Privacy Policy for Old Bones Reviews

1. Introduction

At Old Bones Reviews (“we”, “us”, “our”), accessible via oldbonesreviews.com (the “Website”), we are firmly committed to upholding your privacy rights and safeguarding your personal information. We recognize the importance of data protection and privacy as fundamental digital rights. This Privacy Policy provides details on how we collect, process, store, and protect personal data in accordance with applicable data protection legislation, including the General Data Protection Regulation (“GDPR”) and the California Consumer Privacy Act (“CCPA”).

2. Scope of Policy and Data Controller Role

This Privacy Policy applies to all users, visitors, and subscribers to oldbonesreviews.com. For GDPR purposes, Old Bones Reviews is the Data Controller with respect to your personal information. This means we determine the purposes and methods by which your personal data is processed. For any privacy-related queries, you may contact us at [email protected].

3. Categories of Personal Data We Collect

We collect and process the following categories of personal information:

a. Usage Data
Includes information automatically collected through your browser or device when accessing the Website. This may encompass your IP address, browser type and version, device identifiers, operating system, referral URLs, session timestamps, and browsing behavior.

b. Account Data
Includes information you provide upon creating an account or profile, such as your full name, residential or business address, email address, and telephone number.

c. Profile Data
Includes details relating to your user preferences, purchase history, review contributions, browsing patterns, and internal user profiling used to improve our services and tailor your experience.

d. Communication Data
Includes the content of correspondence with our team, including email inquiries, customer support messages, contact forms, and retention of communication threads.

e. Technical Data
Includes data related to your device hardware and software, browser plug-ins, time zone setting, platform, and other telemetry required to render our Website securely and efficiently.

f. Transaction Data
Includes payment verification details, billing or delivery address, payment method tokens, and order fulfillment records, particularly when purchasing products or services on our Website.

g. Preference Data
Includes marketing preferences, consent to email subscriptions, newsletter opt-ins, browsing interests, and behavioral indications used to provide relevant content.

4. Legal Bases for Processing

Under GDPR, we rely on the following legal bases to process your personal data:

– Contractual Necessity: Processing is required to fulfill our contractual obligations to you (e.g., account registration, order fulfillment).
– Consent: You have provided explicit permission to process your data for specified purposes (e.g., newsletter subscription).
– Legitimate Interests: Processing is necessary for our legitimate interests in improving website functionality, analyzing user behavior, preventing fraud, and developing our services, provided such interests are not overridden by your rights and freedoms.
– Legal Obligation: In cases concerning compliance with legal or regulatory requirements, we process data to meet these obligations.

5. Your Data Protection Rights

You are entitled to the following privacy rights under GDPR and, where applicable, CCPA:

– Right of Access: You may request access to your personal data and obtain a copy of your records.
– Right to Rectification: You have the right to correct any inaccurate or incomplete information.
– Right to Erasure: You may request the deletion of your personal data, subject to retention limitations under the law.
– Right to Restrict Processing: You may request temporary restriction of the processing of your data.
– Right to Data Portability: You may receive your personal data in a commonly used, machine-readable format and transfer it to another controller.
– Right to Object: You may object to processing based on our legitimate interests or direct marketing purposes.
– Right to Non-Discrimination: Under the CCPA, you will not be subject to differential treatment for exercising your privacy rights.

To exercise any of the above rights, please contact us at [email protected]. We reserve the right to verify your identity before responding to your request.

6. Security Measures

We implement a combination of technical, physical, and organizational safeguards to protect your personal data against unauthorized access, disclosure, or destruction. These include, but are not limited to:

– Data encryption using secure socket layer (SSL) protocols
– Role-based access controls for internal data handling
– Regular internal audits and data protection training
– Routine system and software updates
– Secure storage and backup systems

7. International Transfers

Your personal data may be transferred and processed outside your country of residence, including countries that may not provide the same level of data protection. Where such transfers occur, we rely on established legal mechanisms such as the European Commission’s Standard Contractual Clauses or other recognized adequacy decisions to protect your personal information.

8. Data Retention

We retain your personal data only as long as necessary to fulfill the purposes outlined in this Policy or to comply with legal, accounting, or regulatory requirements. Retention periods vary by data category:

– Usage & Technical Data: Up to 24 months
– Account & Profile Data: Until account deletion or 36 months of inactivity
– Transaction Data: 6 years, to comply with financial reporting standards
– Communication Data: 3 years from last contact
– Preference Data: Until consent is withdrawn

After the applicable retention period, your data will be securely deleted or anonymized.

9. Cookies Policy

We use cookies and similar technologies to enhance your browsing experience on oldbonesreviews.com. Cookies may be set by us or third-party providers and serve the following categories:

– Essential Cookies: Required for the operation of our Website (e.g., login sessions, security protection).
– Functional Cookies: Enable us to remember your preferences (e.g., language settings, saved preferences).
– Analytics Cookies: Collect aggregated information about site usage and performance to improve functionality.
– Performance Cookies: Track metrics such as site speed, responsiveness, and user journey diagnostics.

10. Cookie Management and Compliance

You can manage cookie preferences through your browser settings or via cookie consent tools provided on our Website. Under GDPR and CCPA, you have the right to opt in or out of non-essential cookies and to withdraw your consent at any time.

Some cookies essential to the Website’s operation may not be subject to consent. Disabling functional or analytics cookies may affect your user experience.

11. Children’s Privacy

Our Website is not directed at children under the age of 13. We do not knowingly collect or solicit personal information from minors. If we learn that personal data from a child under the age of 13 has been collected without verifiable parental consent, we will delete such information promptly. If you have reason to believe information of a child has been collected, please contact us at [email protected].

12. Policy Updates

We reserve the right to amend or update this Privacy Policy to reflect changes in our practices, legal requirements, or operational procedures. Changes will be communicated via the Website, and where appropriate, directly to registered users. Continued use of the Website after such updates signifies your acceptance of the amended policy.

13. Contact

If you have questions, concerns, or requests regarding this Privacy Policy or our handling of your personal data, you may contact us securely at:

Email: [email protected]
Website: https://oldbonesreviews.com (Contact page)

We are committed to maintaining full compliance with the GDPR, CCPA, and other applicable privacy regulations. Users with data protection inquiries are encouraged to get in touch with our team at the contact email provided above.