Effective Date: July 17, 2024
Hearthubb ("we," "us," or "our") respects the privacy of our visitors ("you" or "your") from all regions, including those covered by the General Data Protection Regulation (GDPR) and the California Privacy Rights Act (CPRA). This Privacy Policy explains what information we collect, how we use it, and your rights under these regulations.
Information We Collect
We collect two types of information on our website:
- Personal Information (PI): This includes data that can identify you directly or indirectly, such as your name, email address, IP address, and browsing history (if linked to your identity). We only collect PI you provide voluntarily, like subscribing to our newsletter or leaving a comment.
- Non-Personal Information (NPI): This data does not identify you and may include browser type, operating system, referring website, pages visited, and time of visit. We collect NPI automatically through cookies and tracking technologies.
Legal Basis for Processing PI (GDPR)
We process your PI only when we have a lawful basis to do so under GDPR. These bases may include:
- Consent: You expressly agree to our processing of your PI for a specific purpose (e.g., subscribing to a newsletter).
- Contract: Processing is necessary to fulfill a contract with you (e.g., responding to your inquiries).
- Legitimate Interests: We may process your PI for our legitimate interests, such as website analytics or security, provided your interests and rights do not override ours.
Your Rights under GDPR and CPRA
You have certain rights regarding your PI under GDPR and CPRA, including:
- Right to Access: You can request a copy of your PI we hold.
- Right to Rectification: You can request correction of any inaccurate PI.
- Right to Erasure (Right to be Forgotten): You can request deletion of your PI, subject to certain exceptions.
- Right to Restrict Processing: You can restrict how we use your PI.
- Right to Object: You can object to the processing of your PI for direct marketing or on grounds related to your situation.
- Right to Data Portability: You can request to receive your PI in a machine-readable format and transfer it to another controller. (CPRA only)
- Right to Opt-Out of Sale of Personal Information (CPRA only): You can opt-out of the sale of your PI (as defined by CPRA). We do not currently sell PI, but reserve the right to do so in the future with your explicit consent.
To exercise your rights, please contact us at mrintellectpro@gmail.com.
Data Retention
We will retain your PI only for as long as necessary for the purposes for which it was collected and in accordance with legal requirements.
Data Security
We implement appropriate technical and organizational measures to protect your PI against unauthorized access, disclosure, alteration, or destruction. However, no internet transmission is completely secure.
Children's Privacy
Our website is not directed to children under 13. We do not knowingly collect PI from children under 13. If you are a parent or guardian and believe your child has provided us with PI, please contact us at mrintellectpro@gmail.com. We will take steps to delete the information.
International Data Transfers
We may transfer your PI to servers located outside your region of residence. We will ensure any such transfers are subject to appropriate safeguards under GDPR and CPRA.
Changes to this Privacy Policy
We may update this Privacy Policy. We will post any changes on our website.
Contact Us
If you have any questions about this Privacy Policy, please contact us at mrintellectpro@gmail.com.
Additional Information for California Residents (CPRA)
We are a business under CPRA and do not currently sell your PI as defined by the law. We will update this policy if this changes and will obtain your explicit consent before selling your PI.
0 Comments