PRIVACY POLICY

1. Introduction

At Sport Without Spin (accessible at sportwithoutspin.com), we are deeply committed to safeguarding the privacy and personal data of our users. This Privacy Policy outlines how we collect, use, disclose, and store your information in compliance with applicable privacy regulations, including the General Data Protection Regulation (GDPR) and the California Consumer Privacy Act (CCPA). We are dedicated to data protection and transparency, and we strive to ensure that your personal information is handled responsibly and securely.

2. Scope of This Policy and Data Controller Role

This Privacy Policy applies to all personal data collected through the use of the website sportwithoutspin.com and related services we provide, including communications and transactions initiated through the platform. For the purposes of applicable data protection laws, Sport Without Spin is the data controller responsible for processing your personal information as described in this document.

3. Categories of Data We Process

We may process the following categories of personal data, depending on your interactions with our website:

a. Usage Data
Includes information about how you use the website, such as your IP address, browser type, operating system, referral source, device identifiers, geographical location, and session activity including the date, time, duration, and pages visited.

b. Account Data
Includes personal identifiers voluntarily provided when creating an account such as full name, postal address, email address, and telephone number.

c. Profile Data
Includes your preferences, interests, browsing behavior, product views, past orders, saved content, and settings within your user profile.

d. Communication Data
Includes all communications sent to or received from us, including support requests, contact history, email correspondence, and feedback submissions.

e. Technical Data
Comprises device metadata and system configurations used to access the site, such as hardware model, operating system details, device settings, and system logs.

f. Transaction Data
Includes details relating to purchases and financial transactions, such as payment method, billing information, shipping addresses, and order confirmations.

g. Preference Data
Includes your marketing and communication preferences, newsletter opt-in/opt-out status, product category interests, and event registrations.

4. Legal Bases for Processing Personal Data

We process your personal data based on one or more of the following legal bases:

– Consent: Where you have given us explicit permission to process your data for specific purposes, such as subscribing to newsletters or marketing communications.
– Contractual necessity: To fulfill contractual obligations, such as providing access to registered features or processing purchases and delivery.
– Legitimate interests: Where processing is necessary for our legitimate business interests, such as improving the website’s performance, understanding user behavior, and securing our network, provided these interests are not overridden by your data protection rights.
– Legal obligations: To comply with legal and regulatory requirements, such as tax laws or court orders.

5. Your Rights Under GDPR and CCPA

You have specific rights under applicable data protection laws, including:

– Right of Access: To request access to the personal data we hold about you.
– Right to Rectification: To correct or update any inaccurate or incomplete data.
– Right to Erasure: To request deletion of your data, subject to legal and contractual obligations.
– Right to Restrict Processing: To request limitation of the way we process your data in certain circumstances.
– Right to Data Portability: To receive your personal data in a structured, commonly used, machine-readable format and/or to have it transmitted to another controller.
– Right to Object: To object to processing based on our legitimate interests or for direct marketing purposes.
– Right to Non-Discrimination: Under CCPA, to receive equal service and pricing regardless of exercising any privacy rights.

To exercise any of your rights, please contact us at [email protected].

6. Security Measures

We implement and maintain appropriate technical and organizational security measures to protect your data, including:

– Data encryption at rest and in transit
– Strict access control measures and role-based permissions
– Regular system audits and vulnerability assessments
– Secure backups and failover provisions
– Staff confidentiality agreements and privacy training programs

7. International Transfers

Where your personal data is transferred outside the European Economic Area (EEA), we ensure such transfers are compliant with applicable laws and safeguarded by appropriate mechanisms, such as European Commission Standard Contractual Clauses, Binding Corporate Rules, or adequacy decisions from regulatory bodies.

8. Data Retention

We retain personal data only for as long as is necessary for the purposes set out in this policy or as required by law. Specific retention periods are:

– Usage and Technical Data: up to 12 months for security and analytics
– Account and Profile Data: retained while the account is active and for 36 months post deactivation
– Communication Data: retained for a period not exceeding 24 months
– Transaction Data: retained for 7 years for accounting and compliance
– Preference Data: retained until consent is withdrawn or updated

9. Cookie Policy

We use cookies and similar technologies to enhance user experience, analyze site traffic, and tailor content. The types of cookies we use include:

– Essential Cookies: Necessary for site operation and core functionality
– Functional Cookies: Remember preferences and personalize content
– Analytics Cookies: Track usage and performance to improve the site
– Performance Cookies: Measure and optimize loading speed and responsiveness

10. Cookie Management and Compliance

Upon your first visit to sportwithoutspin.com, and at intervals thereafter, you will be prompted with cookie consent options in compliance with GDPR and CCPA. You may manage your cookie preferences through our cookie banner tool or by adjusting settings in your browser. Note that essential cookies cannot be disabled as they are required for the functioning of the website.

11. Protection of Children

Our services are not intended for children under the age of 13. We do not knowingly collect personal data from individuals under this age. If we become aware that such data has been collected inadvertently, we will take appropriate steps to delete it from our systems. Parents or legal guardians with concerns may contact us at [email protected].

12. Policy Updates and Notifications

We may revise this Privacy Policy to reflect changes in our practices, legal obligations, or technological advancements. Where material changes are made, we will notify users via appropriate channels, such as website notices or direct emails, where required by law. Continued use of sportwithoutspin.com following such updates constitutes agreement with the revised policy.

13. Contact Us

If you have any questions, requests, or concerns regarding this Privacy Policy or our data processing practices, you may contact us at:

Email: [email protected]

We are fully committed to upholding the highest standards of privacy and compliance with all applicable data protection regulations. Users are encouraged to contact us with any privacy-related inquiries at the email address provided above.