Privacy Policy - Crib-Grid

1. Introduction

At CribGrid.com, we are committed to safeguarding your privacy and protecting your personal data. We recognize the importance of maintaining the confidentiality, integrity, and security of your information. This Privacy Policy outlines how we collect, use, disclose, and safeguard your data and how we ensure your rights under applicable data protection regulations, including the General Data Protection Regulation (GDPR) and the California Consumer Privacy Act (CCPA).

2. Scope of Policy & Data Controller Role

This Privacy Policy applies to all visitors, users, and others who interact with our website at cribgrid.com (“Site”) or use services provided via the Site. CribGrid.com acts as the Data Controller with respect to the personal data collected through this Site. If you have any questions regarding the processing of your data, you may contact us at [email protected].

3. Categories of Data Processed

We collect and process various categories of personal information, as detailed below:

a) Usage Data: This includes information automatically collected about how you use our Site. It may consist of IP address, browser type and settings, date and time of access, pages visited, referring/exit URLs, session duration, and similar activity data.

b) Account Data: When you create an account or otherwise interact with us, we may collect your name, postal address, email address, and phone number.

c) Profile Data: We may collect details regarding your preferences, past purchases, browsing behavior on the Site, saved items, and other user-profile information.

d) Communication Data: This includes records of your communications with us (via our contact forms, email, or customer support), such as inquiries, support requests, and related correspondence.

e) Technical Data: Information including device identifiers, system settings, operating systems, browser configuration, network data, and similar system information may be collected to ensure proper operation of the Site.

f) Transaction Data: When you make purchases, we collect order history, payment details (processed securely via third-party providers), shipping address, and related delivery and invoicing information.

g) Preference Data: Includes your communication preferences, marketing opt-ins or opt-outs, and notions of interest related to specific products or services.

4. Legal Bases for Processing

We process your personal data under the following legal bases, as applicable under GDPR and CCPA:

– Performance of a Contract: To fulfill services requested by you, such as completing orders or responding to inquiries.
– Legitimate Interests: To maintain and improve our services, recordkeeping, fraud prevention, and ensuring security of the Site.
– Consent: Where legally required (e.g., email marketing), with your consent.
– Legal Obligation: To comply with applicable laws and regulations.

5. Your Rights

As a data subject, you hold the following rights regarding your personal information, subject to applicable laws:

– Right of Access: You may request confirmation as to whether we process your data, and obtain a copy.
– Right to Rectification: You may request corrections to inaccurate or incomplete data.
– Right to Erasure: You may request that your personal data be deleted, under certain conditions.
– Right to Restriction of Processing: You may ask that we limit how we use your data in certain scenarios.
– Right to Data Portability: You are entitled to receive your personal data in a structured, machine-readable format for transfer to another controller.
– Right to Object: You may object to processing based on legitimate interests or direct marketing.

Residents of California may also exercise additional rights under the CCPA, including the right to opt-out of the sale of personal data (noting that CribGrid.com does not sell user data).

To exercise your rights, please contact us at [email protected].

6. Security Measures

We employ robust technical and organizational security measures to protect your information, including:

– Encryption (HTTPS, TLS protocols) for data in transit.
– Access controls and authentication protocols.
– Regular data backups and disaster recovery processes.
– Security awareness training for staff handling personal data.
– Periodic security audits and vulnerability assessments.

7. International Data Transfers

If we transfer your personal data outside the European Economic Area (EEA) or other jurisdictions with data protection laws, such transfers are performed using standardized contractual clauses authorized by the European Commission or other lawful transfer mechanisms to ensure adequate levels of protection consistent with EU and other applicable laws.

8. Data Retention

We retain personal data for no longer than is necessary for the fulfillment of the purposes for which it was collected, including:

– Account Data: Retained for the life of your account and up to 2 years after closure.
– Transaction Data: Retained for 7 years, in line with financial and tax requirements.
– Communication Data: Stored for 3 years post-interaction.
– Usage and Technical Data: Retained for 12 months for analytics and optimization.
– Marketing Preferences: Retained until consent is revoked.

We may retain data for longer where required by law or to establish, exercise, or defend legal claims.

9. Cookie Policy

CribGrid.com uses cookies and similar technologies to enhance user experience:

– Essential Cookies: Required for site navigation and core functionalities (e.g., login, shopping cart).
– Functional Cookies: Remember user preferences and settings.
– Analytics Cookies: Collect aggregated user behavior for statistical analysis (e.g., Google Analytics).
– Performance Cookies: Improve site performance and responsiveness.

For more information on the cookies we use, please refer to our dedicated Cookie Statement (linked on the website footer).

10. Cookie Management and Compliance

Visitors from the European Union and California are presented with cookie consent options on their initial visit, allowing them to manage preferences in accordance with GDPR and CCPA. You may update your browser settings to block or delete cookies or withdraw consent at any time using our cookie management tools available on cribgrid.com.

11. Children’s Privacy

CribGrid.com does not knowingly collect or solicit personal data from children under the age of 13. If we become aware that we have collected such information without verified parental consent, we will take immediate steps to delete it. Parents or guardians with concerns are encouraged to email us at [email protected].

12. Policy Updates & Notifications

We reserve the right to amend this Privacy Policy as necessary to reflect changes in legal, regulatory, or operational requirements. If material changes are made, we will notify users via the Site or through other appropriate communication channels. You are encouraged to review this policy periodically to stay informed.

13. Contact

If you have questions, concerns, or requests regarding our privacy practices or this Policy, please contact:

CribGrid Privacy Team
Email: [email protected]

CribGrid.com is committed to transparency and full compliance with GDPR, CCPA, and other governing data protection laws. Your privacy matters, and we welcome all inquiries regarding how your information is managed on our platform.