Last updated: 08-Sep-2023
Thank you for choosing Santa Fe Heart for your Privacy Policy. This Privacy Policy aims to explain how Santa Fe Heart (“we,” “us,” “our”) collects, stores, protects, and uses your personal data. We are committed to respecting your privacy and complying with all applicable data protection regulations, including the General Data Protection Regulation (GDPR) and the California Consumer Privacy Act (CCPA).
By using our website or providing your data to us, you agree to the Terms and Conditions outlined in this Privacy Policy. Please read this document carefully to understand our practices regarding your personal data.
1. Data Collection
1.1 Information You Provide
We may collect personal data when you interact with us, such as:
- Contact information (name, email address, phone number, postal address)
- Account registration details (username, password, profile information)
- Payment information (credit card details, billing address)
- User-generated content (reviews, comments, feedback)
1.2 Automatic Collection
We may automatically collect certain information about your device and usage, including:
- Device information (IP address, browser type, operating system)
- Log data (pages visited, time spent, referring website)
- Cookies and similar technologies (tags, pixels, web beacons)
2. Data Storage and Protection
2.1 Storage Location
Santa Fe Heart primarily stores and processes your data in Privacy Policy. However, please note that we may transfer and store your personal data to and in other jurisdictions for the purposes described in this Privacy Policy. By providing your data, you consent to such transfer and storage.
2.2 Data Security Measures
We take reasonable measures to protect your personal data from unauthorized access, alteration, or destruction. These measures include:
- Encryption and pseudonymization of personal data
- Regular data backups
- Access controls and strong authentication mechanisms
- Employee training and awareness programs
- Third-party audits and assessments
Despite our efforts to protect your data, no method of transmission over the internet or electronic storage is entirely secure. Therefore, we cannot guarantee its absolute security. We advise you to use all appropriate safeguards and precautions when transmitting and sharing personal data.
3. Data Use and Processing
We collect and process your personal data for the following purposes:
- To provide and maintain our services
- To communicate with you, including regarding account updates and support
- To process payment transactions and fulfill orders
- To personalize your experience and improve our services
- To conduct internal research and analytics, including web traffic analysis
- To comply with legal obligations
- To detect and prevent fraud, security breaches, or other illegal activities
We only process your personal data when we have a legal basis to do so, such as:
- Consent: You have given us clear and explicit consent to process your data for specific purposes.
- Contractual Necessity: The processing is necessary for the performance of a contract with you.
- Legal Obligation: The processing is necessary to comply with our legal obligations.
- Legitimate Interests: Our interests or those of third parties are not overridden by your data protection rights.
4. User Rights
In compliance with applicable data protection regulations, you have the following rights regarding your personal data:
4.1 Access and Portability
You have the right to request access to the personal data we hold about you, as well as the right to obtain a copy of it in a commonly used electronic format.
4.2 Correction and Deletion
You may request the correction or deletion of your personal data if it is inaccurate or no longer necessary for the purposes outlined in this Privacy Policy. Please note that certain data may be exempt from deletion due to legitimate requests or legal obligations.
4.3 Objection to Processing
You have the right to object to the processing of your personal data when it is based on legitimate interests. We will cease processing your data unless we can demonstrate compelling legitimate grounds for the processing that override your interests, rights, and freedoms.
4.4 Consent Withdrawal
If you have provided us with consent for certain processing activities, you have the right to withdraw that consent at any time. Please note that the withdrawal of consent does not affect any processing conducted prior to the withdrawal.
5. Third-Party Data Sharing
We do not sell, rent, or lease your personal data to third parties for any purpose. However, we may share your personal data to:
- Trusted service providers who assist us in delivering our services (e.g., payment processors, shipping companies).
- Analytics and advertising platforms to measure and optimize our marketing efforts (e.g., Google Analytics).
- Legal and regulatory authorities to comply with our legal obligations or defend our rights and interests.
We ensure that any third parties who process your personal data on our behalf do so with appropriate security measures in place and in compliance with data protection regulations.
6. Children’s Privacy
Our services are not intended for children under the age of 16. We do not knowingly collect personal data from children without verifiable parental consent. If we become aware of such data being collected, we will take steps to delete it promptly.
7. Changes to This Policy
Santa Fe Heart reserves the right to update or change this Privacy Policy from time to time. Any changes will be effective immediately upon posting the revised policy on our website. You should review this Privacy Policy periodically for any updates or changes.
8. Contact Information
If you have any questions, concerns, or requests regarding this Privacy Policy or the way we handle your personal data, please Contact Us at Privacy Policy.
Please remember that this is a generic privacy policy and may require customization. We strongly advise consulting legal professionals to ensure compliance with specific laws and regulations in your region.