Privacy Policy
1. Introduction
At Side of Ginger (https://sideofginger.com), we are committed to protecting your personal data and respecting your privacy rights. The privacy and trust of our users are of paramount importance to us. This Privacy Policy explains how we collect, use, store, disclose, and secure your information in accordance with applicable privacy laws, including the General Data Protection Regulation (GDPR) and the California Consumer Privacy Act (CCPA).
2. Scope of Policy and Data Controller Role
This Privacy Policy applies to all visitors, users, and others who access or interact with our website, services, and digital products offered through https://sideofginger.com (“Website”). For the purpose of data protection laws, Side of Ginger operates as the Data Controller, meaning we determine the purposes and means of processing your personal data.
If you have questions or concerns regarding our use of your personal data, you may contact us directly at: [email protected].
3. Categories of Data We Process
We collect and process a variety of personal data, as outlined below. The data may be collected directly from you, automatically through your interactions with our services, or via third parties we engage with for functionality and compliance purposes.
a. Usage Data
Includes information about how you use our website, such as IP address, browser type and version, operating system, referring URLs, geographic location (approximate), time zone settings, clickstream data, and session information.
b. Account Data
Includes full name, email address, physical address, phone number, account passwords, and other identifiers used to register or maintain a user profile on our Website.
c. Profile Data
Includes preferences, interests, purchase history, content interactions, browsing behavior, and other information you provide or generate through your use of our services.
d. Communication Data
Includes messages or inquiries sent through our contact forms, email correspondence, customer support requests, and metadata associated with communications.
e. Technical Data
Includes device information, internet connectivity, configurations, hardware settings, operating system data, and diagnostics used for stability, troubleshooting, and improvement of our Website.
f. Transaction Data
Includes payment information processed through secure third-party gateways (e.g., last four digits of credit card, billing address), order confirmations, shipping details, and receipts for purchases made on the Website.
g. Preference Data
Includes your communication preferences, including opt-ins and opt-outs for marketing emails, product preferences, notifications, and any consents you grant related to personalization.
4. Legal Bases for Processing
We process your personal data under several legal bases, which allow for lawful use under applicable data protection laws:
– Consent: Where required, we obtain your explicit consent prior to collecting or processing your data.
– Contractual Necessity: We process your data as needed to fulfill our contractual duties with you, such as delivering goods or providing services.
– Legal Obligation: To comply with applicable legal and regulatory obligations.
– Legitimate Interest: To operate, improve, and secure our Website and services, provided our interests do not override your fundamental rights and freedoms.
5. Your Rights
Under GDPR, CCPA, and similar data protection frameworks, you have the following rights with respect to your personal data:
– Right of Access: You may request access to the personal data we hold about you.
– Right to Rectification: You may request correction of inaccurate or incomplete data.
– Right to Erasure (“Right to Be Forgotten”): You may request deletion of your data, subject to legal exceptions.
– Right to Restrict Processing: You may request we limit the processing of your data in certain circumstances.
– Right to Data Portability: You may request your information be provided in a structured, commonly used format to transfer your data elsewhere.
– Right to Object: You may object to our use of your data based on legitimate interests or for direct marketing purposes.
– Right to Withdraw Consent: Where we process data based on your consent, you may withdraw that consent at any time.
To exercise any of these rights, please contact us at [email protected].
6. Security Measures
We utilize robust organizational and technical measures to protect your personal data, including:
– Data encryption in transit and at rest
– Role-based access control and authentication protocols
– Regular data backups and secure storage
– Staff training in privacy and security awareness
– Monitoring systems for intrusion detection and network integrity
While no system is entirely immune from risk, we strive to maintain the confidentiality, integrity, and availability of your data at all times.
7. International Transfers
Your personal data may be transferred to, stored in, or accessed from locations outside your jurisdiction, including countries that may not provide a level of data protection equivalent to your home country. In such cases, we ensure data is protected through:
– Standard contractual clauses (SCCs) approved by the European Commission
– Other legally recognized transfer mechanisms
– Additional safeguards as required to protect personal data
8. Data Retention
We retain your personal data only for as long as necessary to fulfill the purposes for which it was collected, including to comply with legal, accounting, or reporting obligations.
– Usage Data: Retained for up to 12 months for analytics and security purposes
– Account Data: Retained until account deletion or inactivity for 24 months
– Profile Data: Retained based on user engagement up to 36 months
– Communication Data: Retained for 18 months following last contact
– Technical Data: Retained for up to 12 months from collection
– Transaction Data: Retained for 7 years to meet financial and tax obligations
– Preference Data: Retained indefinitely unless consent is withdrawn or policy dictates shorter storage
Data may be anonymized and retained for statistical or research purposes without further notice to you.
9. Cookie Policy
Cookies are small data files placed on your device for functionality, analytics, and customization. Our use of cookies includes:
– Essential Cookies: Required for the Website to function (e.g., session authentication)
– Functional Cookies: Enhance performance and remember your preferences
– Analytics Cookies: Collect aggregated data to improve performance and usability
– Performance Cookies: Monitor and enhance load times and browsing experience
You can learn more about the specific cookies we use by visiting our Cookie Settings page on the Website.
10. Cookie Management and Compliance
We comply with GDPR and CCPA regulations regarding the collection and use of cookies.
Users located in the European Economic Area (EEA) or California will be presented with a cookie consent banner where applicable. You can manage or revoke your cookie preferences at any time via the consent management settings provided on the site.
Browsers typically allow you to manage cookie preferences through their settings menu. Please note, disabling certain cookies may affect the functionality of sideofginger.com.
11. Children’s Privacy
Our services are not directed to individuals under the age of 13. We do not knowingly collect or process data from anyone under 13 years of age. If we become aware that a child under 13 has submitted personal information, we will take steps to remove such data immediately. If you believe a child has submitted personal data to us, please contact us at [email protected].
12. Policy Updates and User Notifications
We reserve the right to amend or update this Privacy Policy at our discretion. Updates will be posted to this page and, where applicable, we may provide prominent notice (e.g., email or Website notification). Users are encouraged to review this policy periodically to stay informed of any changes.
13. Contact Us
If you have any questions, concerns, or requests related to this Privacy Policy or your personal data, you may contact us at:
Email: [email protected]
Website: https://sideofginger.com
We are committed to full compliance with GDPR, CCPA, and other applicable data protection laws. If you believe your privacy rights have been violated or require further assistance, please reach out to us using the contact details above.