Privacy Policy
Georgia Glassworks (“we,” “our,” or “us”) is committed to respecting and protecting your privacy. This Privacy Policy outlines how georgiaglassworks.com collects, uses, retains, discloses, and protects your personal data. We value transparency and take our data protection responsibilities seriously, in compliance with the General Data Protection Regulation (GDPR), the California Consumer Privacy Act (CCPA), and all applicable privacy laws.
1. Introduction
At Georgia Glassworks, your privacy is paramount. Whether you are browsing our website or interacting with us as a customer, we are dedicated to safeguarding personal information and providing clarity on how that data is utilized. This Privacy Policy exists to inform you of your rights, the types of data we collect, our reasoning for processing it, and how we ensure its security.
2. Scope of This Policy and Data Controller Role
This Privacy Policy applies to all personal data collected via our website, georgiaglassworks.com, and affiliated services. Georgia Glassworks acts as the Data Controller for all personal data collected through the website. As the Data Controller, we determine the purposes and means of processing your data in accordance with applicable data protection laws.
3. Categories of Personal Data We Process
We collect and process the following categories of personal information:
– Usage Data: Includes details about your browser type, IP address, time zone settings, pages visited, session durations, referring sites, and other diagnostic data collected when you interact with georgiaglassworks.com.
– Account Data: Includes your name, billing and shipping addresses, email address, and phone number. This information is collected when you create an account or place an order.
– Profile Data: Includes your account preferences, purchase history, saved items, reviews, and behavior patterns across our website.
– Communication Data: Includes content of your customer service inquiries, emails, contact forms, support requests, and interactions with our team.
– Technical Data: Includes device type, operating system, browser plug-in types and versions, screen resolution, and other configuration data sent by your device.
– Transaction Data: Includes payment method details, purchase records, delivery data, and payment confirmations. Payments are processed via trusted third-party providers, and we do not store full credit card numbers.
– Preference Data: Includes your marketing communication preferences, opted-in newsletters, interested product categories, and consent settings.
4. Legal Bases for Data Processing
We collect and use personal data only where we have valid legal grounds to do so. These are:
– Consent: In cases where you have explicitly provided consent, such as subscribing to our newsletter or accepting non-essential cookies.
– Contractual Obligation: To fulfill a contract with you, such as processing your purchases or managing your account.
– Legitimate Interests: For necessary operational purposes, such as improving our website performance or responding to inquiries, so long as those interests are not overridden by your rights.
– Legal Obligation: To comply with legal or regulatory requirements, such as tax or accounting regulations.
5. Your Data Protection Rights
In accordance with applicable laws including GDPR and CCPA, you have the following rights relating to your personal data:
– Right to Access: You may request access to the personal data we hold about you.
– Right to Rectification: You may correct inaccurate or incomplete personal data.
– Right to Erasure (“Right to be Forgotten”): You may request deletion of your data when it is no longer necessary for the purpose for which it was collected.
– Right to Restrict Processing: You may request that we limit the way we use your personal data.
– Right to Data Portability: You may request to receive your data in a structured, commonly used, machine-readable format.
– Right to Object: You may object to processing where we rely on legitimate interest or direct marketing.
To exercise any of these rights, please contact us at [email protected].
6. Security of Your Personal Data
We implement industry-standard security measures designed to protect personal data:
– Encryption protocols to safeguard data transmission.
– Role-based access controls for internal data handling.
– Regular backups and secure storage solutions.
– Ongoing employee training in data protection and cybersecurity protocols.
Although no online method of transmission or storage is completely secure, we take appropriate steps to minimize risks.
7. International Data Transfers
Your data may be transferred and stored outside your home country, including to locations that may have different data protection laws. Where personal data is transferred across borders, we ensure adequate safeguards are in place using standard contractual clauses approved by the European Commission or similar lawful mechanisms.
8. Data Retention
We retain your personal data for as long as necessary to fulfill the purposes for which it was collected, including satisfying legal, accounting, or reporting requirements. Retention periods include:
– Account Data: Retained for the duration of your account and up to 7 years thereafter, subject to legal obligations.
– Transaction Data: Retained for up to 10 years for accounting and tax requirements.
– Communication Data: Retained for up to 3 years following resolution of the inquiry.
– Preference and Marketing Data: Retained until you withdraw consent or request deletion.
– Technical and Usage Data: Anonymized and retained for analytics purposes, unless otherwise required.
9. Cookie Policy
Georgiaglassworks.com uses cookies to enhance your experience. These include:
– Essential Cookies: Necessary for site functionality (e.g., shopping cart, account login).
– Functional Cookies: Remember your selections and enhance usability.
– Analytics Cookies: Track website usage, helping us improve content and structure.
– Performance Cookies: Monitor site performance and detect errors.
Cookies are only deployed with your consent, where required, except for strictly necessary cookies.
10. Cookie Management & Compliance
You can manage your cookie preferences using the cookie banner present on georgiaglassworks.com during your first visit and through your browser settings at any time. We automatically block non-essential cookies until consent is given, as required under GDPR and CCPA. You may also opt-out of certain types of data collection under CCPA by clicking “Do Not Sell My Personal Information,” where applicable.
11. Children’s Privacy
We do not knowingly collect or process personal data of children under the age of 13. If we become aware that such data has been inadvertently collected, it will be deleted without delay. Parents or legal guardians who believe their child has submitted personal data may contact us at [email protected].
12. Policy Updates
We may modify this Privacy Policy from time to time to reflect changes in legal requirements or our data practices. Notices of significant updates will be posted prominently on georgiaglassworks.com or communicated directly when required. Continued use of the website after changes constitutes your acceptance of the revised terms.
13. Contact Us
If you have any questions about this Privacy Policy, your rights under data protection laws, or how your information is handled, please contact our team at:
Email: [email protected]
We are committed to ensuring full compliance with all applicable data privacy regulations and welcome any questions or concerns related to your personal data.