Privacy Policy for The Orb Whisperers

At The Orb Whisperers (“we,” “us,” or “our”), accessible via theorbwhisperers.com, we are committed to protecting the privacy, security, and personal data of our users. We understand the importance of privacy in the digital age, and we are committed to complying with data protection laws, including the General Data Protection Regulation (GDPR) and the California Consumer Privacy Act (CCPA).

This Privacy Policy explains how we collect, use, disclose, and protect your personal data, and your rights relating to that data.

1. Scope of Policy and Role as Data Controller
This Privacy Policy applies to all personal data collected through our website located at theorbwhisperers.com, related services, and communications. As the data controller, The Orb Whisperers determines the purpose and means of processing your personal data.

2. Categories of Data Processed
We process the following categories of personal data, depending on your interactions with our website and services:

a. Usage Data
We collect information about how you use our site, including your browser type, IP address, time zone, pages visited, session duration, and referral URLs.

b. Account Data
When you create an account with us, we collect your full name, mailing address, email address, and phone number.

c. Profile Data
We may collect information about your preferences, shopping habits, purchase history, and engagement with our services to personalize your experience.

d. Communication Data
If you contact us (e.g., via email or customer support), we collect records of that correspondence, including the content of messages and any attachments.

e. Technical Data
We collect technical information about your device and system configuration, including operating system, device identifiers, browser language, and network settings.

f. Transaction Data
We collect details related to purchases made on theorbwhisperers.com, including payment methods (processed through secure, third-party providers), delivery address, and transaction timestamps.

g. Preference Data
We collect your declared preferences regarding marketing, communications, and products of interest to tailor content and engagement.

3. Legal Bases for Processing
We process your personal data only when allowed by law. The primary legal bases for our processing activities include:

– Your consent (e.g., marketing communications);
– Fulfilling a contractual obligation to you (e.g., order fulfillment);
– Compliance with legal obligations (e.g., recordkeeping, fraud prevention);
– Our legitimate interests (e.g., maintaining and improving the website, fraud detection, user experience optimization), provided such interests are not overridden by your fundamental rights.

4. Your Rights Under GDPR and CCPA
Depending on your location and applicable law, you may have the following rights:

– Right to Access: Request a copy of personal data we hold about you.
– Right to Rectification: Request correction of inaccurate or incomplete data.
– Right to Erasure: Request the deletion of your personal data.
– Right to Restriction: Request limits on how we process your data.
– Right to Portability: Request transfer of your data to another service provider in a structured, machine-readable format.
– Right to Object: Object to certain data processing based on legitimate interest.
– Right to Opt-Out of Sale (CCPA): California residents may request to opt-out of any “sale” of personal data.
– Right to Non-Discrimination: You will not receive discriminatory treatment for exercising your privacy rights.

To exercise any of these rights, please contact us using the information provided below.

5. Security Measures
We implement comprehensive organizational and technical safeguards to protect your personal data. These include data encryption (in transit and at rest), role-based access control, secure backups, rigorous third-party vendor management, firewalls, vulnerability monitoring, and employee training in data protection.

6. International Transfers
Your data may be transferred to and processed in countries outside your jurisdiction, including the United States, where our servers or third-party partners are located. In such cases, we use standard contractual clauses or implement equivalent measures to ensure an adequate level of data protection in compliance with GDPR and other applicable laws.

7. Data Retention
We retain personal data only as long as necessary to fulfill the purposes for which it was collected, or as required by applicable law. Specific retention periods include:

– Account Data: retained as long as your account remains active and for seven (7) years thereafter for legal or accounting purposes.
– Transaction Data: retained for up to seven (7) years for tax and compliance requirements.
– Communication Data: retained for three (3) years from the date of last contact.
– Preference and Profile Data: retained for two (2) years from last interaction with our website or services.

Anonymized or aggregated data may be retained indefinitely for research or statistical purposes.

8. Cookie Policy
We use cookies and similar tracking technologies to enhance your browsing experience on theorbwhisperers.com. Cookies are categorized as follows:

– Essential Cookies: Necessary for the operation of our website (e.g., login authentication, shopping cart).
– Functional Cookies: Enhance usability (e.g., saving preferences, localization).
– Performance Cookies: Help us understand usage patterns, errors, and overall performance to improve service.
– Analytics Cookies: Collect aggregate site metrics and usage data via third-party services (e.g., Google Analytics).

See the section below on cookie management to adjust your settings.

9. Cookie Management and Consent
Upon your first visit to theorbwhisperers.com, we request your consent for non-essential cookies. You may update your preferences at any time through the cookie management interface or by adjusting your browser settings to decline certain types of cookies. California and EU visitors are presented with compliant opt-in/opt-out options in accordance with GDPR and CCPA regulations.

10. Children’s Privacy
We do not knowingly collect or process personal data from children under the age of 13. If you are a parent or guardian and believe your child has provided data without your consent, please contact us at [email protected]. We will promptly delete the information in accordance with applicable law.

11. Policy Updates
We reserve the right to update or amend this Privacy Policy at any time. Material changes will be communicated via our website or through other appropriate communication channels. Continued use of theorbwhisperers.com indicates your acceptance of the revised policy.

12. Contact
If you have any questions, requests, or concerns regarding this Privacy Policy, your personal data, or our privacy practices, please contact us at:

Email: [email protected]
Website: https://theorbwhisperers.com

We are committed to supporting your privacy rights and maintaining transparency in our data handling practices. For clarification or to exercise your rights under applicable privacy laws, please reach out using the contact details above.