Privacy Policy for BellasForward.com
1. Introduction
At BellasForward.com, we are committed to protecting your personal information and respecting your privacy. We place the utmost importance on maintaining the security and confidentiality of the personal data you entrust to us. This Privacy Policy outlines how we collect, use, disclose, store, and protect your data in accordance with applicable privacy regulations, including the General Data Protection Regulation (GDPR) and the California Consumer Privacy Act (CCPA).
2. Scope of this Policy and Data Controller Role
This Privacy Policy applies to all personal data processed through the website bellasforward.com (the “Website”) and associated services. BellasForward.com is the data controller for all personal data collected and processed via the Website. Any inquiries regarding the collection or processing of your personal data should be directed to [email protected].
3. Categories of Personal Data We Process
We may collect and process the following categories of personal data depending on your interaction with the Website:
a. Usage Data
Includes data collected automatically about how you access and use the Website, such as browser type, IP address, device identifiers, referring URL, session duration, and pages visited.
b. Account Data
Includes identifiers such as name, physical address, email address, and phone number provided at the time of account registration or checkout.
c. Profile Data
Includes information such as purchase history, saved items or preferences, wishlists, and browsing behavior related to your profile.
d. Communication Data
Includes correspondence sent via our support channels, contact forms, or email communications, including customer service inquiries and complaint records.
e. Technical Data
Includes details about the device and technology you use, such as device models, operating systems, time zones, and browser plugins.
f. Transaction Data
Includes payment information (e.g., the last four digits of your credit card in masked form), billing and shipping addresses, and information related to completed purchases and returns.
g. Preference Data
Includes your marketing and communication preferences, product interests, and any opt-in/opt-out decisions you make regarding our communications.
4. Legal Bases for Processing
We only process your personal data where we have a valid legal basis that complies with applicable privacy laws. These bases include:
– Consent: Where you have explicitly given permission (e.g., for marketing communications).
– Contract: When processing is necessary to fulfill a contract with you, such as completing your purchases.
– Legal Obligation: To comply with legal or regulatory duties.
– Legitimate Interests: Where processing is necessary for our legitimate marketing, operational, or fraud-prevention interests and does not override your rights.
5. Your Rights
You have various rights under data protection laws with respect to your personal data, subject to certain limitations:
– Right of Access: You may request access to your personal data we hold.
– Right of Rectification: You can request correction of inaccurate or incomplete personal data.
– Right to Erasure: You can request deletion of personal data, under certain conditions.
– Right to Restriction of Processing: You can limit how your data is processed.
– Right to Data Portability: You can request a copy of your personal data in a structured, machine-readable format to transfer to another provider.
– Right to Object: You may object to direct marketing or processing based on legitimate interests.
– Withdrawal of Consent: Where processing is based on consent, you may withdraw it at any time without affecting prior lawful processing.
To exercise any of these rights, please contact us at [email protected].
6. Security Measures
We implement appropriate technical and organizational measures to ensure the security of your personal data, including:
– Data encryption in transit and at rest
– Access control policies with role-based access
– Regular security audits and penetration testing
– Secure backup and disaster recovery procedures
– Staff training on data handling best practices
Although we strive to use commercially acceptable means to protect your data, we cannot guarantee absolute security given the inherent risks of online transmission.
7. International Data Transfers
Information we collect may be transferred to, stored, or processed in countries outside your country of residence. In such cases, we ensure appropriate safeguards are in place, including the use of Standard Contractual Clauses approved by the European Commission, or reliance on adequacy decisions where applicable. We comply with all regional data protection obligations for cross-border transfers.
8. Data Retention
We retain your personal data only as long as necessary to fulfill the purposes for which it was collected or to comply with legal, regulatory, or accounting requirements. Retention periods vary by data category:
– Account Data: Retained for as long as the account remains active or up to 5 years following inactivity.
– Transaction Data: Retained for 7 years for financial auditing and regulatory compliance.
– Communication Data: Retained for 2 years to improve customer support operations.
– Analytics Data: Retained for 24 months, in anonymized form wherever possible.
– Marketing Consent Data: Retained until consent is withdrawn or no longer valid.
9. Cookie Policy
We use cookies and similar technologies to improve your experience on bellasforward.com. Cookies are categorised as follows:
– Essential Cookies: Required for the basic functionality of the Website.
– Functional Cookies: Enhance the Website’s customization and user experience (e.g., language preferences).
– Analytics Cookies: Help us measure and analyze Website usage so we can improve performance.
– Performance Cookies: Monitor load times and responsiveness to optimize system delivery.
10. Cookie Management and Compliance
In compliance with GDPR and CCPA, we offer cookie consent mechanisms on our Website. You may manage your cookie preferences through the Website’s cookie banner or browser settings. You may also opt out of specific third-party cookies such as Google Analytics via their respective opt-out mechanisms.
We honor Do Not Track (DNT) signals where required by law and provide users with the ability to exercise their data rights under relevant privacy regulations, including the right to opt out of the sale or sharing of personal data.
11. Children’s Privacy
Our services are not directed to, and we do not knowingly collect personal data from, children under the age of 13. If we become aware that we have inadvertently collected personal data from a child without appropriate parental consent, we will take swift steps to delete such information. Parents or guardians who believe their child may have provided us with personal data may contact us at [email protected].
12. Policy Updates and Notifications
We reserve the right to update this Privacy Policy as needed to reflect changes in legal requirements, our practices, or the functionality of bellasforward.com. Whenever we make significant changes, we will provide appropriate notice, such as prominently posting updates on our Website or reaching out directly by email where possible.
13. Contact Information
If you have any questions, concerns, or requests related to your privacy or this Privacy Policy, you may contact us at:
Email: [email protected]
We take privacy seriously and are committed to addressing your inquiries in a timely and transparent manner.
BellasForward.com is committed to full compliance with applicable privacy laws and to ensuring that your personal data is handled carefully and respectfully. Please contact us if you have any privacy-related concerns or wish to exercise your data rights.