Privacy Policy - La Milagrosa Irreverente

1. Introduction

At La Milagrosa Irreverente (“we,” “us,” or “our”), accessible via lamilagrosairreverente.com, protecting and respecting your privacy is of paramount importance. We are firmly committed to maintaining the confidentiality, integrity, and security of any personal data we collect from you. This Privacy Policy outlines how we process your personal data in compliance with the European Union General Data Protection Regulation (GDPR), the California Consumer Privacy Act (CCPA), and other applicable data protection laws.

2. Scope of Policy and Data Controller Role

This Privacy Policy applies to any individual who accesses, browses, interacts with, or makes purchases on lamilagrosairreverente.com. La Milagrosa Irreverente is the Data Controller of your personal data, meaning we determine the purposes and methods of the processing of such data.

By using our website, you acknowledge that you have read and understood this Privacy Policy. If you do not agree with any part of it, please discontinue use of the website and our services.

3. Categories of Data We Process

We collect and process various categories of personal data depending on your interaction with lamilagrosairreverente.com. These categories include:

a. Usage Data: This includes data about your interactions with our website, such as IP address, browser type and version, operating system, pages visited, time spent on pages, referring URLs, and other diagnostic information.

b. Account Data: When you register for an account or complete a purchase, we may collect your full name, email address, mailing address, billing address, telephone number, and any other information you voluntarily provide.

c. Profile Data: Includes demographic data, personal preferences, interests, feedback, product behavior, and purchase history.

d. Communication Data: This includes your messages, inquiries, and the record of interactions with our support services, customer inquiries, and any feedback you submit through our contact forms or email.

e. Technical Data: Comprises device information, device identifiers, operating system, screen resolution, browser configuration, and other system settings and identifiers.

f. Transaction Data: We collect payment-related data such as billing and shipping addresses, purchase details, order history, and preferred payment methods. However, payment processing is handled by secure third-party services, and we do not store full payment card details on our servers.

g. Preference Data: Includes your marketing preferences, subscription choices, and information derived from your consent to receive communications, promotional material, and interest in certain categories of products.

4. Legal Bases for Processing

We collect and process your personal data in accordance with the following legal bases:

– Consent: Where you have given us explicit permission to process your data (e.g., subscription to marketing emails).
– Contractual Necessity: Where data processing is necessary to perform a contract with you or to take steps at your request before entering into a contract (e.g., fulfilling your purchases).
– Legal Obligation: Where processing is required to comply with applicable legal obligations.
– Legitimate Interests: Where it is necessary to pursue our legitimate business interests and those interests are not overridden by your fundamental rights and freedoms (e.g., improving user experience, fraud prevention, marketing analytics).

5. Your Rights

In accordance with GDPR and CCPA, you have the following rights regarding your personal data:

– Right of Access: You may request access to your personal data held by us.
– Right to Rectification: You may request corrections of any inaccurate or incomplete personal data.
– Right to Erasure: Also known as the “right to be forgotten”, you may request the deletion of your personal data.
– Right to Restrict Processing: You may request limitations on how we process your data.
– Right to Data Portability: You may request that we provide your data in a commonly-used machine-readable format and transmit it to another data controller.
– Right to Object: You may object to processing based on legitimate interests or direct marketing.

California residents also have the right to:

– Know what personal data we collect, use, disclose, or sell.
– Opt out of the sale of personal data.
– Non-discrimination for exercising these rights.

To exercise any of your rights, please contact us at [email protected].

6. Security Measures

We take the security of your data seriously and implement appropriate technical and organizational measures to safeguard personal information. These measures include but are not limited to:

– SSL encryption for all website transactions.
– Restricted access controls based on roles.
– Regular data backups and restoration protocols.
– Security awareness training for all employees.
– Secure data storage and physical safeguards.

While we strive to use commercially acceptable means to protect your information, we cannot guarantee absolute security.

7. International Data Transfers

Your data may be transferred to and processed in countries outside the European Economic Area (EEA) and California. We ensure that such transfers are conducted subject to appropriate safeguards, including Standard Contractual Clauses approved by the European Commission or other legally recognized transfer mechanisms.

8. Data Retention

We retain your personal data only for as long as necessary to fulfill the purposes described in this Policy including legal, accounting, or reporting requirements. Specific retention periods include:

– Account Data: Retained for as long as your account remains active or as required to fulfill our legal obligations.
– Transaction and Payment Data: Retained for up to 7 years in compliance with tax and audit laws.
– Communication and Support Data: Retained for 3 years after the last interaction.
– Marketing and Preference Data: Retained until you withdraw your consent or opt out.

Once the retention period expires, your data is securely deleted or anonymized.

9. Cookie Policy

We use cookies and similar technologies on lamilagrosairreverente.com to improve functionality, analyze website traffic, and personalize content.

The types of cookies we use include:

– Essential Cookies: These are strictly necessary for the website to function and cannot be disabled without impairing site functionality.
– Functional Cookies: These enable enhanced functionality and personalization based on your preferences.
– Analytics Cookies: Help us understand how visitors interact with our site, allowing us to improve performance.
– Performance Cookies: Collect data to measure website performance and optimize user experience.

10. Cookie Management and Compliance

In compliance with GDPR and CCPA, you can manage your cookie preferences via our cookie banner or through your browser settings. Upon initial visit to our website, you will have the ability to accept or reject non-essential cookies. You may also opt-out of cookies at any time by changing your browser settings or by adjusting your preferences within your account settings.

Do Not Track (DNT) signals are respected to the extent feasible by current web technologies.

11. Children’s Data Protection

lamilagrosairreverente.com is not intended for use by children under the age of 13. We do not knowingly collect personal data from children under 13 without verifiable parental consent. If we become aware of such data being collected unintentionally, we will take immediate steps to delete it from our systems.

If you are a parent or guardian and believe we may have collected information from a child under 13, please contact us immediately at [email protected].

12. Policy Updates

We reserve the right to modify or update this Privacy Policy to reflect any changes in our practices or relevant laws. If we make material updates, we will notify you through the website or via direct communication where appropriate. Continued use of lamilagrosairreverente.com constitutes acceptance of such changes.

13. Contact Us

For any questions, concerns, or requests in relation to this Privacy Policy or the way we handle your personal data, you can contact us at:

Email: [email protected]
Website: lamilagrosairreverente.com

We are committed to complying with all applicable data protection laws and ensuring the privacy of our users. If you have concerns about your data privacy or believe your rights have been violated, we are here to help.