Privacy Policy for wh8te.com
wh8te.com (“we,” “us,” or “our”) values your privacy and is committed to protecting your personal data. This Privacy Policy outlines our practices concerning the collection, use, and safeguarding of your personal information. Our commitment aligns with applicable data protection laws, including the General Data Protection Regulation (GDPR) and the California Consumer Privacy Act (CCPA).
1. Introduction
Your privacy is paramount to us. At wh8te.com, we are dedicated to handling your personal data lawfully, transparently, and securely. We recognize your right to privacy and aim to provide clarity about how and why we process your information across our website and services.
2. Scope of Policy and Data Controller Role
This Privacy Policy applies to all users of our website, wh8te.com, and associated services. For the purposes of applicable data protection legislation, we are the “data controller” responsible for determining the purposes and means of processing your personal data.
3. Categories of Personal Data We Process
We may collect, process, and store various categories of personal data, including:
a. Usage Data
This includes information about how you use our website, such as pages visited, time spent on pages, navigation patterns, browser type and version, Internet Protocol (IP) address, geographic location, referral source, and usage duration.
b. Account Data
Data provided when you create an account, including your full name, email address, mailing address, phone number, username, and password.
c. Profile Data
Information collected as a result of your interaction with our services, including your preferences, purchase history, activity logs, and behavioral information.
d. Communication Data
Records of your correspondence with us, including support requests, email communications, live chat logs, and any other communication between you and our team.
e. Technical Data
Device-specific data including your device type, operating system, hardware model, browser language, screen resolution, and system configurations collected via cookies, log files, and similar technologies.
f. Transaction Data
Details related to purchases and payments, including items bought, delivery addresses, billing details, order history, and payment method details (processed through secure third-party payment providers—we do not store full card numbers).
g. Preference Data
Your selected settings and consents, including choices regarding marketing communications, product interests, cookie preferences, and notification settings.
4. Legal Bases for Processing Personal Data
We process your personal data on the following lawful bases:
– Consent: Where you have provided clear consent for us to process your data for a specific purpose (e.g., newsletter subscriptions).
– Contractual Necessity: Where processing is required to fulfill a contract with you (e.g., purchasing a product or accessing your user account).
– Legal Obligation: Where we are legally bound to process your data (e.g., for tax or fraud prevention purposes).
– Legitimate Interests: Where processing is required for our legitimate business interests, provided such interests are not overridden by your rights and freedoms (e.g., analytics, service improvement, and customer support).
5. Your Rights
Under GDPR, the CCPA, and other applicable laws, you have specific rights regarding your personal data. These include:
– Right of Access: You can request access to a copy of the personal data we hold about you.
– Right to Rectification: You may request that any incorrect, incomplete, or outdated data be corrected.
– Right to Erasure: You may request deletion of your data when it is no longer necessary or if you have withdrawn your consent.
– Right to Restrict Processing: You have the right to request that we suspend the processing of your data.
– Right to Data Portability: You may request a copy of your data in a readable and structured format for use with other services.
To exercise any of the above rights, contact us at [email protected].
6. Data Security Measures
We implement robust technical and organizational measures to ensure data security, including:
– End-to-end encryption for sensitive data (using industry-standard protocols such as TLS).
– Role-based access controls that limit data access to authorized personnel only.
– Regular data backups and disaster recovery protocols.
– Staff training on data privacy and information security practices.
7. International Data Transfers
Personal data collected via wh8te.com may be stored and processed in countries outside your jurisdiction, including countries that may not provide the same level of data protection as your home jurisdiction. In such cases, we implement one or more of the following safeguards:
– Standard Contractual Clauses approved by the European Commission.
– Data processing agreements with third-party vendors.
– Additional technical and organizational protective measures.
8. Data Retention
We retain personal data only as long as necessary for the purposes set out in this policy, subject to applicable legal requirements:
– Usage, Technical, and Profile Data: up to 24 months
– Account and Transaction Data: 6 years following last purchase or account activity
– Communication Data: up to 3 years following final contact
– Preference Data: retained until updated or withdrawn by the data subject
When data is no longer needed, it is securely deleted or anonymized.
9. Cookie Policy
We use cookies and similar technologies on wh8te.com for various purposes:
– Essential Cookies: Necessary for basic website functionality and security.
– Functional Cookies: Enhance your browsing experience based on prior interactions.
– Analytics Cookies: Help us understand user behavior and improve website performance.
– Performance Cookies: Monitor system responsiveness and availability.
10. Cookie Management and Compliance
Upon your first visit, we request explicit consent to use non-essential cookies, in compliance with GDPR and CCPA. You can update your cookie preferences at any time via our cookie management interface or through your browser settings. We honor “Do Not Track” browser signals where technologically feasible.
11. Children’s Privacy
Our services are not directed to individuals under the age of 13. We do not knowingly collect personal data from children without verifiable parental consent. If we are made aware that we have unintentionally collected data from a child under 13, we will promptly delete such information.
12. Updates to This Privacy Policy
We reserve the right to update or modify this Privacy Policy at any time to ensure ongoing compliance and reflect changes in our data practices. We encourage you to review this policy periodically for any updates. Where material changes are made, you will be notified through appropriate means such as direct communication or prominent announcements on wh8te.com.
13. Contact Us
If you have any questions about this Privacy Policy, your personal data, or if you wish to exercise your rights, please contact us at:
Email: [email protected]
Compliance Statement
We are committed to full compliance with applicable data protection and consumer privacy regulations. If you have concerns about how your data is handled, or if you believe your rights are not being respected, please reach out to us via [email protected].