Privacy Policy for millhillpark.com

1. Introduction

millhillpark.com (“we”, “us”, or “our”) is committed to maintaining the highest standards of privacy and data protection. We recognize the importance of safeguarding your personal information and ensuring transparency in how we collect, use, and protect your data. This Privacy Policy outlines your rights with respect to your personal data and our responsibilities in accordance with the European Union General Data Protection Regulation (GDPR), the California Consumer Privacy Act (CCPA), and other applicable data protection laws.

2. Scope of this Policy and Data Controller Role

This Privacy Policy applies to all users and visitors of millhillpark.com, including any services, features, or products offered through this website. For the purposes of applicable data protection laws, millhillpark.com is the “Data Controller,” meaning we determine the purposes and means of processing your personal information. If you have any questions regarding this policy or your data rights, you may contact us at [email protected].

3. Categories of Data We Process

We may collect, store, and process the following categories of personal data:

a) Usage Data
Information about how you use our website, including your IP address, browser type, operating system, referring URLs, pages viewed, session durations, and general location information.

b) Account Data
Personal information provided when you create an account, such as your full name, residential or mailing address, email address, and telephone number.

c) Profile Data
Data associated with your user profile including preferences, saved content, purchase history, user interactions, and browsing behavior.

d) Communication Data
Records of communications sent or received through our site, including customer support requests, email exchanges, internal messages, and feedback.

e) Technical Data
Device-specific technical information including IP addresses, device type, operating system, browser settings, language preferences, and diagnostic logs.

f) Transaction Data
Details related to purchases and transactions on our platform, including items purchased, payment methods, billing and shipping information.

g) Preference Data
Marketing preferences, product interests, opt-in choices, and consent records related to promotional communications.

4. Legal Bases for Processing

We process your personal data only when there is a valid legal basis for doing so. These include:

– Consent: Where you have explicitly agreed to the processing of your data for specific purposes such as marketing.
– Contractual Necessity: When processing is necessary for the performance of a contract to which you are a party.
– Legal Obligation: Where processing is required to comply with legal obligations.
– Legitimate Interest: For purposes such as fraud prevention, service improvement, and website optimization, provided such interests do not override your data protection rights.

5. Your Rights Under Data Protection Laws

Under applicable laws, you may exercise the following rights:

– Right of Access: Request access to the personal data we hold about you.
– Right to Rectification: Request correction of inaccurate or incomplete data.
– Right to Erasure: Request deletion of your personal data in certain circumstances.
– Right to Restrict Processing: Request that we limit how your data is used.
– Right to Data Portability: Request a copy of your data in a structured, machine-readable format for your own use or to transfer to another controller.
– Right to Object: Object to processing based on legitimate interests or for direct marketing.

To exercise your rights, please contact us at [email protected].

6. Security Measures

We implement appropriate organizational and technical measures to safeguard your data. These include encryption of sensitive data (both at rest and in transit), role-based access controls, regular system backups, and staff training on data privacy obligations. While we strive for the highest levels of security, absolute protection cannot be guaranteed.

7. International Data Transfers

We may transfer your data to jurisdictions outside the European Economic Area (EEA) or the United States. When such transfers occur, we ensure appropriate safeguards are in place, such as European Commission Standard Contractual Clauses or compliance with relevant national data protection authorities. We take all reasonable steps to ensure your data remains protected consistent with GDPR and CCPA requirements.

8. Data Retention

We store personal data only for as long as necessary to fulfill the purpose for which it was collected, unless a longer retention period is required by law. The following are general retention guidelines:

– Usage and Technical Data: Retained for up to 2 years for analytics and troubleshooting.
– Account Data: Retained for the duration of your relationship with us and up to 6 years after termination.
– Transaction Data: Retained for 7 years for auditing and tax purposes.
– Communication Data: Retained for 5 years for record-keeping and support history.
– Preference Data: Retained until consent is withdrawn or the data becomes obsolete.

9. Cookie Policy

We use cookies and similar technologies on millhillpark.com for various purposes:

– Essential Cookies: Required for the basic functioning of the site (e.g., login, session management).
– Functional Cookies: Enable personalization features and user preferences.
– Analytics Cookies: Help us understand how users interact with the site to improve performance.
– Performance Cookies: Monitor load times and user experience metrics.

Cookies are placed either by us or authorized third-party service providers.

10. Cookie Management and Compliance

In compliance with GDPR and CCPA, we provide mechanisms for users to manage their cookie preferences. Upon first visit, users will be presented with a cookie consent banner allowing them to accept or decline non-essential cookies. You may also change your preferences or withdraw consent at any time using our Cookie Settings available on our platform. For CCPA compliance, California residents may opt out of the sale or disclosure of their personal data via designated Do Not Sell My Personal Information links.

11. Children’s Data

We do not knowingly collect or process personal information from children under the age of 13. If we discover that such data has been inadvertently collected, we will take immediate steps to delete it. Parents or legal guardians who believe their child has provided us with personal data are encouraged to contact us at [email protected].

12. Policy Updates

We reserve the right to update this Privacy Policy to reflect changes in our practices, regulatory obligations, or technology. Where required by law, we will notify you of significant changes and, where necessary, seek renewed consent. You are encouraged to periodically review this page to stay informed about how we handle your personal information.

13. Contact Us

For any questions, requests, or concerns regarding this Privacy Policy or your personal data, please contact us at:

Email: [email protected]
Website: https://millhillpark.com

We are committed to resolving any privacy concerns in a timely and transparent manner.

millhillpark.com takes data privacy seriously and operates in full alignment with applicable data protection regulations including GDPR and CCPA. Please contact us at any time regarding your privacy rights or to raise a concern.