Privacy Policy

At zakgriffler.com, your privacy and the protection of your personal data is of paramount importance. We are committed to ensuring that your personal information is collected, processed, stored, and disclosed in compliance with applicable data protection laws, including the General Data Protection Regulation (GDPR), the California Consumer Privacy Act (CCPA), and other relevant jurisdictions. This Privacy Policy outlines how your data is handled and the safeguards we implement to protect your privacy and digital rights.

1. Introduction: Our Commitment to Privacy and Data Protection

zakgriffler.com respects your fundamental right to privacy and actively works to protect personal data shared with us. Whether you are visiting our website, contacting us, or using our services, we are committed to maintaining the confidentiality, integrity, and availability of any identifiable information you provide. Our practices are designed to promote a privacy-first approach and to give you control over your data.

2. Scope of This Policy and Data Controller Role

This Privacy Policy applies to all users of zakgriffler.com and all personal data collected through our website and associated services. For purposes of GDPR and other relevant legislation, zakgriffler.com is the data controller, meaning we determine the purposes and means of processing your personal information.

You may contact us in our role as data controller at: [email protected]

3. Categories of Data We Process

We may collect and process the following categories of personal data:

a) Usage Data: Information automatically collected when you visit zakgriffler.com, including browser type, IP address, geolocation, session timestamps, page interactions, and referring URLs.

b) Account Data: Information provided when creating or managing an account, such as full name, billing/shipping address, email address, and telephone number.

c) Profile Data: Includes user preferences, browsing behavior, purchase history, and other information used to personalize your experience on zakgriffler.com.

d) Communication Data: Records of your interactions with us, including emails, customer support queries, and other correspondence initiated via zakgriffler.com.

e) Technical Data: Data on your device and configuration, including operating system, device type, screen resolution, and website performance metrics.

f) Transaction Data: Information used to process and fulfill purchases, including payment details and shipping instructions, but excluding full payment card numbers (which are handled by secure, PCI-DSS compliant third-party processors).

g) Preference Data: Marketing and notification settings, product and content interests, and communication preferences.

4. Legal Bases for Processing Your Data

We rely on one or more of the following legal bases when processing your personal data:

– Performance of Contract: To fulfill the services or purchases you request via zakgriffler.com.
– Consent: Where you have explicitly granted us permission (e.g., marketing communications).
– Legitimate Interest: For purposes such as improving our platform, preventing fraud, and enhancing user experience, so long as such interest does not override your rights.
– Legal Obligation: To comply with laws and regulations applicable to zakgriffler.com or respond to lawful requests by public authorities.

5. Your Rights Under GDPR and CCPA

You have the following rights concerning your personal data:

– Right of Access: Obtain a copy of your personal data held by us.
– Right to Rectification: Request correction of inaccurate or incomplete information.
– Right to Erasure: Request deletion of your data, subject to certain exceptions.
– Right to Restriction: Limit processing in specific circumstances.
– Right to Data Portability: Request transfer of your data to another service provider.
– Right to Object: Oppose processing based on legitimate interest or direct marketing.
– Right to Non-Discrimination (under CCPA): You will not receive discriminatory treatment for exercising any of your privacy rights.

You may exercise these rights by contacting [email protected]. We reserve the right to verify your identity prior to complying with data access or deletion requests.

6. Security Measures

We implement appropriate technical and organizational measures to safeguard your data, including but not limited to:

– TLS/SSL encryption for data in transit
– Access control and role-based permissions for systems
– Regular data backups and disaster recovery protocols
– Employee training in privacy and cybersecurity best practices
– Monitoring and logging of data access events

7. International Data Transfers

If your data is transferred outside the European Economic Area (EEA) or similar regulated regions, such transfers are made in accordance with standard contractual clauses approved by regulatory authorities or via other lawful mechanisms that ensure equivalent protection of your rights.

8. Data Retention

We retain your personal data only for as long as necessary for the purposes for which it was collected, including the following retention periods:

– Usage Data: up to 24 months for analytics and security analysis
– Account Data: retained while account remains active, plus 6 months
– Profile Data: retained until deletion request or user account deactivation
– Communication Data: retained for 24 months for support and legal purposes
– Technical Data: 12 months for system maintenance and improvements
– Transaction Data: retained for at least 6 years (or required by law)
– Preference Data: retained until consent withdrawal

After the applicable period, data will either be securely deleted or anonymized.

9. Cookie Policy

We use cookies and similar technologies to enhance functionality, analyze traffic, and personalize your experience. Cookies may fall into the following categories:

– Essential Cookies: Necessary for website operation and service performance.
– Functional Cookies: Enhance usability and remember user settings.
– Analytics Cookies: Help us understand website traffic and optimize performance (e.g., via Google Analytics).
– Performance Cookies: Monitor technical errors and usage trends.

10. Cookie Management and GDPR/CCPA Compliance

You can manage cookie preferences at any time by adjusting your browser settings or using the consent management tool displayed on zakgriffler.com. Under GDPR and CCPA, you have the right to opt out of non-essential cookies, including personalization and analytics. Do Not Track (DNT) browser requests are respected to the extent legally required.

11. Children’s Data Protection

zakgriffler.com is not designed for or directed to children under the age of 13. We do not knowingly collect or solicit personal information from anyone under 13. If we learn that personal data of a child has been inadvertently collected, we will take immediate action to delete it. Parents and guardians who become aware of such collection are encouraged to contact us at [email protected].

12. Changes to this Privacy Policy

We may update this Privacy Policy periodically to reflect legal, technical, or business changes. Any changes will be published on zakgriffler.com and, when appropriate, communicated via email or site banners to ensure you are informed.

13. Contact Us

We welcome questions, concerns, and requests regarding your personal data and this Privacy Policy. Please contact us via:

Email: [email protected]

We are committed to upholding the highest standards of privacy compliance. If you have concerns regarding your data or wish to exercise your rights, please contact us directly.