Privacy Policy for LootPeak.com

1. Introduction

At LootPeak.com, we are committed to safeguarding your personal data and upholding your privacy rights under applicable data protection laws, including the General Data Protection Regulation (GDPR) and the California Consumer Privacy Act (CCPA). We respect your privacy and appreciate the trust you place in us when you visit or interact with our website. This Privacy Policy outlines how we collect, use, disclose, store, and protect your personal data in accordance with our commitment to security and transparency.

2. Scope of Policy and Role of Data Controller

This Privacy Policy applies to all users, visitors, and customers who access or interact with LootPeak.com and related services. For purposes of applicable data protection legislation, LootPeak.com (also referred to as “we,” “our,” or “us”) is the data controller responsible for ensuring that your personal data is processed lawfully, fairly, and transparently.

3. Categories of Personal Data We Process

We collect and process various categories of information based on how you interact with our website. The categories of data we may collect include:

– Usage Data: Information about your interactions with our website, such as IP address, browser type, operating system, referring URLs, access times, and pages viewed.
– Account Data: Data you provide when registering for or updating an account, including your full name, billing/shipping address, email address, and telephone number.
– Profile Data: Preferences, purchase history, wishlist content, feedback, reviews, and behavior trends while using our services.
– Communication Data: Information contained in or arising from correspondence with us, including support inquiries, contact form submissions, and service-related messages.
– Technical Data: Device identifier, hardware type, operating system version, browser plug-in versions, and diagnostic reports.
– Transaction Data: Purchase history, order confirmations, invoices, payment card details processed via secure third-party payment processors, and shipping information.
– Preference Data: Marketing opt-in/out status, notification preferences, and interests related to our products or promotions.

4. Legal Bases for Processing

We may process your personal data under the following legal justifications:

– Consent: Where you have given explicit consent for specific purposes, such as receiving newsletters or marketing materials.
– Contractual Necessity: When processing is required to provide services agreed upon with you or to respond to your service-related requests.
– Legitimate Interests: For the improvement of our services, fraud prevention, analytics, business operations, or customer engagement, provided your rights do not override these interests.
– Legal Obligations: Where processing is necessary to comply with a legal or regulatory obligation.

5. Your Rights

You have the following data subject rights, subject to verification and applicable legal limitations:

– Right of Access: You may request access to the personal data we hold about you.
– Right to Rectification: You may request corrections to inaccurate or incomplete personal data.
– Right to Erasure: You can request deletion of personal data held about you, where no overriding legal basis exists for continued processing.
– Right to Restriction: Under certain circumstances, you may request restriction of processing your personal data.
– Right to Data Portability: You may request to receive your personal data in a structured, commonly used, machine-readable format and transmit it to another controller.
– Right to Object: You may object to processing based on our legitimate interests or for direct marketing purposes.

To exercise any of these rights, please contact us at [email protected].

6. Security Measures

LootPeak.com employs strict physical, electronic, and organizational safeguards to protect your personal data, including:

– Industry-standard encryption protocols for data transmission and storage.
– Role-based access restriction and secure authentication methods.
– Regular system audits and vulnerability testing.
– Secure data backups to mitigate data loss.
– Ongoing employee data protection training and confidentiality agreements.

7. International Data Transfers

Your data may be transferred, stored, or processed outside of your country of residence, including in jurisdictions that may not offer the same level of legal data protection. In such cases, we ensure adequate safeguards under applicable data transfer mechanisms, such as Standard Contractual Clauses approved by the European Commission, and conformity with regional data privacy standards.

8. Data Retention

We retain personal data only for as long as is necessary for the purposes stated in this Privacy Policy, subject to applicable legal, regulatory, or contractual obligations. Specific retention periods include:

– Account and Profile Data: Retained for as long as your account remains active.
– Transaction and Communication Data: Retained for up to 7 years for audit, tax, and customer service purposes.
– Usage and Technical Data: Retained for up to 24 months to support analytics and performance improvement.
– Marketing Preference Data: Retained until your preference is changed or consent is withdrawn.

We securely delete or anonymize personal data at the end of the retention period.

9. Cookie Policy

LootPeak.com uses cookies and similar technologies to enhance user experience and collect information for analytics and service personalization. These include:

– Essential Cookies: Necessary for the website to function (e.g., session management, shopping cart).
– Functional Cookies: Enable website functionality like user preference storage.
– Analytics Cookies: Collect aggregate usage metrics (e.g., Google Analytics) to understand website performance.
– Performance Cookies: Help optimize speed, responsiveness, and integration with external platforms.

10. Cookie Management and Compliance

In compliance with GDPR and CCPA, users are provided with an opt-in mechanism for all non-essential cookies via our cookie banner. You can modify or withdraw consent at any time through our cookie settings panel or by adjusting your browser settings. Please note that disabling certain cookies may affect website functionality.

11. Children’s Privacy

Our services are not directed to, nor do we knowingly collect personal data from, children under the age of 13. If we become aware that we have inadvertently collected such data, we will promptly delete it. If you are a parent or legal guardian and believe your child has provided us with personal information, please contact us immediately at [email protected].

12. Updates to this Policy

We may update this Privacy Policy periodically to reflect changes in legal requirements, our services, or our data processing practices. We encourage users to review this policy periodically. Substantive changes will be notified via the website or through user-facing communication channels.

13. How to Contact Us

For any requests, questions, or concerns about this Privacy Policy or our data practices, please contact:

LootPeak.com
Email: [email protected]

We are fully committed to privacy compliance under both GDPR and CCPA frameworks. If at any time you have questions regarding your personal information or this Privacy Policy, please reach out to us at [email protected].