Privacy Policy - Theneverendingstories

1. Introduction

At theneverendingstories.com (“we,” “our,” or “us”), we are committed to protecting and respecting your privacy. We understand that personal data is just that—personal. That’s why we handle your information with care, transparency, and in full compliance with applicable privacy and data protection laws, including the General Data Protection Regulation (“GDPR”) and the California Consumer Privacy Act (“CCPA”). This Privacy Policy outlines how we collect, use, disclose, store, and safeguard your personal data when you interact with our website.

2. Scope of This Policy and Our Role as Data Controller

This Privacy Policy applies to all visitors, users, and others who access or use our website at theneverendingstories.com (the “Website”). For the purposes of applicable privacy laws, theneverendingstories.com is the data controller responsible for the processing of your personal data described herein. If you have any questions regarding this policy or our data practices, you may contact us at [email protected].

3. Categories of Data We Process

We collect and process various types of personal data to enable and enhance your experience on the Website. The categories of personal data we may process include:

a. Usage Data
Data about your interaction with our Website, including IP address, geographic location, browser type and version, referral source, duration of visits, pages viewed, and navigation paths. This data helps us monitor and maintain the performance and security of the Website.

b. Account Data
This includes personal identifiers such as your full name, email address, phone number, billing address, shipping address, and login credentials. This data is collected when you create an account on our Website.

c. Profile Data
Information associated with your user profile such as your communication and content preferences, purchase history, and engagement behavior on the Website.

d. Communication Data
Data relating to your communication with us, including the content of emails, support tickets, survey responses, and any records of contact with our customer support team.

e. Technical Data
Information about the device you use to visit our Website, such as device model, operating system, time zone setting, language preference, and internet service provider.

f. Transaction Data
Details of products and services purchased from us, including payment card information (processed via secure third-party processors), order details, delivery address, and transaction identifiers.

g. Preference Data
Your preferences in receiving marketing from us and your communication preferences, including opt-in/out status for newsletters, emails, and promotional materials.

4. Legal Bases for Processing Personal Data

We process your personal data on the following bases, as permitted under GDPR and other applicable laws:

– Contractual Necessity: To provide you with services you’ve requested or purchased, such as fulfilling orders or maintaining your account.
– Legitimate Interests: To improve our Website, analyze user behavior, detect fraud, and optimize user experience.
– Consent: For example, when you agree to receive marketing communications or non-essential cookies.
– Legal Obligation: To comply with statutory obligations, including accounting, tax, and regulatory requirements.

5. Your Data Protection Rights

If you are located in the European Economic Area (EEA), the United Kingdom, California, or other applicable jurisdictions, you may exercise the following rights in relation to your personal data:

– Right of Access: Obtain confirmation that your data is being processed and access a copy of your data.
– Right to Rectification: Request corrections to any inaccurate or incomplete data held about you.
– Right to Erasure: Request deletion of your data where applicable, such as when consent is withdrawn or no longer necessary.
– Right to Restriction: Request that we restrict processing of your personal data in certain situations.
– Right to Data Portability: Receive your personal data in a structured, machine-readable format and transfer it to another controller.
– Right to Object: Object to processing based on legitimate interests or for direct marketing.
– Right to Opt-Out (for CCPA residents): Opt out of the sale or sharing of personal data.

To exercise any of the above rights, please contact us at [email protected]. We will respond in accordance with applicable laws.

6. Security Measures

We have implemented appropriate technical and organizational safeguards to protect your personal data, including:

– End-to-end encryption of sensitive data.
– Secure transmission protocols (HTTPS/SSL).
– Role-based access controls limiting employee data access.
– Routine data backups stored in secure environments.
– Internal data protection training and awareness programs for staff.

While no system is impenetrable, we continuously review and refine our security practices in line with industry standards to protect your data.

7. International Data Transfers

In the course of our operations, your personal data may be transferred to and processed in countries outside of your jurisdiction, including those that may not offer the same level of data protection. Where required under GDPR, we implement Standard Contractual Clauses (SCCs) or other legally valid transfer mechanisms to ensure your data receives adequate protection.

8. Data Retention

We retain personal data only for as long as necessary to fulfill the purposes outlined in this policy, including for legal, accounting, and reporting requirements. Our typical retention periods are:

– Account Data and Profile Data: Retained for the duration of the user relationship and three years thereafter.
– Transaction Data: Retained for legal and financial compliance for up to seven years.
– Communication Data: Retained for two years after the last contact.
– Technical and Usage Data: Retained for 12 months unless required longer for security, analytics, or legal reasons.

Data subject to deletion requests is securely erased unless retention is required by law.

9. Cookie Policy

We use cookies and similar tracking technologies to enhance your browsing experience, analyze traffic, and serve targeted advertising, where applicable. Cookies are categorized as:

– Essential Cookies: Enable core functionalities such as account login and secure checkout.
– Functional Cookies: Remember choices you make to improve usability, such as language settings.
– Analytical Cookies: Collect data on how visitors interact with the Website to help us understand and improve performance.
– Performance Cookies: Monitor technical performance (e.g., page load times, error reports).

10. Cookie Management and Compliance

You are in control of your cookie preferences. Upon first visit to theneverendingstories.com, you will be presented with a cookie consent banner in compliance with GDPR and CCPA requirements. You may choose to accept all, reject non-essential cookies, or customize your preferences. You can also adjust your settings at any time through your browser or device controls.

To exercise your CCPA right to opt out of the sale or sharing of personal data collected via cookies, please follow the relevant link in our cookie notice or contact us directly.

11. Children’s Privacy

We do not knowingly collect personal data from children under the age of 13. If you are a parent or guardian and believe your child has submitted personal information to us, please contact us at [email protected]. If we learn that a child under 13 has provided us with personal data, we will take immediate steps to delete such data and terminate any associated accounts.

12. Policy Updates

We reserve the right to revise or update this Privacy Policy at any time to reflect changes in legal, regulatory, or operational requirements. Any significant changes will be communicated on the Website or via email if relevant. Continued use of the Website after such updates constitutes your acceptance of the new terms.

13. Contact Us

If you have any questions, concerns, or complaints about this Privacy Policy or our data practices, please contact us:

Email: [email protected]

We are committed to addressing your privacy inquiries promptly and transparently.

In full compliance with applicable privacy laws such as GDPR and CCPA, theneverendingstories.com upholds the highest standards of data protection. For concerns relating to privacy rights or the handling of your personal data, we invite you to reach out using the contact information provided above.