Privacy Policy - Katherine Jenkins International

1. Introduction

At Katherine Jenkins International, accessible via katherine-jenkins-international.com, we are committed to protecting and respecting your personal data. This Privacy Policy outlines how we collect, use, disclose, and safeguard your information, in full compliance with the General Data Protection Regulation (GDPR), California Consumer Privacy Act (CCPA), and other applicable data protection laws. We value your privacy and are dedicated to upholding the highest standards of transparency, accountability, and data security.

2. Scope and Data Controller

This Privacy Policy applies when you interact with us through our website, katherine-jenkins-international.com, or contact us via email or other communications. For the purposes of relevant data protection legislation, Katherine Jenkins International is the Data Controller of your personal data. All questions, comments, or requests concerning this Policy or your data rights should be directed to [email protected].

3. Categories of Data Processed

We may collect and process the following categories of personal and technical data:

a. Usage Data
Includes information about how you use our website, such as browser type and version, IP address, time zone setting and location, pages visited, session duration, and referral sources.

b. Account Data
Includes your first and last name, billing and shipping address, email address, telephone number, and account credentials should you register on our website.

c. Profile Data
Includes information associated with your user profile, such as preferences, purchase history, and behavioral patterns relating to how you interact with our offerings.

d. Communication Data
Encompasses all correspondence with us including support requests, complaint records, emails, contact forms, and any other inquiries submitted via the website or customer service.

e. Technical Data
Includes data on your device type, operating system, browser plug-ins, screen resolution, system configurations, mobile device identifiers, and diagnostic data.

f. Transaction Data
Includes purchase histories, payment card details (handled via secure third-party payment processors), delivery addresses, and order confirmations.

g. Preference Data
Includes your consents to receive marketing information, newsletter subscriptions, promotional campaign engagement, and stated interests in products or services.

4. Legal Bases for Processing

We process your personal data under one or more of the following legal grounds:

– Consent: Where you have explicitly granted permission for the processing of your personal data.
– Contractual Necessity: When data processing is required to fulfill a contract with you, such as delivering a product or processing payment.
– Legitimate Interests: Where processing is necessary for our legitimate interests, provided those interests do not override your fundamental rights.
– Legal Obligation: When processing is necessary to comply with our legal or regulatory obligations.

5. Your Rights

Under GDPR and CCPA, you have the following rights regarding your personal information:

– Right of Access: You may request access to the personal data we hold about you.
– Right to Rectification: You may request correction of inaccurate or incomplete data.
– Right to Erasure: You may request deletion of your data where there is no legal basis for its continued use.
– Right to Restriction: You may request that we restrict processing in specific circumstances.
– Right to Data Portability: You may request a copy of your data in a structured, commonly-used machine-readable format.
– Right to Object: You may object to our processing based on legitimate interests or direct marketing.
– Right to Non-Discrimination (CCPA): You will not be discriminated against for exercising any of your privacy rights.

To exercise your rights, contact us at [email protected].

6. Security Measures

We employ stringent security measures to protect your personal information, including:

– Secure HTTPS encryption across our website
– Role-based access controls to limit access to authorized personnel
– Regular data backups and disaster recovery protocols
– Ongoing staff training in data protection and cybersecurity best practices
– Intrusion detection and vulnerability management systems

7. International Data Transfers

Where personal data is transferred outside of the European Economic Area (EEA) or California, we implement safeguards to ensure compliance with applicable regulations, including:

– Standard Contractual Clauses approved by the European Commission
– Adequacy decisions or equivalent legal mechanisms
– Data-sharing agreements incorporating data protection obligations

8. Data Retention

We retain your personal data for as long as necessary to fulfill the purposes for which it was collected, including:

– Usage Data: up to 12 months for analytics and diagnostics
– Account, Profile, and Transaction Data: up to 7 years for contractual and legal purposes
– Communication Data: up to 3 years for service history and support analysis
– Preference Data: until you withdraw your consent or object to processing

We securely delete or anonymize data when it is no longer required.

9. Cookie Policy

Our website uses cookies and similar technologies categorized as follows:

– Essential Cookies: Necessary for the operation of our website (e.g., login sessions, shopping cart)
– Functional Cookies: Enhance website functionality and remember user preferences
– Analytics Cookies: Collect aggregate data to help us understand how visitors use our website
– Performance Cookies: Improve speed and optimize performance across devices

Cookies do not typically contain personally identifiable information but may be linked to such information if you maintain an account with us.

10. Cookie Management and Compliance

In compliance with GDPR and CCPA:

– We provide a cookie consent banner allowing you to accept or reject non-essential cookies
– You may modify your cookie preferences at any time in your browser settings or via our cookie management tool
– Do Not Track signals and global privacy controls are honored where technically feasible

For further details or to change your consent, please visit our Cookie Preferences page, accessible from the site footer.

11. Children’s Privacy

Our website and services are not directed toward children under the age of 13. We do not knowingly collect or process personal data from children. If you believe a child has submitted personal data to us, please contact [email protected], so we may take appropriate action to remove such information.

12. Policy Updates

We may update this Privacy Policy to reflect legal, regulatory, or operational changes. Material changes will be communicated via the website or direct notice to you, as appropriate. We encourage you to review this Privacy Policy periodically to remain informed about how we are protecting your information.

13. Contact Information

For any questions, concerns, rights requests, or complaints regarding this Privacy Policy or our data processing practices, please contact:

Katherine Jenkins International
Email: [email protected]
Website: https://katherine-jenkins-international.com

We are fully committed to complying with all applicable privacy laws and to protecting your personal data with the highest level of care. Reach out to us with any concerns pertaining to your digital privacy and we will address them promptly and transparently.