Privacy Policy
At gordonlorenz.com, we are deeply committed to safeguarding your personal data and respecting your privacy rights. This Privacy Policy is designed to inform you about how we collect, use, disclose, and protect the personal data you provide to us, in full compliance with global privacy regulations, including the General Data Protection Regulation (GDPR) and the California Consumer Privacy Act (CCPA).
1. Commitment to Privacy and Data Protection
We prioritize your privacy and actively work to ensure that all personal information you share with us is treated respectfully, confidentially, and securely. Whether browsing our website, purchasing our products, or interacting with our services, your personal data rights and online safety are central to our practices.
2. Scope of Policy and Data Controller Role
This Privacy Policy applies to all users and visitors of gordonlorenz.com and describes how we process personal data collected through our website or via direct communication, such as email or support requests.
For purposes of applicable data protection law, Gordon Lorenz acts as the “data controller,” determining the purposes and means of processing your personal data. Any inquiries regarding this policy or your data rights should be directed to [email protected].
3. Categories of Data Processed
We may collect and process the following categories of personal data related to our interactions with you:
a. Usage Data
Includes data about your interactions with gordonlorenz.com, such as IP address, browser type, operating system, referring URLs, pages visited, session length, and site navigation paths.
b. Account Data
Includes information you provide when creating an account or placing an order, such as full name, billing/shipping address, email address, telephone number.
c. Profile Data
Encompasses your preferences, product interests, browsing behavior, and purchase history.
d. Communication Data
Includes records of your communications with us, including emails, support inquiries, or messages via contact forms.
e. Technical Data
Includes device information, system configuration, browser settings, language preferences, and diagnostic data related to performance or bugs.
f. Transaction Data
Comprises payment details (excluding full credit/debit card numbers, which are processed securely via our third-party payment processors), order details, delivery addresses, and invoice records.
g. Preference Data
Includes marketing preferences, communication consents, news subscriptions, and product or content interests.
4. Legal Bases for Processing
We process your personal data only when legally permissible under the following GDPR-compliant bases:
– Consent: Where you have given explicit permission (e.g., newsletter subscription).
– Contract: Where processing is necessary to perform a contract with you (e.g., purchase of products).
– Legal Obligation: Where required to comply with legal or regulatory obligations.
– Legitimate Interests: Where we have a legitimate business interest that is not overridden by your privacy rights (e.g., improving website performance, analytics, fraud prevention).
Under the CCPA, we do not sell your personal information, and we uphold your right to opt out of any such practices.
5. Your Rights
Subject to applicable laws, you have the right to:
– Access: Request a copy of personal data we hold about you.
– Rectification: Request correction of inaccurate or incomplete data.
– Erasure: Request the deletion of your data (“right to be forgotten”).
– Restriction: Request to limit how we use your personal information.
– Portability: Request to receive your personal data in a structured, machine-readable format.
– Objection: Object to processing based on legitimate interest or direct marketing.
– Withdraw Consent: Withdraw any previously given consent at any time.
To exercise any of the above rights, please contact us at [email protected].
6. Security Measures
Gordon Lorenz implements rigorous technical and organizational safeguards to protect your personal data from unauthorized access, loss, misuse, or alteration. These include:
– Data encryption during transmission and storage.
– Access controls and authentication protocols.
– Firewall and intrusion detection systems.
– Regular staff training on data security and privacy.
– Scheduled data backups and recovery protocols.
7. International Transfers
Where necessary, your personal data may be processed in countries outside your jurisdiction, including countries that may not provide levels of data protection equivalent to those in your region. In such cases, we ensure appropriate safeguards, such as:
– The use of EU-approved Standard Contractual Clauses (SCCs).
– Verification of adequate data protection measures by third-party processors.
– Compliance with regulatory frameworks such as GDPR and CCPA.
8. Data Retention
We retain personal data only as long as necessary for the purposes for which it was collected, unless longer retention is required by law. Standard retention periods include:
– Account and transaction data: Retained for 7 years for tax and contractual purposes.
– Communication and support records: Retained for 3 years following the last interaction.
– Marketing and preference data: Retained until consent withdrawal or 2 years after inactivity.
– Technical and usage data: Retained for up to 24 months for analytics and performance improvement.
9. Cookie Policy
Gordonlorenz.com uses cookies and similar technologies to provide essential site functionality and improve user experience. These cookies may include:
– Essential Cookies: Necessary for website functionality (e.g., login, session security).
– Functional Cookies: Enable personalization and remember your preferences.
– Analytical Cookies: Help us understand how users engage with our content (e.g., Google Analytics).
– Performance Cookies: Improve website speed and responsiveness.
10. Cookie Management and Compliance with GDPR & CCPA
On your first visit and periodically thereafter, you will be prompted with a cookie consent banner allowing you to accept, reject, or customize cookie settings.
You may also manage or disable cookies through your browser settings. In compliance with GDPR and CCPA, we only deploy non-essential cookies with your informed consent and honor all Do Not Sell My Personal Information and Do Not Track (DNT) requests where applicable.
For detailed information, please refer to our Cookie Settings or contact us directly.
11. Special Protections for Children Under 13
This site is not intended for or directed toward children under the age of 13. We do not knowingly collect or process personal data from minors without verified parental consent. If we become aware that a child under 13 has submitted personal data, we will take all necessary steps to delete such information from our records.
12. Policy Updates & User Notifications
We reserve the right to amend this Privacy Policy from time to time as required by applicable laws or internal business processes. Material changes will be communicated through prominent notices on gordonlorenz.com or via direct communication using the contact information you have provided.
Your continued use of the website after policy adjustments constitutes acceptance of those changes.
13. Contact Information
If you have any questions about this Privacy Policy, the handling of your personal data, or would like to exercise any privacy rights, please contact:
Gordon Lorenz
Email: [email protected]
We are committed to maintaining the highest standards of privacy and data protection, and we welcome your feedback or concerns regarding the handling of your personal information.