Privacy Policy
Introduction
Welcome to http://surprise.pobb.net! We are committed to protecting your privacy and ensuring that your personal data is handled with the utmost care and security. This Privacy Policy outlines our practices regarding the collection, usage, and protection of information from our users, in adherence to various international privacy laws, including but not limited to:
- Canada's Personal Information Protection and Electronic Documents Act (PIPEDA)
- Quebec Law 25 on the protection of personal data
- General Data Protection Regulation (GDPR) of the European Union (EU)
- Lei Geral de Proteção de Dados (LGPD) in Brazil
- California Consumer Privacy Act (CCPA/CPRA) and Colorado Privacy Act (CPA) in the United States
- Utah Consumer Sales and Service Act (UCPA), Connecticut Personal Data Protection Act (CTDPA), Virginia Consumer Data Protection Act (VCDPA), and South Africa's Protection of Personal Information Act (POPIA).
Scope
This policy applies to all aspects of our online presence, including but not limited to, our website, mobile applications, services, and products offered under the Surprise brand. However, please note that it does not cover third-party platforms or services accessed through links on our site, as these entities have their own privacy policies governing user data.
Processing Activities
This policy outlines the ways in which we interact with users and process personal data:
- Authorized User Activities: When you use our applications and services as an authorized user, we may collect and process your information to facilitate your access and personalize your experience.
- Website Visits: Visiting our websites linked to this Privacy Policy implies acceptance of our data practices, and we may track your interactions for analytical purposes.
- Communication: We may communicate with users via newsletters, emails, telephone calls, or text messages (SMS), and these communications are subject to this Privacy Policy.
Personal Data Collection
We collect a range of personal data to enhance our services and personalize user experiences:
- Account Information: This includes usernames, passwords, account settings, and profile details.
- Payment Information: Credit card details, billing addresses, and payment history are securely stored for transaction processing.
- Financial Information: We may collect banking information for direct payments or financial services we offer.
- Purchase Information: Details about products and services purchased from us, including quantities and purchase dates.
- Mobile Device Identifiers: Unique device identifiers and mobile app usage data to provide personalized content and analytics.
- Location Data: Geographic location information provided by users' devices for localized services and marketing.
- Feedback and Reviews: User comments, reviews, and feedback are valuable for service improvements.
- Social Media Information: When you interact with us on social media platforms, we may collect relevant data to enhance our social media engagement.
- Product Information: Details about products viewed, added to carts, or purchased, including preferences and customization options.
Data Collection Methods
We obtain personal data through various means:
- User input forms and profiles
- Automated technologies like cookies, web beacons, and server logs
- Third-party sources who provide data subject to their privacy policies
Cookies
Cookies are small text files placed on your device by our website or third-party services. They serve multiple purposes, including:
- Strictly Necessary: Essential for navigation and using our services.
- Preference: Remembering user preferences for enhanced functionality.
- Analytics: Tracking site usage to improve performance and user experience.
Users can manage non-essential cookies through our Cookie Manager, allowing them to control their privacy settings.
Data Retention and Deletion
We retain personal data for the duration required by law or for legitimate business purposes. Once this period expires, we delete or anonymize the data to protect your privacy. Our retention periods vary depending on the type of data and legal requirements.
Security Measures
Surprise implements robust security measures to safeguard personal data:
- Encryption: We use encryption for data at rest and in transit to prevent unauthorized access.
- Secure Third-Party Processing: Engaging secure third-party service providers to process data on our behalf, ensuring compliance with privacy regulations.
Children's Privacy
We do not intentionally collect personal data from children under the age of 18. If you believe we have collected such information, please contact us so that we can take appropriate action.
Your Rights (depending on your location)
Users in various jurisdictions have specific rights regarding their personal data:
- Access: The right to access and request copies of your personal data held by us.
- Rectification: Correcting inaccurate or incomplete personal data.
- Erasure/Right to be Forgotten: Requesting the deletion of your data, except where required by law.
- Restriction: Limiting the use of your data in certain circumstances.
- Portability: Receiving your personal data in a structured, commonly used format, and transferring it to another controller.
- Objection: Objecting to the processing of your data for specific purposes.
- Non-Discrimination: The right to be free from discrimination when exercising any of the above rights.
- Apples/Complaints: Filing appeals or complaints with supervisory authorities and seeking legal remedies.
To exercise these rights, please contact our Privacy Team at your earliest convenience.
Changes to Policy
We reserve the right to update this Privacy Policy at any time. Any modifications will be effective immediately upon publication on our website. We encourage users to review this policy periodically for changes.
Contact Information
For any questions, concerns, or requests regarding privacy and data protection, please contact us:
- Email: [email protected]
- Postal Address: [Surprise Privacy Team's Mailing Address]
We value your trust in our handling of personal data, and we are committed to maintaining transparency and security throughout our operations.