Privacy Policy - Smart-specs

1. Introduction

At Smart-Specs, accessible via smart-specs.com, your privacy is of paramount importance to us. We are firmly committed to protecting and respecting your personal data, and we take this responsibility seriously. This Privacy Policy outlines how we collect, use, store, and share your personal information. It also details your rights as a user under applicable data privacy laws, including but not limited to the General Data Protection Regulation (GDPR) and the California Consumer Privacy Act (CCPA).

2. Scope of Policy and Data Controller Role

This Privacy Policy applies to all users who visit or interact with smart-specs.com and any of its services. Smart-Specs is the “data controller” for the purposes of data protection legislation. This means that we determine the purposes and means of processing your personal data. For any privacy-related queries or concerns, you may contact us at [email protected].

3. Categories of Data Processed

We collect and process a range of data to operate effectively and provide a high-quality user experience:

– Usage Data: Includes information about how you access and interact with our website, such as browser type, IP address, pages visited, session duration, and timestamps.

– Account Data: Involves any information you provide when signing up for an account or making a purchase, such as your full name, physical address, email address, and telephone number.

– Profile Data: Includes information about your preferences, past purchases, account settings, and behavioral patterns displayed on the website.

– Communication Data: Encompasses any data shared when contacting us via support forms, email correspondence, or customer service inquiries, including chat and call logs.

– Technical Data: Involves information about the device you use to access our services, including hardware model, operating system version, browser details, and system configuration data.

– Transaction Data: Encompasses purchase records, payment method information (handled securely by third-party processors), shipping addresses, and delivery history.

– Preference Data: Includes your choices regarding marketing communications, survey responses, product interest selections, and consent records.

4. Legal Bases for Processing

We process your personal data based on legitimate legal grounds under GDPR Article 6 and similar provisions under CCPA:

– Contractual Necessity: When data is required to provide products or services you’ve ordered.

– Legitimate Interests: To improve our offerings, protect against fraud, and maintain website security, provided such interests are not overridden by your data protection rights.

– Consent: For marketing communications and specific cookies, where required under applicable law.

– Legal Obligations: Where necessary for compliance with legal duties or governmental requests.

5. Your Rights

In accordance with GDPR and CCPA, you possess the following rights regarding your personal data:

– Right of Access: You may request details of personal information we hold about you.

– Right of Rectification: You can correct any inaccurate or incomplete personal data.

– Right of Erasure: You may request deletion of your data under certain conditions.

– Right to Restrict Processing: You can request limits on how we use your data.

– Right to Data Portability: You can request your data in a structured, machine-readable format, and transfer it to another controller.

To exercise any of your rights, contact us at [email protected].

6. Security Measures

We implement organizational, technical, and administrative measures to safeguard the integrity and confidentiality of your data. These include, but are not limited to:

– End-to-end encryption of data in transit and at rest.
– Role-based access controls and multi-factor authentication.
– Regular security audits and vulnerability assessments.
– Data backup and disaster recovery mechanisms.
– Ongoing privacy and data protection training for employees.

7. International Transfers

Where your personal data is transferred to jurisdictions outside the European Economic Area (EEA) or United States, we ensure adequate protection through:

– Standard Contractual Clauses approved by the European Commission.
– Certifications and frameworks permitted by applicable law.
– Local regulatory compliance where required.

8. Data Retention

We retain personal data only for as long as necessary for the purposes described above:

– Account & Transaction Data: Retained up to 7 years for tax and legal compliance.
– Communication Data: Retained no longer than 24 months from last contact.
– Technical & Usage Data: Anonymized or deleted within 12 months for analysis purposes.
– Marketing & Preference Data: Retained until consent is withdrawn or 24 months, whichever is shorter.

After applicable retention periods, we securely delete or anonymize your personal data.

9. Cookie Policy

We utilize cookies to enhance user experience and gather relevant analytics. The categories of cookies used on smart-specs.com include:

– Essential Cookies: Required for website functionality and secure authentication.
– Functional Cookies: Support preferences such as language, region, and accessibility features.
– Analytics Cookies: Help us understand how visitors interact with the website to improve performance.
– Performance Cookies: Monitor loading times and server responsiveness for better user experience.

10. Cookie Management and GDPR/CCPA Compliance

You can manage or revoke your consent for cookies at any time using the cookie settings found on the footer of smart-specs.com. Most browsers also allow you to control cookie behavior through settings or tools that block all or specific kinds of cookies.

For visitors from California or the European Union, you are presented with a cookie consent mechanism in accordance with CCPA and GDPR requirements at your first visit and periodically thereafter.

11. Special Protections for Children Under 13

Smart-Specs does not knowingly collect personal data from children under the age of 13. If we become aware that a child has provided us with personal data without verifiable parental consent, that data will be deleted promptly. If you believe your child has submitted such data, contact us at [email protected].

12. Policy Updates & User Notifications

We may periodically update this Privacy Policy to reflect changes in legal requirements, technology, or our business practices. Any changes will be posted prominently on smart-specs.com, and where required, we may notify you directly via email or through other appropriate channels.

13. Contact Information

For any concerns, questions, or requests regarding your personal data or this policy, please contact us:

Email: [email protected]

We are committed to full compliance with applicable privacy laws including the GDPR and CCPA. If you have any concerns regarding our data handling practices, please reach out and we will be pleased to assist.