Privacy Policy
Last Updated: October 26, 2023
1. Introduction
SplashCraft ("we," "us," or "our") is committed to protecting your privacy. This Privacy Policy describes how we collect, use, disclose, and safeguard your personal information when you visit our website [Insert Website Address Here] (the "Site") or use our services (the "Services"). This policy also outlines your rights regarding your personal information under the General Data Protection Regulation (GDPR) and the California Consumer Privacy Act (CCPA).
2. Information We Collect
We collect the following categories of personal information:
-
Contact Information: This includes your name, email address, phone number, and postal address. We collect this information when you request an estimate, schedule an appointment, contact us through our website or by phone, or subscribe to our newsletter (if applicable).
-
Payment Information: We utilize Stripe to process payments. We do not directly store your credit card details. Stripe's privacy policy governs the handling of your payment information. Please refer to Stripe's privacy policy for more information: Stripe Privacy Policy
-
Website Usage Data: We collect information about your interactions with our Site, including your IP address, browser type, operating system, referring URLs, pages visited, and the dates/times of your visits. We use Google Analytics for this purpose.
-
Communications: We may retain copies of any communications you send to us, including emails, chat logs, and phone call recordings (where permitted by law and with appropriate consent where required).
-
Other Information: Any other information you choose to provide to us.
3. Purposes of Data Collection and Use
​We use your personal information for the following purposes:
-
Scheduling Appointments and Estimates: To schedule appointments for our services and provide you with accurate estimates.
-
Providing and Improving Services: To deliver our services, personalize your experience, and improve the quality of our offerings.
-
Communication: To respond to your inquiries, provide customer support, and send you important updates about our services.
-
Payment Processing: To process payments for our services through Stripe.
-
Marketing and Promotions (with consent where required): To send you promotional emails or newsletters about our services, special offers, or other information we think you may find interesting. You can opt-out of receiving these communications at any time (see "Your Rights" section below).
-
Website Analytics: To analyze website usage trends, track the effectiveness of our marketing campaigns, and improve our Site's functionality.
-
Legal Compliance: To comply with applicable laws, regulations, and legal processes.
-
Security: To protect our Site and Services from fraud, abuse, and unauthorized access.
4. Legal Basis for Processing (GDPR)
-
If you are located in the European Economic Area (EEA), our legal basis for processing your personal information is as follows:
-
Consent: We will obtain your explicit consent before processing your personal information for marketing purposes. You have the right to withdraw your consent at any time.
-
Contractual Necessity: We process your personal information when it is necessary to perform a contract with you (e.g., to provide our services).
-
Legitimate Interests: We may process your personal information based on our legitimate interests, such as improving our services, preventing fraud, and ensuring the security of our Site. We will only process your personal information based on legitimate interests if our interests are not overridden by your rights and freedoms.
-
Legal Obligation: We may process your personal information to comply with a legal obligation.
5. Third-Party Services
-
We use the following third-party services:
-
Stripe: For payment processing. Stripe's privacy policy applies to your payment information. [Insert Stripe Privacy Policy Link Here]
-
Google Analytics: For website analytics. Google Analytics collects data about your use of our Site. You can opt-out of Google Analytics tracking by installing the Google Analytics Opt-out Browser Add-on: [Insert Google Analytics Opt-out Link Here]
-
[Add other third-party services and their privacy policy links here, e.g., email marketing platforms, CRM systems, etc.]
We may also share your personal information with other third-party service providers who assist us with providing our services, such as hosting providers, customer support providers, and marketing agencies. We will only share your personal information with these providers to the extent necessary for them to perform their services for us, and we will require them to protect your personal information in accordance with this Privacy Policy and applicable laws.
6. Data Retention
We will retain your personal information for as long as necessary to fulfill the purposes outlined in this Privacy Policy, unless a longer retention period is required or permitted by law.
-
Contact Information: We will retain your contact information for as long as you are a customer of ours and for a reasonable period thereafter to respond to inquiries or provide customer support.
-
Payment Information: Stripe retains payment information according to their own retention policies.Website Usage Data: We retain website usage data for a period of [Specify Timeframe, e.g., 26 months] for analytical purposes.
-
Communications: We retain copies of communications for [Specify Timeframe, e.g., 7 years] for record-keeping purposes.
7. Your Rights (GDPR and CCPA)
You have the following rights regarding your personal information:
-
Right to Access: You have the right to request access to the personal information we hold about you.
-
Right to Rectification: You have the right to request that we correct any inaccurate or incomplete personal information we hold about you.
-
Right to Erasure (Right to be Forgotten): You have the right to request that we erase your personal information under certain circumstances.
-
Right to Restriction of Processing: You have the right to request that we restrict the processing of your personal information under certain circumstances.
-
Right to Data Portability: You have the right to receive your personal information in a structured, commonly used, and machine-readable format and to transmit it to another controller.
-
Right to Object: You have the right to object to the processing of your personal information under certain circumstances, including for marketing purposes.
-
Right to Withdraw Consent: If we are processing your personal information based on your consent, you have the right to withdraw your consent at any time.
-
Right to Non-Discrimination (CCPA): You have the right not to be discriminated against for exercising your CCPA rights.
How to Exercise Your Rights:
To exercise any of these rights, please contact us using the contact information provided below. We will respond to your request within 30days. We may need to verify your identity before processing your request.
8. Data Security
We take reasonable measures to protect your personal information from unauthorized access, use, or disclosure. These measures include:
-
Using secure servers to store your personal information.
-
Using encryption to protect your personal information during transmission.
-
Implementing access controls to restrict access to your personal information to authorized personnel.
-
Regularly monitoring our systems for security vulnerabilities.
However, no method of transmission over the internet or method of electronic storage is completely secure. Therefore, we cannot guarantee the absolute security of your personal information.
10. Children's Privacy
Our Services are not directed to children under the age of 16. We do not knowingly collect personal information from children under the age of 16. If you are a parent or guardian and believe that your child has provided us with personal information, please contact us immediately. If we become aware that we have collected personal information from a child under the age of 16, we will take steps to delete the information as soon as possible.
11. Changes to this Privacy Policy
We may update this Privacy Policy from time to time. We will post any changes on our Site and update the "Effective Date" at the top of this policy. We encourage you to review this Privacy Policy periodically to stay informed about how we are protecting your personal information. Your continued use of our Site or Services after the posting of changes constitutes your acceptance of the revised Privacy Policy.
12. Contact Information
If you have any questions or concerns about this Privacy Policy or our privacy practices, please contact us at:
SplashCraft -
13. Right to Lodge a Complaint
You have the right to lodge a complaint with a supervisory authority if you believe that we have violated your rights under the GDPR. The supervisory authority in the EEA country where you live, work, or where the alleged infringement occurred is the appropriate authority.
15. "Do Not Track" Disclosure
We do not currently respond to "Do Not Track" signals from web browsers.