Privacy Policy for patowl.com
1. Introduction
Patowl.com (“we,” “us,” or “our”) is committed to protecting the privacy and personal data of its users. This Privacy Policy outlines how we collect, use, disclose, and protect your personal information when you interact with our website, products, and services.
We place the utmost importance on maintaining transparency, accountability, and trust in all our data practices. Your right to privacy and data protection is integral to the way we operate, and we have implemented robust measures to ensure compliance with the General Data Protection Regulation (GDPR), the California Consumer Privacy Act (CCPA), and all applicable privacy laws.
2. Scope of This Policy and Data Controller Role
This Privacy Policy applies to all personal data processed by Patowl.com through the operation of our website, mobile experiences, support channels, online shops, and all other digital services under the patowl.com domain.
For the purposes of the GDPR and other applicable data protection laws, the data controller responsible for your personal data is Patowl.com. Any queries relating to the processing of your personal information can be directed to our contact email: [email protected].
3. Categories of Data Processed
We may collect and process the following categories of personal data depending on your interaction with our services:
– Usage Data: Includes information about how you use our website, such as IP addresses, browser type, operating system, page interactions, and session duration. This data helps optimize user experience and troubleshoot issues.
– Account Data: Includes personal details such as your name, billing and shipping address, email address, and phone number, which you provide when creating an account or placing an order.
– Profile Data: Includes information derived from your activity such as saved preferences, purchase history, and behavioral patterns on the site.
– Communication Data: Includes any correspondence sent to us through customer support, contact forms, or feedback portals, and keeps a record of inquiries and resolutions.
– Technical Data: Includes information about the devices you use to access patowl.com, such as device type, system configuration, time zone, and mobile device identifiers.
– Transaction Data: Includes records of products purchased, payment method, transaction timestamps, currency, and delivery logistics.
– Preference Data: Includes marketing preferences, product interests, and your expressed consent to receive promotional communications.
4. Legal Bases for Processing
We rely on the following lawful bases under the GDPR and CCPA for processing your personal information:
– Consent: When you explicitly agree to allow us to process your data for specific purposes, such as subscribing to our newsletter or accepting cookies.
– Contractual necessity: When data processing is required to fulfil a contract with you, including order fulfilment, payment processing, and account maintenance.
– Legal obligation: Where processing is necessary to comply with legal obligations, such as tax and accounting regulations.
– Legitimate interests: Where processing serves our legitimate business interests, such as website optimization, fraud detection, marketing to existing customers, or improving customer service—without overriding your data protection rights.
5. Your Data Protection Rights
As a data subject, you are entitled to exercise the following rights under applicable law, including GDPR and CCPA:
– Right of Access: Obtain confirmation and a copy of the personal data we hold about you.
– Right to Rectification: Request correction of inaccurate or incomplete personal data.
– Right to Erasure (“Right to be Forgotten”): Request deletion of your personal data under qualifying conditions.
– Right to Restriction: Request the limitation of processing where the data’s accuracy or legality is contested.
– Right to Data Portability: Receive your personal data in a structured, machine-readable format and transmit it to another data controller.
To exercise any of these rights, please contact us at [email protected]. We will respond to qualified requests without undue delay and in accordance with applicable legal requirements.
6. Security Measures
We implement industry-standard safeguards to ensure the security, integrity, and confidentiality of your data, including but not limited to:
– End-to-end encryption of sensitive data in transit and at rest
– Role-based access control with logging and audits
– Regular vulnerability assessments and server monitoring
– Secure back-up procedures with disaster recovery capabilities
– Staff training in security awareness and data protection policies
7. International Data Transfers
If your data is transferred outside the European Economic Area (EEA), we ensure appropriate safeguards are in place, including the use of European Commission-approved Standard Contractual Clauses, adequacy decisions, or other lawful transfer mechanisms. International transfers comply with both GDPR and relevant local jurisdictional laws.
8. Data Retention
We retain personal data only for as long as necessary to fulfil the purposes for which it was collected, or as required by law. Retention periods typically include:
– Account Data: Retained while account remains active; deleted 12 months after closure.
– Transaction Data: Retained for up to 7 years to comply with financial regulations.
– Communication Data: Retained for up to 3 years to resolve disputes or provide customer service history.
– Usage and Technical Data: Retained for 26 months for analytics and service improvements.
– Cookie Data: Retention is dependent on cookie type, ranging from session durations to 24 months.
9. Cookie Policy
Our website uses cookies and similar technologies to enhance your browsing experience, deliver services, analyze performance, and provide personalized content. Categories include:
– Essential Cookies: Necessary for core website functionality (e.g., login, navigation).
– Functional Cookies: Support site customizations like saved preferences.
– Analytics Cookies: Measure and improve site performance (e.g., Google Analytics).
– Performance Cookies: Monitor application performance and crash tracking.
10. Cookie Management & Compliance
In compliance with GDPR and CCPA, you have the right to control cookie use. Upon first visit to patowl.com, you are presented with a cookie consent tool enabling you to accept or reject specific categories of cookies. You can amend your preferences at any time via the site’s cookie management settings or your browser configuration.
Do Not Track (DNT) signals are recognized and respected where legally required. Under CCPA, residents of California can also request information about the sale of personal data and opt-out where applicable. Patowl.com does not ‘sell’ personal data as defined under the CCPA.
11. Children’s Privacy
We do not knowingly collect or process personal information from individuals under the age of 13. If we become aware that a child has provided us with their data without verifiable parental consent, we will delete such information promptly. Parents or guardians who believe their child may have submitted personal information may contact us at [email protected].
12. Policy Updates
This Privacy Policy may be updated to reflect changes in our practices, laws, or for other operational, legal, or regulatory reasons. Updates will be made available on patowl.com. Where legally required, we will notify you of significant changes and seek renewed consent if applicable.
13. Contact Us
If you have any questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact:
Email: [email protected]
We are fully committed to ensuring compliance with all applicable data protection regulations and to upholding your privacy rights. Please do not hesitate to reach out to us with concerns about your personal information or this Privacy Policy.