Privacy Policy
1. Introduction
At flandersbattlefields.com, we are committed to safeguarding your personal information and respecting your privacy rights. We recognize the importance of data protection and are dedicated to ensuring that all personal data entrusted to us is handled responsibly, transparently, and in accordance with applicable data protection laws, including the General Data Protection Regulation (GDPR) and the California Consumer Privacy Act (CCPA).
This Privacy Policy describes how we collect, use, disclose, and protect your personal data when you interact with our website, products, and services.
2. Scope of the Policy and Data Controller Role
This Privacy Policy applies to all visitors, users, and others who access flandersbattlefields.com (“Site”). For the purposes of the GDPR, flandersbattlefields.com is the data controller responsible for the processing of your personal data.
If you have any questions or concerns about this policy, or about how your data is handled, you may contact us at [email protected].
3. Categories of Data Processed
We may collect and process the following categories of personal data:
– Usage Data: Information about your interactions with our Website, including browser type, IP address, referring URL, access times, and pages viewed.
– Account Data: Information used to create or manage an account such as name, postal address, email address, and phone number.
– Profile Data: Information including your preferences, feedback, purchase history, and user behavior on the Site.
– Communication Data: Records of your communications with us, including support queries, contact form submissions, and email correspondence.
– Technical Data: Data about the device you use to access our services, such as hardware model, operating system, browser software, and system configuration.
– Transaction Data: Details of products purchased, billing and shipping information, and payment transaction identifiers (note: we do not store full payment card numbers).
– Preference Data: Information regarding your marketing preferences, including opt-ins/outs and expressed interests in certain products or events.
4. Legal Bases for Processing
We process your personal data only where permitted by applicable law, relying on the following legal bases:
– Contractual Necessity: Processing necessary to fulfil our obligations in connection with a contract, such as delivering products you purchase.
– Legitimate Interests: Processing based on our legitimate interests, such as improving website functionality or preventing fraud, provided that such interests are not overridden by your rights and interests.
– Consent: We seek your consent before processing certain types of data, particularly with respect to cookies and marketing communications.
– Legal Obligation: Processing where required to comply with legal responsibilities or lawful requests from public authorities.
5. Your Rights
Under GDPR and, where applicable, the CCPA, you have the following rights concerning your personal data:
– Right of Access: Obtain confirmation about whether we process your data and receive a copy of that data.
– Right to Rectification: Request correction of inaccurate or incomplete data.
– Right to Erasure: Request deletion of your personal data where permitted by law.
– Right to Restriction: Restrict processing under certain conditions (e.g., if you contest the accuracy of data).
– Right to Data Portability: Receive your data in a structured, commonly used format and transmit it to another controller where feasible.
– Right to Object: Object to the processing of personal data based on legitimate interest or direct marketing.
To exercise any of these rights, please contact us at [email protected]. We will respond within the timeframes prescribed by law and may request additional identification to verify your request.
6. Security Measures
We implement a variety of technical and organizational measures to protect your personal data:
– Encryption: We secure data in transit and at rest using industry-standard encryption protocols.
– Access Control: Only authorized personnel have access to your personal data, and they are trained in data handling best practices.
– Secure Backups: We perform regular backups and store data in secure facilities.
– Staff Training: Our team receives privacy and security training to ensure proper data protection procedures.
While we take reasonable steps to protect your information, no security system is impenetrable. Users are advised to maintain the confidentiality of their own passwords and account credentials.
7. International Transfers
Your personal data may be transferred and processed outside the European Economic Area (EEA) or your country of residence. Where we do so, we ensure that appropriate safeguards are in place, such as Standard Contractual Clauses approved by the European Commission or compliance with regional data protection adequacy standards.
8. Data Retention
We retain your personal data only for as long as necessary to fulfill the purposes outlined in this policy, including:
– Usage Data: Retained for up to 24 months for analytics and security purposes.
– Account Data: Retained while your account remains active and deleted within 12 months after closure.
– Transaction Data: Retained for 7 years for financial and tax compliance.
– Communication Data: Retained for up to 3 years to manage support queries and service quality.
– Consent and Preference Data: Retained until you withdraw consent or modify preferences.
Upon expiration of retention periods, data is securely deleted or rendered anonymous unless further retention is required by legal obligations.
9. Cookie Policy
We use cookies and similar technologies to enhance your experience on flandersbattlefields.com. Types of cookies used include:
– Essential Cookies: These are required for website functionality and cannot be disabled.
– Functional Cookies: These enable enhanced features like remembering user preferences.
– Analytics Cookies: These help us understand how users interact with our Site so we can improve performance.
– Performance Cookies: These assess the technical performance of our website and identify areas for improvement.
10. Cookie Management and User Consent
In compliance with GDPR and CCPA, we seek your consent before placing non-essential cookies on your device. On your first visit, a cookie banner allows you to accept or reject certain categories of cookies. You may also manage cookie settings at any time through your browser preferences or through cookie controls provided on the Site.
You may also opt out of certain tracking via tools such as the Network Advertising Initiative opt-out page (https://optout.networkadvertising.org) or via Do Not Track browser settings, where supported.
11. Children’s Privacy
Flandersbattlefields.com does not knowingly collect personal data from individuals under the age of 13. If we become aware that we have inadvertently collected information from a child under 13, we will take prompt steps to delete such data. Parents or legal guardians who believe their child has provided us with personal information are encouraged to contact us at [email protected].
12. Updates to this Policy
We may update this Privacy Policy to reflect changes in legal, regulatory, or operational requirements. If we make material changes, we will provide notice by prominent means, such as a notice on our website or direct communication, where appropriate.
Users are encouraged to periodically review this page to stay informed about how we protect your data and your associated rights.
13. Contact
If you have any questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact:
Email: [email protected]
We are committed to complying with data protection laws and ensuring that your personal data is respected and secure. For any privacy concerns, please do not hesitate to reach out to us through the above contact information.