Privacy Policy
SurfSizeNow (“we,” “us,” or “our”) is fully committed to safeguarding the privacy and personal data of all users who engage with our website located at surfsizenow.com. We adhere to a strong privacy-first philosophy and are dedicated to ensuring that your personal information is collected, used, stored, and shared in compliance with applicable privacy laws, including the General Data Protection Regulation (GDPR) and the California Consumer Privacy Act (CCPA).
1. Introduction
At SurfSizeNow, your privacy is of paramount importance. This Privacy Policy outlines how we handle the collection, use, disclosure, and protection of your personal data when you use our website or interact with us. We are committed to upholding the highest standards of data protection, transparency, and accountability in all our data processing activities.
2. Scope of the Policy and Data Controller Role
This Privacy Policy applies to all personal data collected through surfsizenow.com and any related digital properties or services controlled by SurfSizeNow. SurfSizeNow acts as the “Data Controller” for the purposes of the GDPR, meaning we determine the purposes and means by which your personal data is processed. For any inquiries related to this policy or your personal information, contact us at: [email protected].
3. Categories of Data We Process
We collect and process the following categories of personal data:
a) Usage Data
Includes information automatically collected when you interact with surfsizenow.com, such as IP address, browser type, time zone settings, pages visited, login timestamps, and session durations.
b) Account Data
Includes identifying details you provide when creating an account such as full name, mailing address, email address, phone number, and password hash.
c) Profile Data
Encompasses your preferences, feedback, purchase history, browsing behavior, and interests in products or services.
d) Communication Data
Includes all correspondence with you, including support requests, contact form submissions, survey responses, and customer service chat logs.
e) Technical Data
Relates to the device and system you use to access surfsizenow.com, such as operating system, hardware models, IP addresses, browser plug-ins, mobile network data, and diagnostic logs.
f) Transaction Data
Includes purchase information, delivery and shipping details, billing addresses, and limited (non-sensitive) payment details processed through secure third-party providers.
g) Preference Data
Includes your choices in receiving marketing materials, product alerts, and personalized content. We also collect information about the types of services and products you are interested in.
4. Legal Bases for Processing (GDPR)
We only process your personal data when we have a valid legal basis to do so. These bases may include:
– Performance of a contract: Processing necessary to fulfill transactions or provide the services you request.
– Consent: Where you have given clear and informed consent to collect and use your data for specific purposes.
– Legitimate interests: Where processing is necessary for our legitimate business interests, provided those interests are not overridden by your rights and freedoms.
– Legal obligation: Compliance with applicable laws or legal claims.
5. Your Rights Under GDPR and CCPA
If you are located in the European Economic Area (EEA) or California, you may have the following rights:
– Right to Access: You may request access to your personal data we hold.
– Right to Rectification: You have the right to correct inaccurate or incomplete data.
– Right to Erasure: Also known as the “right to be forgotten,” you may request that we delete your personal data.
– Right to Restrict Processing: You may request limits on how we use your personal data.
– Right to Data Portability: You can obtain and reuse your personal data across different services.
– Right to Object: You may object to the processing of your data where lawful interests are relied upon.
– Right to Opt-Out (CCPA): As a California resident, you have the right to opt-out of the sale of personal data (we do not sell your personal data).
– Non-Discrimination: SurfSizeNow will not discriminate against you for exercising your privacy rights.
To exercise any of these rights, contact us at: [email protected].
6. Security Measures
We have implemented appropriate physical, technical, and organizational safeguards to protect your personal data against unauthorized access, loss, misuse, alteration, or destruction. These measures include:
– End-to-end data encryption using SSL/TLS
– Role-based access controls and multifactor authentication
– Regular system monitoring and vulnerability assessments
– Secure, off-site encrypted backups
– Staff training and confidentiality protocols
While we strive to protect your data, no method of transmission or storage is fully secure. Please maintain the confidentiality of your account credentials.
7. International Transfers
Where necessary, your personal data may be transferred outside of your jurisdiction. For users in the European Economic Area, transfers outside the EEA are made in compliance with the GDPR and are subject to legally recognized safeguards including Standard Contractual Clauses (SCCs) approved by the European Commission. We ensure such transfers afford an adequate level of data protection consistent with EU and international standards.
8. Data Retention
We retain your personal data for only as long as is necessary for the purposes for which it was collected, including to satisfy legal, contractual, and operational obligations.
– Usage and Technical Data: Retained for up to 12 months for analytical and diagnostics purposes.
– Account and Profile Data: Kept for as long as your account remains active.
– Transaction and Communication Data: Retained for up to 7 years to meet legal and operational requirements.
– Preference and Marketing Data: Retained until you withdraw consent or request erasure.
Data no longer required will be securely deleted or anonymized.
9. Cookie Policy
Surfsizenow.com uses cookies and other tracking technologies to enhance user experience, customize content, provide social media features, and analyze website traffic. We use the following types of cookies:
– Essential Cookies: Necessary for core functionalities like user login, cart management, and transaction processing.
– Functional Cookies: Help remember your preferences and enhance website performance.
– Performance and Analytics Cookies: Collect aggregated data to help us understand site usage and improve performance.
– Marketing Cookies: Used to deliver relevant advertisements and measure campaign effectiveness.
10. Cookie Management and GDPR/CCPA Compliance
Upon your first visit to surfsizenow.com, you will be presented with a customizable cookie consent banner. You may accept or manage cookie settings at any time through our Cookie Preferences center. Under the GDPR and CCPA, we honor do-not-track settings and provide mechanisms to withdraw consent or restrict use of cookies. Disabling certain cookies may affect website functionality.
11. Children’s Privacy
We do not knowingly collect or solicit personal data from children under the age of 13. If you are a parent or legal guardian and believe your child has provided us with personal information, please contact us at [email protected]. Upon valid notice, we will delete such information from our systems promptly.
12. Policy Updates and User Notifications
We reserve the right to amend or update this Privacy Policy as necessary to reflect changes in regulatory requirements, our data practices, or the functionality of surfsizenow.com. Where required by law, we will notify you of material changes via your registered email address or a prominent notice on our homepage.
13. Contact Us
If you have any questions about this Privacy Policy, your personal data, or to exercise your rights under applicable privacy laws, please contact our Data Protection team at:
Email: [email protected]
We aim to respond to all inquiries in a timely and respectful manner.
At SurfSizeNow, we are committed to full compliance with global privacy laws and are here to ensure that your data and your rights are respected.