] to request deletion of a child’s data.
12. Updates to This Policy
We reserve the right to amend this Privacy Policy as required by law or to reflect changes in our operations and practices. Users will be notified of any significant changes via the website, and continued use of ridgewillow.com after such updates constitutes acceptance of the revised policy.
13. Contact Us
If you have any questions, concerns, or requests regarding this Privacy Policy or your personal privacy, you may contact us at:
Email: [email protected]
We are committed to transparency, accountability, and compliance, and encourage users to contact us with any privacy-related concerns. Thank you for trusting ridgewillow.com with your information.
