Privacy Policy for RiftWhiz
1. Introduction
At RiftWhiz (“we”, “us”, or “our”), accessible via riftwhiz.com (“Website”), we are firmly committed to protecting the privacy, confidentiality, and security of the personal data entrusted to us. We value your privacy and strive to maintain robust data protection practices in accordance with all applicable privacy laws, including the General Data Protection Regulation (GDPR) and the California Consumer Privacy Act (CCPA). This Privacy Policy outlines how we collect, use, disclose, store, and protect your personal information when you interact with our Website, products, and services.
2. Scope of Policy and Data Controller Role
This Privacy Policy applies to all data collected through riftwhiz.com and any related services, features, and communications. For the purposes of GDPR, RiftWhiz is the data controller of personal data collected and processed through the Website. This role entails determining the purposes and means of processing your personal data. If you are a resident of California, we act as a “business” under the CCPA.
By using our Website or providing us with your personal information, you acknowledge that you have read and understood this Privacy Policy.
3. Categories of Data We Process
We may collect and process the following categories of personal data:
a) Usage Data
This includes information such as your IP address, browser type and version, time zone setting, referring URL, pages visited, session duration, and other diagnostic data derived from how you use riftwhiz.com.
b) Account Data
When you create an account or otherwise provide personal details, we may collect your full name, email address, mailing address, and phone number.
c) Profile Data
We collect information relating to your preferences, purchase history, browsing patterns, and behavior on the Website to enhance your experience.
d) Communication Data
When you contact us via email or live chat, or submit inquiries through online forms, we collect the contents of your communication along with related metadata and history of previous interactions.
e) Technical Data
This includes device type, operating system, system language, hardware specifications, browser settings, and device identifiers used for security, optimization, and diagnostic purposes.
f) Transaction Data
We collect transaction details such as billing address, delivery address, products purchased, and payment method (note: payment processing is handled by third-party providers; we do not directly store complete payment card information).
g) Preference Data
We maintain records of your preferences for marketing communications, product categories of interest, and notification settings.
4. Legal Bases for Processing Personal Data
We process personal data under one or more of the following legal bases in accordance with GDPR:
– Contractual Necessity: When processing is required to fulfill a contract with you, such as order fulfillment or account access.
– Legitimate Interest: Where we pursue lawful interests such as Website operation, fraud detection, marketing (where permitted), and analytics, provided these interests do not override your fundamental rights and freedoms.
– Consent: For purposes such as marketing emails, cookies, and personalized services, we rely on your express, informed consent.
– Legal Obligation: Where required to comply with applicable legal and regulatory obligations.
5. Your Rights Under Data Protection Law
If you are a resident of the European Union or the State of California, you have certain rights under applicable data protection laws, including:
– Right of Access: You may request a copy of your personal data that we hold.
– Right to Rectification: You can request correction of inaccurate or incomplete data.
– Right to Erasure: In certain circumstances, you may have your data deleted.
– Right to Restriction: You can ask us to limit processing pending corrections or objection resolution.
– Right to Data Portability: You may request your personal data in a structured, commonly used format.
– Right to Object: Where we rely on legitimate interest, you may object to such processing on grounds relating to your particular situation.
– CCPA Rights: California residents may request access to categories and specific pieces of personal information collected, request deletion, and opt out of “sale” of personal data, if applicable.
To exercise your rights, please contact us at [email protected]. We will respond as required by applicable law and may need to verify your identity before processing your request.
6. Security Measures
We implement and maintain appropriate technical and organizational measures designed to protect personal data against unauthorized access, alteration, disclosure, or destruction. These controls include:
– Data encryption during transmission and storage
– Role-based access control and authentication mechanisms
– Routine system monitoring and malware prevention tools
– Regular data backups and disaster recovery planning
– Employee training on data privacy and cybersecurity
While no system is entirely secure, we strive to use commercially acceptable means to safeguard your information.
7. International Transfers
Your personal data may be transferred to and processed in countries outside of your jurisdiction, including to third-party service providers operating globally. Where such transfers occur, we ensure adequate measures are in place, such as:
– Use of Standard Contractual Clauses approved by the European Commission
– Transfer mechanisms recognized by UK GDPR and Swiss privacy laws
– Supplemental safeguards and data minimization practices
By using riftwhiz.com, you consent to the transfer of your data outside your country, provided these protections are maintained.
8. Data Retention
We retain personal data for only as long as necessary to fulfill the purposes described in this Privacy Policy, or as required by law:
– Usage Data: 12 months
– Account Data: Retained for the duration of the account and up to 6 years following deactivation
– Profile Data: Updated continuously and retained as long as you use our services
– Communication Data: 3 years from last interaction
– Technical Data: 12 months
– Transaction Data: Retained for 7 years for financial and tax compliance
– Preference Data: Until you update your preferences or withdraw consent
Data may be anonymized and retained for statistical or analytical purposes.
9. Cookie Policy
Our Website uses cookies and similar tracking technologies to enhance user experience and analyze site performance. Categories include:
– Essential Cookies – Required for Website core functionality (e.g., login, cart management)
– Functional Cookies – Remember user preferences and enhance usability
– Analytics Cookies – Collect anonymous data on Website usage for performance insights
– Performance Cookies – Help optimize loading times and responsiveness
Third-party services (such as Google Analytics) may place cookies on your browser. These cookies are governed by their respective privacy policies.
10. Cookie Management and Compliance with GDPR & CCPA
You have the right to control the use of cookies:
– For visitors in the EU/EEA: You may opt in to non-essential cookies via our cookie banner, and withdraw consent at any time via cookie settings.
– For California residents: You may opt out of the “sale” of personal data through a clearly accessible link, as required under CCPA.
You can also manage or disable cookies directly through your browser settings, although doing so may affect certain features of riftwhiz.com.
11. Children’s Privacy
We do not knowingly collect or solicit personal data from individuals under the age of 13. If we become aware that we have collected personal information from a child without verified parental consent, we will promptly delete such data from our records. If you believe that a minor has provided us with personal data, please contact us at [email protected].
12. Policy Updates and User Notifications
We reserve the right to amend this Privacy Policy at any time to reflect changes in our practices, legal obligations, or service offerings. Where required by law, we will notify you of material changes via Website banners or direct communications. We encourage you to review this policy periodically for the latest information on our data practices.
13. Contact Us
If you have any questions, concerns, or requests related to this Privacy Policy or our processing of your personal data, you may contact us at:
Email: [email protected]
Website: https://www.riftwhiz.com
We are committed to complying with all applicable data protection laws and to promptly addressing any privacy-related inquiries.