Privacy Policy - Katherine Jenkins International

1. Introduction

Katherine Jenkins International (“we,” “our,” “us”) is committed to protecting your privacy and ensuring the security of your personal data. In accordance with global data protection laws, including the General Data Protection Regulation (“GDPR”) and the California Consumer Privacy Act (“CCPA”), we implement strict policies and practices designed to give you confidence in how your personal information is handled when you engage with our website, katherine-jenkins-international.com. We are dedicated to preserving the integrity, confidentiality, and availability of the information we collect and process.

2. Scope of This Policy and Role of Data Controller

This Privacy Policy applies to all visitors, users, and others who interact with the website katherine-jenkins-international.com. Katherine Jenkins International is the data controller for the personal data collected through this website and associated platforms. As data controller, we determine the purposes and means of processing your personal information.

3. Categories of Data We Process

We collect and process the following categories of personal data:

a. Usage Data:
Includes information such as your browser type, IP address, access times, referring URLs, session identifiers, page interactions, and other similar technical data.

b. Account Data:
Includes your name, email address, mailing address, phone number, and other contact details provided during account creation or event registrations.

c. Profile Data:
Includes interests, user behavior on our site, purchase history, preferences, event attendance, and other profiling activity linked to your user experience.

d. Communication Data:
Comprises data from your messages to us, including email correspondence, contact forms, customer service interactions, and other communication history.

e. Technical Data:
Includes device type, operating system, language settings, system configurations, browser plug-ins, and diagnostic data.

f. Transaction Data:
Includes payment information (collected and processed via secure third-party providers), order details, delivery addresses, purchase timestamps, and invoice records.

g. Preference Data:
Includes marketing and newsletter subscription consents, personal preferences, and interests expressed or inferred from your use of the website.

4. Legal Bases for Processing

We rely on several legal bases for processing your personal data, depending on the context and type of information:

– Consent: Where you have explicitly granted permission—for example, to receive marketing emails.
– Contractual Necessity: To fulfill obligations under terms and conditions you have agreed to, including transactions and event participation.
– Legal Obligation: To comply with legal and regulatory requirements.
– Legitimate Interests: To improve our services, ensure website security, and understand user behavior, provided your rights and freedoms are not overridden.

5. Your Rights

Under applicable privacy laws, you may exercise the following rights:

– Right to Access: Request information about the personal data we hold about you.
– Right to Rectification: Request correction of any inaccurate or incomplete personal data.
– Right to Erasure: Request deletion of your data where legally applicable.
– Right to Restriction: Request limitations on how we process your data under certain conditions.
– Right to Data Portability: Request transfer of your personal data to another service provider in a structured, commonly used, and machine-readable format.

To invoke your rights or to make inquiries regarding personal data, please contact us at [email protected].

6. Security Measures

We implement a range of physical, technical, and administrative safeguards to ensure the confidentiality, integrity, and availability of your personal information, including:

– Encryption of sensitive data during transmission and storage.
– Access restrictions based on the principle of least privilege.
– Regular system backups and integrity checks.
– Staff training programs focused on data protection and cybersecurity best practices.

7. International Data Transfers

We may process your information on servers located in jurisdictions outside your country, including countries that may not offer the same level of data protection. In such instances, we ensure appropriate safeguards are in place, such as the use of Standard Contractual Clauses approved by the European Commission or other mechanisms recognized under applicable laws.

8. Data Retention

We retain your personal information only as long as necessary for the purposes it was collected, including:

– Usage and Technical Data: Retained for up to 24 months to enable analytics and performance improvements.
– Account and Profile Data: Retained for as long as your account is active and for up to 6 years thereafter for compliance purposes.
– Transaction Data: Retained for at least 7 years in accordance with tax and accounting laws.
– Communication Data: Retained for up to 3 years for customer support continuity and legal obligations.
– Preference Data: Retained until you withdraw consent or update your preferences.

9. Cookie Policy

Our website uses cookies and similar technologies to enhance your browsing experience. These include:

– Essential Cookies: Necessary for the website to function (e.g., session cookies, user auth tokens).
– Functional Cookies: Enable helpful features, such as remembering preferences or language choices.
– Analytics Cookies: Collect information about how visitors use the site (e.g., Google Analytics).
– Performance Cookies: Support site performance by tracking load times and responsiveness.

10. Cookie Management and Legal Compliance

We obtain consent where applicable before setting non-essential cookies on your device in compliance with GDPR and CCPA. You may control or disable cookies through your browser settings or manage your consent using the cookie banner or preferences panel available on katherine-jenkins-international.com.

Under CCPA, you also have the right to opt out of the “sale” of personal data (as defined under California law). We do not sell your personal data to third parties for profit. If this practice changes, we will update this policy and provide an appropriate mechanism for opting out.

11. Children’s Privacy

We do not knowingly collect personal data from children under the age of 13. If we become aware that we have inadvertently received personal information from a child under 13, we will take steps to delete such information promptly and in compliance with applicable legal requirements.

Parents or guardians who believe that their child has provided personal information without consent are encouraged to contact us at [email protected].

12. Policy Updates and Notifications

We may revise this Privacy Policy to reflect changes in legal obligations, operational practices, or technological developments. Any updates will be posted on katherine-jenkins-international.com and, where required by law, we will notify you via email or prominent notice on the website.

We encourage users to review this page periodically to stay informed about how we protect personal data.

13. Contact Us

If you have questions about this Privacy Policy, data protection practices, or wish to exercise your rights under applicable law, please contact us at:

Email: [email protected]

We are committed to full compliance with the GDPR and CCPA and hold ourselves accountable for ensuring your personal data is treated lawfully, fairly, and transparently. Please reach out with any privacy concerns, and we will be pleased to assist you.