Privacy Policy - Droprift

1. Introduction

At droprift.com, we are committed to safeguarding your personal data and respecting your privacy. This Privacy Policy outlines how we collect, process, store, and share your personal information when you interact with our website, services, features, and communication channels. We are dedicated to maintaining transparency and ensuring compliance with all applicable data protection laws, including the General Data Protection Regulation (GDPR) and the California Consumer Privacy Act (CCPA).

2. Scope of This Policy and Data Controller Role

This Privacy Policy applies to all users, visitors, customers, and others who interact with the website droprift.com and our affiliated digital properties and services. For all personal data collected in connection with our services, droprift.com acts as the “data controller” as defined under the GDPR and a “business” under the CCPA. This means we determine the purposes and methods of processing your personal data.

3. Categories of Data We Process

We collect various categories of personal data to provide, improve, and secure our services. These categories include:

a. Usage Data

We automatically collect metadata and usage information, such as Internet Protocol (IP) addresses, browser types and versions, access times, pages viewed, referring pages, and session data. This data helps us analyze website performance and usability.

b. Account Data

When users register or create an account on droprift.com, we collect information such as full name, email address, physical address, and phone number.

c. Profile Data

We may collect data related to your preferences, order history, interaction behavior, product interests, and user-generated content during your use of droprift.com.

d. Communication Data

We store correspondence history for inquiries you send to us via [email protected] or any contact form on the website. This includes the content of the messages and our replies to ensure effective customer support.

e. Technical Data

We gather information about the devices and technology used to access droprift.com, including your operating system, device type, unique device identifiers, and browser settings.

f. Transaction Data

When you engage in purchases or financial interactions via droprift.com, we collect billing and delivery addresses, order details, payment methods (processed through secure third-party processors), and transaction histories.

g. Preference Data

This includes your marketing and communication preferences, subscription statuses, language selections, and any opt-in or opt-out actions for promotional materials.

4. Legal Bases for Processing

We process your personal data under the following legal bases:

– Performance of a Contract: To fulfill our contractual obligations when you register, purchase, or use our services.
– Legitimate Interests: To manage and improve droprift.com securely and efficiently while protecting against fraud or misuse.
– Consent: Where you have actively provided consent, such as for receiving marketing communications.
– Legal Obligations: To comply with applicable laws, legal processes, or lawful government requests.

5. Your Rights

If you are located in the European Union or California, or otherwise protected by privacy legislation, you have the following rights:

– Right of Access: You may request a copy of the personal data we hold about you.
– Right to Rectification: You may request that we correct or update inaccurate or incomplete information.
– Right to Erasure (“Right to Be Forgotten”): You may request we delete your data where legally permissible.
– Right to Restrict Processing: Under certain conditions, you may ask us to suspend the processing of your data.
– Right to Data Portability: You may request a machine-readable copy of your data for your own use or transfer.
– Right to Opt Out: California residents can opt out of the sale or sharing of personal information.

To exercise any of the above rights, please contact us at [email protected]. We will respond to valid requests in accordance with applicable legal timeframes.

6. Security Measures

We implement appropriate technical and organizational security measures to protect your personal data, including:

– Encryption of data in transit and at rest;
– Role-based access controls and strict data access policies;
– Secure server infrastructure with continuous monitoring;
– Regular data backups and redundancy procedures;
– Privacy training for staff and data protection awareness initiatives.

While no online service can guarantee absolute security, we are committed to maintaining high standards of data protection.

7. International Data Transfers

Where necessary, personal data may be transferred to jurisdictions outside of your home country, including where service providers operate. Any such transfer will be governed by appropriate safeguards, including Standard Contractual Clauses approved by the European Commission or equivalent arrangements under applicable law, ensuring your data rights are upheld.

8. Data Retention

We retain your personal data for only as long as necessary to fulfill the legitimate purposes outlined in this policy, including:

– Account Data: Retained as long as your account remains active or as required by law.
– Transaction Data: Retained for up to 7 years for compliance with tax and regulatory obligations.
– Communication Data: Retained for 3 years following last contact.
– Preference and Marketing Data: Retained until you withdraw your consent or opt out.

When retention is no longer necessary, personal data is securely deleted or anonymized.

9. Cookie Policy

droprift.com uses cookies and similar technologies to enhance the user experience. Cookies may fall into the following categories:

– Essential Cookies: Required for basic site functionality (e.g., session cookies).
– Functional Cookies: Enable enhanced features like language selection or preferences.
– Analytics Cookies: Help us understand how visitors interact with the website (e.g., page views, navigation).
– Performance Cookies: Assist in optimizing loading speeds and identifying technical issues.

10. Cookie Management and Compliance with GDPR & CCPA

Upon first visit, users are presented with a cookie consent banner allowing them to manage preferences in accordance with GDPR and CCPA. You can modify your cookie settings at any time through your browser or via our cookie management portal. Essential cookies are enabled by default; other types are only activated with your consent.

California residents may exercise “Do Not Sell or Share My Personal Information” rights via designated opt-out options available on our website.

11. Children’s Privacy

droprift.com is not intended for children under the age of 13. We do not knowingly collect personal data from children under 13. If we learn that such data has been collected without verifiable parental consent, we will promptly delete it. Parents or legal guardians who believe their child’s data was collected may contact us at [email protected].

12. Policy Updates

We may revise this Privacy Policy periodically to reflect changes to our practices or for regulatory compliance. Any material changes will be communicated to users via prominent notices on droprift.com. Continued use of the website constitutes acceptance of the updated terms.

13. Contact Us

If you have questions, concerns, or wish to exercise your data rights, please contact us at:

Email: [email protected]

We are committed to resolving your inquiries fairly, transparently, and in accordance with your rights under applicable privacy laws.

Compliance Notice

droprift.com complies with all applicable data privacy laws and aims to process personal data responsibly, securely, and transparently. For any concerns regarding this Privacy Policy or your personal information, we encourage you to contact [email protected].