Privacy Policy
1. Introduction
At Ferndale RFC (“we”, “us”, “our”), accessible via ferndalerfc.com, we are firmly committed to safeguarding the privacy and personal data of our users, visitors, partners, and stakeholders. We recognize the importance of protecting personal information and ensuring strict compliance with applicable privacy regulations, including the General Data Protection Regulation (EU) 2016/679 (“GDPR”) and the California Consumer Privacy Act of 2018 (“CCPA”). This Privacy Policy explains how we collect, use, store, disclose, and protect your personal information, and outlines your rights and choices with regard to your data.
2. Scope of Policy and Data Controller Role
This Privacy Policy governs the data processing practices of ferndalerfc.com in its capacity as the Data Controller, which means we determine the purposes and means of processing your personal data. This policy applies to all individuals who access or use our website, mobile services, or otherwise interact with our digital platforms.
3. Categories of Data Processed
We may process various categories of personal information depending on your interaction with ferndalerfc.com. These categories include:
a. Usage Data: Information about how the website is accessed and used. This may include your browser type, IP address, access times, referring URLs, page interactions, and session duration.
b. Account Data: Data provided when setting up an account or registering for services, such as your name, address, email address, and telephone number.
c. Profile Data: Information related to your preferences, behavioral patterns, purchase history (if applicable), and browsing behavior on our site.
d. Communication Data: Details from your interactions with us, including customer support requests, inquiries submitted via forms or email, and historic communication logs.
e. Technical Data: Device-specific information, including device type, operating system, internet connection, and configurations required to render the website appropriately.
f. Transaction Data: Data involved in transactions initiated through our website, such as billing address, delivery records, and payment-related identifiers (note: payment processing is handled via secure third-party services).
g. Preference Data: Information gathered through your interactions with our services to determine your preferences (e.g., marketing subscription status and interests in certain content or events).
4. Legal Bases for Processing
We process personal data in accordance with the following legal bases:
– Consent: Where you have given us explicit permission to process your data for one or more specified purposes (e.g., email marketing).
– Contractual Necessity: Where processing is necessary to fulfill a contract with you or to take steps at your request prior to entering into such a contract.
– Legal Obligation: Where we are subject to a legal or regulatory obligation that requires data processing.
– Legitimate Interests: Where processing is necessary for our legitimate interests, provided your rights and freedoms are not overridden (e.g., data analytics to improve user experience).
5. Your Rights
Under GDPR and CCPA, you may be entitled to exercise the following rights:
– Right of Access: You may request access to the personal data we hold about you.
– Right to Rectification: You may request that we correct any inaccuracies or incomplete information.
– Right to Erasure (“Right to be Forgotten”): You may request deletion of your personal data, subject to certain conditions.
– Right to Restriction of Processing: You may request that we limit the processing of your data.
– Right to Data Portability: You may request your data in a structured, machine-readable format to transmit to another data controller.
– Right to Object: You may object to processing where our basis is legitimate interest or direct marketing.
– Do Not Sell My Personal Information (CCPA): California residents may request that we do not sell or share their personal information.
To exercise any of these rights, please contact us at [email protected]. We will respond to your request in accordance with applicable legal timelines.
6. Security Measures
We implement appropriate and industry-standard technical and organizational security measures to protect your personal information, including:
– SSL encryption of data transmissions;
– Role-based access controls and monitoring;
– Regular data backups and secure storage practices;
– Internal privacy and security training for staff;
– Incident detection and response procedures to address data breaches.
While we strive to protect your data, no online platform can guarantee absolute security. Therefore, we encourage you to take personal measures to protect your information online.
7. International Transfers
Your personal data may be transferred to, or processed in, jurisdictions outside of your home country. Where such transfers occur, we rely on appropriate safeguards, including but not limited to:
– Standard Contractual Clauses approved by the European Commission;
– Binding corporate rules or frameworks recognized by the applicable authorities;
– Evaluations of third countries’ data protection adequacy.
We ensure that all data transferred internationally remains subject to the same level of protection as set forth in this Privacy Policy.
8. Data Retention
We retain your personal data for as long as necessary to fulfill the purposes for which we collected it, including legal, accounting, and reporting obligations. Retention periods vary by data type:
– Account and Profile Data: Stored for as long as the account remains active, and up to 2 years after inactivity.
– Communication History: Retained for up to 3 years following the last interaction.
– Transaction Data: Kept for 7 years to meet financial and tax record requirements.
– Technical and Usage Data: Typically retained for 12 months, unless required longer for analytical purposes.
Upon expiry of these periods, data will either be deleted securely or anonymized for statistical purposes.
9. Cookie Policy
Ferndalerfc.com uses cookies and similar technologies to enhance user experience and functionality. Cookies fall into the following categories:
– Essential Cookies: Required for the proper functioning of our website. These cannot be disabled.
– Functional Cookies: Used to remember your preferences and settings.
– Analytics Cookies: Help us understand how users interact with our content so we can improve user experience.
– Performance Cookies: Effectively measure site performance and loading times.
10. Cookie Management and GDPR/CCPA Compliance
You are given the opportunity to accept or reject non-essential cookies upon accessing ferndalerfc.com. You may modify your cookie preferences at any time through your browser settings or through our cookie management tool available on the website.
We honor browser-based “Do Not Track” signals and provide opt-out mechanisms, consistent with CCPA and GDPR requirements.
11. Children’s Privacy
Our services are not intended for children under the age of 13, and we do not knowingly collect personal data from minors in this age group. If we become aware that we have inadvertently collected data from a child under 13, we will delete it promptly. Parents or guardians who believe we may have collected data from their children may contact us at [email protected].
12. Policy Updates and User Notifications
We reserve the right to modify this Privacy Policy at any time to reflect changes in law, technology, or our data practices. We will provide notice of significant changes through our website or via email, where applicable. Continued use of ferndalerfc.com after any change constitutes acceptance of the revised policy.
13. Contact Information
For questions, concerns, or requests related to this Privacy Policy or your personal information, please contact our Data Privacy Representative at:
Email: [email protected]
We are committed to full compliance with all applicable data protection laws, including GDPR and CCPA, and will respond diligently to privacy inquiries. For additional privacy-related concerns, we invite you to contact us directly at the address above.