PRIVACY POLICY
At Willow Pond (“we”, “us”, or “our”) is committed to safeguarding your personal data and upholding your privacy rights. This Privacy Policy outlines how we collect, use, and protect your information when you visit our website at https://atwillowpond.com or engage with our services. We process your personal data with the highest respect for your privacy, subject to the requirements and safeguards outlined under the General Data Protection Regulation (GDPR) and the California Consumer Privacy Act (CCPA), among other applicable laws.
1. Commitment to Privacy and Data Protection
We value your trust and are committed to protecting your personal information. Our privacy-first approach ensures transparency, integrity in data handling practices, and the ability for you to remain in control of your personal data. Whether you are browsing our website, purchasing from us, or contacting our team, your data is protected using robust technical and organizational measures.
2. Scope of this Policy and Our Role as Data Controller
This Privacy Policy applies to all personal data collected through our website, https://atwillowpond.com, and related services. As the data controller, At Willow Pond determines the purposes and means of processing your personal data. Any third-party platforms we use to collect or process data on our behalf act as data processors under contractual obligations to safeguard your information.
3. Categories of Personal Data We Collect and Process
We may collect and process the following categories of personal information:
– Usage Data: Includes information about how you interact with https://atwillowpond.com such as IP addresses, browser types, page views, session durations, referring URLs, and timestamps.
– Account Data: Includes identifying and contact details provided when you create an account, such as your full name, shipping/billing address, email address, and telephone number.
– Profile Data: Includes demographic data, purchase history, saved items, wishlist content, and behavioral information around browsing and shopping preferences.
– Communication Data: Includes information you provide in customer support communications, contact form submissions, chat sessions, emails, or feedback, including related metadata and correspondence records.
– Technical Data: Includes device identifiers, operating system versions, browser plugins, screen sizes, and system settings that help optimize our website’s functionality.
– Transaction Data: Includes order details, payment confirmations, shipping addresses, and delivery tracking information. Please note that payment card details are processed by secure, PCI-DSS-compliant payment providers.
– Preference Data: Includes your communication and marketing preferences, consent records, and indicated interests in certain types of products or communications.
4. Legal Bases for Processing Personal Data
Under GDPR, we rely on the following legal bases to process your data:
– Consent: Where you have actively consented to specific uses of your data, such as subscribing to a newsletter or accepting non-essential cookies.
– Contractual Necessity: To fulfill our obligations under a contract, such as processing orders and delivering products you’ve purchased.
– Legitimate Interests: For purposes such as fraud prevention, website security, business development, customer relationship management, and improving user experience, provided our interests are not overridden by your rights.
– Legal Obligation: Where processing is required to comply with legal requirements or regulatory demands.
Where required by CCPA, we ensure data processing is transparent and limited to disclosed purposes, and we do not sell your personal information.
5. Your Rights Under Privacy Laws
Under GDPR and where applicable under CCPA, you have the following rights:
– Right of Access: Obtain a copy of the personal data we hold about you.
– Right to Rectification: Request correction of inaccurate or incomplete information.
– Right to Erasure: Request deletion of your personal data where appropriate.
– Right to Restriction: Limit the processing of your data under specific conditions.
– Right to Data Portability: Receive your data in a structured, commonly used, machine-readable format and transmit it to another controller.
– Right to Withdraw Consent: Withdraw your consent at any time for any processing based on consent.
– Right to Object: Object to processing based on legitimate interests or direct marketing.
– Do Not Sell My Personal Information (CCPA): California residents may opt out of any “sale” of personal data as defined by CCPA.
To exercise these rights, please email us at: [email protected].
6. Security Measures
We employ a variety of technical and organizational security measures to protect your data, including:
– End-to-end encryption of data in transit and at rest
– Secure server infrastructure and firewalls
– Comprehensive access controls and role-based permissions
– Regular security audits and vulnerability testing
– Password hashing and account protection features
– Staff training in data protection and security awareness
7. International Data Transfers
Where personal data is transferred outside the European Economic Area (EEA), such transfers are carried out under appropriate safeguards, including the use of Standard Contractual Clauses approved by the European Commission or other equivalent legal mechanisms. We ensure that data handled by international service providers complies with applicable regional privacy laws.
8. Data Retention Practices
We retain personal data only for as long as necessary for the purposes outlined in this policy. Retention periods vary by data type:
– Usage and Technical Data: up to 12 months for analytics and performance assessment.
– Account, Profile, Communication, and Transaction Data: retained for as long as your account remains active and up to 6 years thereafter to comply with legal obligations (e.g., tax records).
– Preference and Consent Data: retained until you update your preferences or withdraw consent.
Data no longer required is securely deleted or anonymized.
9. Cookie Policy
We use cookies and similar technologies to enhance your browsing experience and analyze website traffic. Our website places the following types of cookies:
– Essential Cookies: Required for basic website functionality, such as navigation and access to secure areas.
– Functional Cookies: Remember user preferences and choices to improve usability.
– Analytics Cookies: Collect aggregate information about how visitors use the site to help us improve performance.
– Performance Cookies: Monitor system performance, error logs, and server loads.
10. Cookie Management and Compliance
When you first visit https://atwillowpond.com, you are presented with a consent banner allowing full control over which types of cookies are enabled. You may change or withdraw your consent at any time via our Cookie Preferences page or through your browser settings. We adhere to consent requirements under GDPR and respect browser signals for global privacy control per CCPA guidelines.
11. Children’s Privacy
We do not knowingly collect personal data from children under the age of 13. If we become aware that such data has been collected without verified parental consent, we will take immediate steps to delete the information in compliance with the Children’s Online Privacy Protection Act (COPPA) and similar local laws.
12. Policy Updates and Amendments
We reserve the right to modify this Privacy Policy to reflect updates in legal requirements or changes to our practices. Any significant changes will be communicated via our website or direct user notifications when appropriate. Continued use of https://atwillowpond.com following changes indicates your acceptance of the revised policy.
13. Contact Us
For any questions, concerns, or data access requests related to your personal data or this Privacy Policy, please contact us using the email address below:
We are fully committed to compliance with global data protection standards and to protecting the privacy of all individuals who interact with https://atwillowpond.com. Please contact us at any time if you believe your data has been handled improperly, or if you would like to exercise your privacy rights.
