Privacy Policy
Hearth Dream Spaces (“we,” “us,” or “our”), accessible via hearthdreamspaces.com (the “Website”), is committed to safeguarding the privacy and personal data of our users. We respect your privacy and are committed to protecting your personal information in accordance with applicable data protection laws, including the General Data Protection Regulation (GDPR) and the California Consumer Privacy Act (CCPA). This Privacy Policy outlines the types of data we collect, how we use it, the legal bases for processing, and your rights as a user.
1. Commitment to Privacy and Data Protection
Your trust is important to us. This Privacy Policy is designed to transparently communicate how we collect, store, use, and safeguard your personal data when you access or interact with hearthdreamspaces.com. We take our responsibility for the proper management of your personal data seriously and adhere to high standards of data protection and confidentiality.
2. Scope of Policy and Data Controller Role
This Privacy Policy applies to all users of hearthdreamspaces.com, including visitors, account holders, and customers. We act as the data controller for personal information collected through this Website, meaning that we determine the purposes and means of processing your personal data. Should you have any queries regarding this Privacy Policy or your data, you may contact us at [email protected].
3. Categories of Personal Data We Collect
We collect and process various categories of personal data from users, including but not limited to the following:
a. Usage Data
Information about how you interact with hearthdreamspaces.com, such as your IP address, browser type, browser version, pages visited, time spent on pages, and referring URLs.
b. Account Data
Data provided during account registration or communication with us, including name, email address, postal address, telephone number, and account credentials.
c. Profile Data
Information such as preferences, purchasing behavior, interests, saved items, wishlist entries, and personalization settings.
d. Communication Data
Records of communication between you and us, including support requests, inquiries sent through contact forms, live chat transcripts, or interactions via email.
e. Technical Data
Information transmitted by your device in the course of using our Website, including your device model, operating system, screen resolution, language settings, and other system configuration details.
f. Transaction Data
Details of transactions conducted through hearthdreamspaces.com, including product or service purchases, payment information (processed securely via third-party providers), billing and shipping addresses.
g. Preference Data
Marketing consents, subscription preferences, product interest indicators, feedback, and responses to surveys.
4. Legal Bases for Processing
We process your personal data on the following lawful bases as defined under the GDPR:
– Performance of a Contract: To fulfill purchases, deliver services, or manage user accounts.
– Consent: Where you have explicitly given us permission, such as opting into our newsletter or accepting marketing cookies.
– Legitimate Interests: To improve our services, prevent fraud, secure our systems, and conduct analytics, where such interests are not overridden by your rights.
– Legal Obligations: In order to comply with applicable laws or enforceable governmental or regulatory requests.
5. Your Data Protection Rights
Subject to local law, you may have the following rights:
– Right to Access – You can request access to the personal data we hold about you.
– Right to Rectification – You have the right to request correction of inaccurate data.
– Right to Erasure – You can request deletion of your data where there is no legal basis for its ongoing processing.
– Right to Restrict Processing – You may request to limit how we process your personal data.
– Right to Data Portability – You can request your data in a machine-readable format and transfer it to another entity.
– Right to Withdraw Consent – Where processing relies on consent, you may withdraw it at any time.
To exercise any of the above rights, please contact us at [email protected]. We may require verification of identity before fulfilling your request.
6. Security Measures
We take substantial technical and organizational measures to protect your personal data, including:
– Encryption of data in transit and at rest where applicable
– Access control protocols to prevent unauthorized access
– Secure server environments with regular system updates
– Automated and manual backup solutions
– Staff training to handle data responsibly and maintain awareness of cybersecurity threats
Despite these efforts, no transmission or storage of data can be guaranteed to be 100% secure.
7. International Data Transfers
We may transfer personal data outside of your jurisdiction, including to countries that may not provide the same level of protection. Where such transfers occur, we implement appropriate safeguards, including the use of Standard Contractual Clauses (SCCs) approved by the European Commission or reliance on similar lawful mechanisms to ensure data protection in accordance with GDPR.
8. Data Retention
We retain your personal data only as long as necessary for the purposes for which it was collected, including for satisfying legal, accounting, or reporting obligations. Generally:
– Account Data: Retained for as long as your account is active, and up to 6 years thereafter for record-keeping purposes
– Transaction Data: Retained for 7 years to meet financial compliance obligations
– Communication and Support Data: Retained for 3 years after the last communication
– Cookie Data: Retained per cookie type; see Section 9 for details
Upon expiry of the applicable retention periods, we securely delete or anonymize your data.
9. Cookie Policy
Hearthdreamspaces.com uses cookies and similar tracking technologies to enable essential operations and personalize your experience. These include:
a. Essential Cookies
Necessary for the functioning of the Website, such as authentication and security features.
b. Functional Cookies
Enhance user experience by remembering user preferences and settings.
c. Analytics Cookies
Help us analyze your use of the Website (e.g., Google Analytics), allowing us to improve functionality and content.
d. Performance Cookies
Track performance metrics such as page load times, helping us optimize system performance.
10. Cookie Management & User Consent
In compliance with GDPR and CCPA, you have the right to manage your cookie preferences. When you visit hearthdreamspaces.com for the first time, you are presented with a cookie banner allowing you to accept or refuse non-essential cookies. At any time, you may adjust your preferences through our Cookie Settings interface, accessible via the Website footer.
CCPA Notice for California Residents: You have the right to request information about the categories and specific pieces of personal data collected, the purpose for collection, and to request deletion of your personal information. We do not sell your personal data or share it with non-affiliated third parties for direct marketing without your explicit consent.
11. Children’s Privacy
We do not knowingly collect or process data from children under the age of 13. If you are a parent or guardian and believe that your child has provided us with personal information, please contact us at [email protected]. If we become aware that we have inadvertently collected such information, we will promptly delete it.
12. Policy Updates and Notifications
We reserve the right to revise this Privacy Policy at any time to reflect changes in our business practices, legal obligations, or technology. Substantive changes will be communicated through email (where appropriate) or prominently via hearthdreamspaces.com. Continued use of the Website following such changes indicates your acceptance of the revised policy.
13. Contact Us
If you have any questions about this Privacy Policy, your data, or wish to exercise one of your rights, please contact us at:
Email: [email protected]
Website: https://hearthdreamspaces.com
We are committed to full compliance with GDPR and CCPA, and welcome your questions and concerns regarding privacy.