Privacy Policy for stnicholasrestoration.com

1. Introduction

At stnicholasrestoration.com (“we,” “our,” “us”), we are committed to protecting and respecting your privacy. Your trust is central to everything we do. This Privacy Policy outlines how we collect, process, store, and protect your personal data in accordance with applicable data protection laws, including the General Data Protection Regulation (GDPR) and the California Consumer Privacy Act (CCPA). We are committed to handling your information securely, transparently, and with care.

2. Scope of Policy and Data Controller Role

This Privacy Policy applies to all users, visitors, and customers of stnicholasrestoration.com who access or use our services. For purposes of data protection laws, stnicholasrestoration.com is the data controller of your personal data. We determine the purposes and means of the processing of your personal data in accordance with this policy.

If you have any questions about this policy or how your data is handled, you may contact us at [email protected].

3. Categories of Data We Process

We collect and process the following categories of personal data for the purposes explained below:

a. Usage Data:
Includes data collected automatically when you visit our website. This may include information such as your IP address, browser type and version, time zone setting, operating system, referral source, session duration, pages viewed, and navigation paths.

b. Account Data:
This pertains to the information you provide when creating an account or completing forms on our site. Such data may include your full name, postal address, email address, and telephone number.

c. Profile Data:
Includes your preferences, purchase history, browsing behavior, and feedback you provide related to your interactions with our platform and services.

d. Communication Data:
Involves the information you send to us through contact forms, email correspondences, or customer support interactions. This may include support requests, complaint documentation, and correspondence logs.

e. Technical Data:
Such as device type, screen resolution, operating system, browser configuration, plug-in types, language settings, and diagnostic logs relevant to site functionality and security.

f. Transaction Data:
Refers to details of any transactions you carry out on stnicholasrestoration.com, including purchases, payment method details (only non-sensitive transactional metadata), shipping and delivery information.

g. Preference Data:
Comprises your stated interests and marketing preferences, subscription choices, and responses to promotional campaigns or surveys.

4. Legal Bases for Processing Your Data

Under GDPR, we rely on the following legal bases for the lawful processing of your personal information:

– Consent: Where you have given us clear, affirmative permission to process your data for specified purposes, such as subscribing to newsletters or accepting cookies.
– Contract: When processing your data is necessary for performing a contract with you (e.g., fulfilling an order).
– Legal Obligation: When we are legally required to process your data (e.g., compliance with tax and record-keeping laws).
– Legitimate Interests: Where processing is necessary for our legitimate business interests, provided those interests are not overridden by your rights and interests. These may include website analytics, fraud prevention, network security, and service improvement.

Under CCPA, we affirm that we do not sell personal information. Any disclosure or sharing of data is done strictly in compliance with the permitted business purposes.

5. Your Rights

You have the following rights in relation to your personal data:

– Right to Access – You have the right to request access to the personal data we hold about you.
– Right to Rectification – You may request the correction of inaccurate or incomplete personal data.
– Right to Erasure – You have the right to request deletion of your personal data under certain conditions.
– Right to Restrict Processing – You may request limiting the processing of your personal data where applicable.
– Right to Data Portability – You may request to receive your personal data in a structured, commonly used format, and transmit it to another controller.
– Right to Object – You may object to certain types of processing, including direct marketing and profiling.

You may exercise these rights by contacting us at [email protected]. We will respond promptly and within the timeframes outlined by applicable law.

6. Security Measures

We implement advanced technical and organizational measures to safeguard your personal data, including but not limited to:

– TLS/SSL encryption for data transmission;
– Access controls to limit internal data access to authorized personnel only;
– Regular security audits and vulnerability assessments;
– Secure data backups and recovery procedures;
– Mandatory data protection training for employees and contractors.

While no system can guarantee absolute security, we take appropriate measures to minimize risks and prevent unauthorized access or data breaches.

7. International Transfers

Where your personal data is transferred outside of the European Economic Area (EEA), including to service providers operating in non-adequate countries, we employ Standard Contractual Clauses approved by the European Commission or other legally compliant mechanisms to ensure data protection equivalent to GDPR standards.

For users in California and other U.S. states, we maintain compliance with relevant data protection regulations, including the CCPA, via contractual safeguards and data protection commitments from all partners and vendors.

8. Data Retention

We retain personal data only as long as it is necessary for the purpose for which it was collected, or to comply with legal, regulatory, or contractual obligations. Retention periods are as follows:

– Usage and Technical Data: retained for 12 months for analytics and security purposes;
– Account and Transaction Data: retained for up to 7 years for tax and contract obligations;
– Communication Data: retained for 3 years following last interaction;
– Preference and Marketing Data: retained until you withdraw consent or unsubscribe;
– Child-related data, if collected with consent, is subject to immediate deletion upon request.

Data no longer required is securely erased or anonymized.

9. Cookie Policy

Cookies are employed on stnicholasrestoration.com to enhance functionality, security, and user experience. Categories of cookies used include:

– Essential Cookies: Necessary for site operation (e.g., session management, authentication);
– Functional Cookies: Remember your preferences, such as language or region selections;
– Analytics Cookies: Collect aggregated data on visitor interactions with the website;
– Performance Cookies: Optimize loading times and determine usage patterns to improve service delivery.

10. Cookie Management and Compliance

Upon first visit to stnicholasrestoration.com, you will be prompted with a cookie consent banner in compliance with GDPR and CCPA requirements. You may configure or withdraw your consent at any time via the site’s cookie settings or your browser preferences.

Users can disable non-essential cookies using our Cookie Preference Center or through their browser. Some site features may not function correctly without certain cookies.

California residents may also exercise their “Do Not Sell My Personal Information” rights (not applicable here as we do not sell data).

11. Children’s Privacy

Our services are not directed to children under the age of 13. We do not knowingly collect personal data from individuals under 13 years of age. If we are made aware of such collection, we will immediately delete the data and take appropriate remedial measures. Parents and guardians who believe we may have unknowingly collected data from a child should contact us at [email protected].

12. Policy Updates & Notifications

We reserve the right to amend or update this Privacy Policy at our discretion. When changes are made, we will update the policy on stnicholasrestoration.com and, where necessary, provide notice via email or on-site notification mechanisms. Continued use of the website will constitute acceptance of the revised policy.

13. Contact Information

If you have any questions, requests, or concerns about this Privacy Policy or the way we handle your data, you may contact us at:

Email: [email protected]

We are committed to operating stnicholasrestoration.com in full compliance with data protection laws and best practices, and we welcome inquiries regarding how we protect your privacy and uphold your rights.