Privacy Policy for johnmcreynolds.com

1. Introduction

At johnmcreynolds.com, we are committed to safeguarding your privacy and maintaining the highest standards of data protection. We recognize the importance of your personal information and take our responsibility seriously when handling and storing data. This Privacy Policy outlines how we collect, use, disclose, and protect your personal information in accordance with applicable data protection legislation, including the General Data Protection Regulation (GDPR) and the California Consumer Privacy Act (CCPA).

2. Scope of Policy and Data Controller Identification

This Privacy Policy applies to all individuals who access or use the website located at johnmcreynolds.com (“Site”), including visitors, customers, and users of our services. For the purposes of the GDPR, the data controller responsible for your personal data is John McReynolds, accessible through the contact email [email protected].

By using this Site, you acknowledge and agree to the collection and use of information in accordance with this policy.

3. Categories of Personal Data We Process

We may collect and process the following categories of personal data, depending on your interactions with our Site:

a. Usage Data:
Includes information such as your Internet Protocol (IP) address, browser type, browser version, time zone, device type, browsing activity, session duration, pages visited on the Site, and referring URLs.

b. Account Data:
Includes your name, email address, postal address, telephone number, and any other information you provide during account creation or registration processes.

c. Profile Data:
Includes your preferences, user behavior, service or product interests, and any feedback or reviews submitted.

d. Communication Data:
Includes the contents of your communications with us, including customer service requests, emails, or contact form submissions. It may also include communications history for quality assurance and legal compliance purposes.

e. Technical Data:
Includes system configurations, operating system, device identifiers, diagnostic data, and other related technical information collected automatically during your use of the Site.

f. Transaction Data:
Includes payment information (processed securely by payment processors), billing address, shipping address, and order or delivery records.

g. Preference Data:
Includes marketing preferences, communication subscriptions, and expressed interests in specific content or services.

4. Legal Bases for Processing Personal Data

We process your personal data under the following legal bases, as permissible under GDPR and CCPA:

– Consent: When you provide explicit consent for specific uses (e.g., subscribing to a newsletter).
– Contractual Necessity: For the performance of a contract or to provide services you have requested.
– Legal Obligation: Where processing is required for compliance with our legal obligations.
– Legitimate Interests: For our legitimate business interests, including providing customer support, improving our services, and protecting Site security, provided your rights do not override those interests.

5. Your Data Protection Rights

Subject to applicable law, you have the following rights regarding your personal data:

– Right of Access: You may request access to personal data we hold about you.
– Right to Rectification: You may request that we correct or update inaccurate or incomplete data.
– Right to Erasure: You may request the deletion of your data, subject to legal obligations.
– Right to Restriction of Processing: You may restrict how we process your personal data in certain circumstances.
– Right to Data Portability: You may request that your data be provided in a structured, transferable format.
– Right to Object: You may object to the processing of your data on grounds relating to your specific situation.
– Right to Withdraw Consent: Where we rely on your consent to process data, you may withdraw it at any time.

To exercise any of these rights, please send a request to [email protected]. We will respond in accordance with applicable laws.

6. Security Measures

We implement appropriate technical and organizational measures to protect your personal data. These include, but are not limited to:

– Secure encryption protocols during data transmission and storage
– Access controls ensuring only authorized individuals access sensitive data
– Regular security audits and system monitoring
– Data backups and secure server infrastructure
– Staff training on data protection and privacy awareness

No transmission over the Internet or electronic storage method is entirely secure. While we use commercially acceptable means to protect your information, we cannot guarantee absolute security.

7. International Transfers

Where applicable, your data may be transferred to and stored in jurisdictions outside your own, including countries not recognized by the European Commission as providing adequate data protection. In these instances, we rely on Standard Contractual Clauses or other legally recognized mechanisms to ensure appropriate protection.

8. Data Retention

We retain personal data only for as long as necessary for the purposes for which it was collected, including to satisfy legal, regulatory, tax, accounting, or reporting requirements. Specific retention periods include:

– Usage & Technical Data: 12 months after browsing session
– Account & Profile Data: Retained for the lifetime of your account and up to 3 years after account deletion unless legally required longer
– Transaction Data: Retained for 7 years for tax and accounting compliance
– Communication Data: Retained for 2 years for customer support and compliance records
– Preference Data: Until consent is withdrawn or following 2 years of inactivity

9. Cookie Policy

johnmcreynolds.com uses cookies and similar technologies to enhance user experience, analyze traffic, and support core Site functionality. Cookies may vary by category:

– Essential Cookies: Necessary for the Site to function and cannot be disabled in our systems.
– Functional Cookies: Enable enhanced features and customization.
– Analytics Cookies: Help us understand how visitors interact with our Site (e.g. Google Analytics).
– Performance Cookies: Improve the performance of the Site (e.g. load times, caching behavior).

10. Cookie Management & Regulatory Compliance

Visitors may control and manage cookie preferences using browser settings or by using our cookie consent management tool, which complies with GDPR and CCPA standards. Consent for non-essential cookies is requested at first visit and can be modified at any time.

Under the CCPA, California residents have the right to:

– Know what categories and specific pieces of personal information are collected.
– Request deletion of personal information.
– Opt out of the sale or sharing of personal information (we do not sell data).
– Not be discriminated against for exercising privacy rights.

To exercise any CCPA rights, please email [email protected].

11. Children’s Privacy

Our Site is not directed to or intended for children under the age of 13. We do not knowingly collect personal information from children under 13. If we become aware that we have inadvertently collected data from a child under 13, we will take appropriate steps to delete such information.

12. Changes to This Privacy Policy

We reserve the right to modify or update this Privacy Policy at any time to reflect changes in legal, regulatory, or operational requirements. When changes occur, users will be notified through the Site or via email if appropriate. Continued use of the Site constitutes acceptance of the revised policy.

13. Contact Information

If you have any questions, concerns, or requests related to this Privacy Policy, or if you wish to exercise your privacy rights, please contact:

Email: [email protected]

We are deeply committed to respecting your privacy and complying fully with applicable privacy laws, including the GDPR and CCPA. For any clarifications or assistance regarding your personal data, please do not hesitate to reach out to us.