Privacy Policy

Strike Hearth LLC (“we”, “us”, or “our”) understands the importance of protecting your personal data and is committed to processing it responsibly, transparently, and in accordance with all applicable data protection laws, including the General Data Protection Regulation (GDPR) and the California Consumer Privacy Act (CCPA). This Privacy Policy outlines how we collect, use, disclose, and safeguard your personal information when you visit or interact with our website, strikehearth.com (“Website”). Your privacy is fundamental to us, and we are committed to maintaining the integrity and confidentiality of your data.

1. Scope of This Privacy Policy and Data Controller Role

This Privacy Policy applies to all users of the Website. It governs the information collected through strikehearth.com and related services, whether accessed online or via mobile devices. For purposes of applicable data protection laws, Strike Hearth LLC, acting through strikehearth.com, is the “Data Controller” responsible for the processing of personal data described herein. This includes data submitted directly by users as well as data collected automatically through website usage.

2. Categories of Personal Data Collected

We may collect and process the following categories of personal data, either directly from you or through automated means:

a) Usage Data: Includes information about your interactions with the Website such as IP address, browser type and version, language preference, referring URLs, pages viewed, time and date of visits, session duration, clicks, and navigation data.

b) Account Data: Includes your name, email address, phone number, billing and shipping address, and other information you may provide voluntarily during account registration or updates.

c) Profile Data: Includes preferences, purchase history, behavior patterns, and other insights derived from your interaction with the Website including wishlists, saved items, and browsing behavior.

d) Communication Data: Includes support inquiries, email correspondence, customer service interactions, and chat logs maintained to ensure service quality and transaction history.

e) Technical Data: Comprises device identifiers, operating system information, device type, screen resolution, browser settings, network connection details, and other system-related data.

f) Transaction Data: Includes payment card information (processed through secure third-party providers), order details, fulfillment and delivery status, and transaction history.

g) Preference Data: Includes marketing communication preferences, product interest categories, survey responses, and opt-in or opt-out records related to promotional content.

3. Legal Bases for Data Processing

We process your personal data under one or more of the following lawful bases, depending on the context in which it was collected:

– Legitimate Interests: For purposes such as analytics, fraud prevention, direct marketing (if applicable), and Website improvement, provided these interests are not overridden by your rights and interests.
– Contractual Necessity: When processing is required to fulfill your requests or perform our contractual obligations, such as order fulfillment and customer support.
– Legal Obligation: Where processing is necessary for compliance with a legal requirement (e.g., tax reporting and financial recordkeeping).
– Consent: Where you have provided informed and explicit consent—for example, subscribing to newsletters or accepting non-essential cookies.

4. Your Data Subject Rights

Under applicable data protection laws, you have the following rights in relation to your personal data:

– Right of Access: You can request a copy of the personal data we hold about you.
– Right to Rectification: You may request that we correct inaccurate or incomplete data.
– Right to Erasure (“Right to be Forgotten”): You may request the deletion of your data, subject to certain exceptions.
– Right to Restrict Processing: You can request the restriction of your data’s processing under specific conditions.
– Right to Data Portability: You may request a copy of your data in a machine-readable format to transmit to another service provider.
– Right to Object: You may object to specific data processing activities where we rely on legitimate interests or direct marketing.

To exercise any of these rights, please contact us at [email protected]. We will respond to legitimate requests in accordance with applicable laws.

5. Security Measures

We employ robust organizational and technical safeguards to ensure the confidentiality, integrity, and availability of your data. These include:

– Data encryption in transit and at rest
– Role-based access controls and authenticated user permissions
– Secure data backups and disaster recovery protocols
– Regular vulnerability assessments
– Staff training and internal policies regarding data handling and privacy

While we employ industry-standard safeguards, no system is completely secure. We encourage you to practice safe internet habits and maintain the confidentiality of your login credentials.

6. International Data Transfers

Your data may be transferred to, stored in, or processed in jurisdictions outside your country of residence, including in the United States. Where data is transferred outside the European Economic Area or UK, we ensure an adequate level of protection by implementing standard contractual clauses or using other lawful transfer mechanisms.

7. Data Retention

We retain your personal data only as long as necessary to fulfill the purposes for which it was collected, including legal, regulatory, tax, accounting, or reporting obligations.

– Account Data and Transaction Data are retained for up to 7 years after the final transaction or account closure, as required by legal obligations.
– Communication Data may be kept for up to 3 years after resolution.
– Usage Data, Technical Data, and Profile Data may be retained in anonymized or aggregated form for analytics purposes.
– Marketing Preferences are retained for up to 2 years after the last engagement or until withdrawal of consent.

8. Cookie Policy

Our Website uses cookies and similar tracking technologies to optimize user experience and improve service quality. The following categories of cookies are used:

– Essential Cookies: Required for the basic functionality of the Website, such as keeping you logged in and enabling core features like cart and checkout.
– Functional Cookies: Enable enhanced features like remembering user preferences and language settings.
– Analytics Cookies: Collect statistical data about Website usage, improve design and content, and analyze visitor interaction to improve performance.
– Performance Cookies: Monitor page loading, error rates, and responsiveness to optimize Website operations.

Some cookies are set by third-party vendors who assist us in providing functionalities and services.

9. Cookie Management and User Choices

In compliance with GDPR and CCPA:

– Upon your first visit to strikehearth.com, you are presented with a cookie consent banner allowing you to accept or manage cookie preferences.
– You may adjust your preferences at any time via our cookie settings panel or by modifying your browser settings.
– Under CCPA, California residents may opt out of the sale or sharing of their personal data associated with cookies by using the “Do Not Sell or Share My Personal Information” link available on the Website.

Please note that opting out of certain cookies may limit functionality or adversely affect your experience.

10. Children’s Privacy

Our Website and services are not directed at children under the age of 13. We do not knowingly collect or solicit personal data from children. If we become aware that we have inadvertently collected personal data from a child under 13, we will take immediate steps to delete such information from our records. Parents or guardians who believe their child has provided information without consent may contact us at [email protected].

11. Policy Modifications

We may update this Privacy Policy from time to time to reflect improvements, legal requirements, or changes in our data practices. When material changes occur, we may inform you through visible notifications on strikehearth.com or via email (when applicable). We encourage you to review this Privacy Policy periodically to remain informed about how we protect your data.

12. Contact Us

If you have questions, concerns, or requests regarding this Privacy Policy, our data practices, or your rights, please contact us directly:

Email: [email protected]

We are committed to working with you to resolve any complaint or concern and to protecting your privacy in compliance with GDPR, CCPA, and other applicable laws.

Strike Hearth LLC maintains its commitment to data protection, transparency, and trust. If you require any further clarification or wish to exercise your privacy rights, please contact us at [email protected].