Privacy Policy for tonguesucker.com

1. Introduction

At tonguesucker.com, we are firmly committed to respecting your privacy and safeguarding your personal information. We recognize the importance of protecting the personal data entrusted to us and strive to handle it with the highest level of care and diligence, in compliance with applicable data protection and privacy laws, including the General Data Protection Regulation (GDPR), the California Consumer Privacy Act (CCPA), and other relevant legislative frameworks. This Privacy Policy explains how we collect, use, share, and protect your personal data when you visit or interact with tonguesucker.com, and provides information regarding your rights and choices.

2. Scope of Policy and Role of Data Controller

This Privacy Policy applies to all users of tonguesucker.com, including website visitors, registered account holders, and individuals corresponding with us via communication channels linked to our website.

For purposes of applicable data protection laws, tonguesucker.com is the data controller of the personal data we process, unless otherwise stated. As the data controller, we determine the purposes and means by which your personal data is processed and are responsible for ensuring such data is handled in accordance with legal obligations.

3. Categories of Personal Data We Process

We may collect and process the following categories of personal data:

a) Usage Data
Information automatically collected when you use our website, including your browser type and version, IP address, time zone setting, device identifiers, referrer URLs, pages visited, session durations, and navigation paths.

b) Account Data
Information you provide when you create or manage an account on tonguesucker.com, such as your full name, email address, physical address, telephone number, and account login credentials.

c) Profile Data
Details associated with your user profile, including interests, language preferences, product selections, previous purchases, behavioral data, personalization settings, and engagement with promotions.

d) Communication Data
Records of your interactions with us, such as email correspondence, customer support inquiries, live chat logs, and other contact history.

e) Technical Data
Device-specific data collected through your use of tonguesucker.com, such as operating system, app or browser version, connection speed, screen resolution, hardware model, and system configurations.

f) Transaction Data
Data related to payments and transactions, including billing addresses, payment card details, order history, delivery tracking, shipping confirmations, and invoicing information.

g) Preference Data
Information about your consents and preferences, including subscription to newsletters, marketing opt-ins, communication frequencies, and areas of interest as indicated through surveys or site interactions.

4. Legal Bases for Processing Personal Data

Where required under applicable law, we process your personal data under the following legal grounds:

– Consent: When you provide your clear and voluntary permission for specific data handling (e.g., marketing communications).
– Contractual Necessity: To fulfill our contractual obligations to you (e.g., processing orders or managing your user account).
– Legal Obligation: Where processing is necessary to comply with a legal requirement (e.g., tax or accounting regulation).
– Legitimate Interests: For purposes such as website optimization, fraud prevention, service enhancement, and ensuring our services operate securely and effectively, provided such interests are not overridden by your rights.

5. Your Data Protection Rights

You have specific rights under the GDPR, CCPA, and other applicable privacy laws, which you may exercise subject to legal limitations and verification of your identity:

– Right to Access: You may request access to the personal data we hold about you.
– Right to Rectification: You are entitled to request correction of any inaccurate or incomplete personal data.
– Right to Erasure: You may request to have your personal data deleted under certain conditions (“right to be forgotten”).
– Right to Restriction: You may request that we restrict our processing of your personal data in certain circumstances.
– Right to Data Portability: You may request to receive your personal data in a structured, commonly-used, and machine-readable format and request that we transfer it to another controller where technically feasible.
– Right to Object: You have the right to object to certain processing, including direct marketing and profiling.
– Right to Opt-Out: Under the CCPA, you may request that we do not sell your personal information to third parties.

To exercise your rights, please contact us at [email protected]. We may require verification of your identity before responding to certain requests.

6. Security Measures

We have implemented robust organizational, administrative, and technical safeguards to protect your personal data from unauthorized access, loss, misuse, alteration, or disclosure. These include:

– Encryption of data at rest and in transit.
– Role-based access control and authentication management.
– Periodic data backups and disaster recovery strategies.
– Security awareness and privacy training for all relevant personnel.

While no system can guarantee absolute security, we take industry-standard measures to ensure your data is protected during collection, use, storage, and transfer.

7. International Data Transfers

As part of our global operations, your personal data may be transferred to jurisdictions outside your own, including to countries that may not offer the same level of legal protections. Where personal data is transferred internationally, we ensure such transfers comply with applicable laws through the use of:

– Standard Contractual Clauses approved by the European Commission or equivalent mechanisms under US and international law.
– Data protection adequacy decisions issued by regulatory authorities.
– Binding corporate rules where applicable.

8. Data Retention

We retain personal data for as long as necessary to fulfill the purposes for which we collected it, including to satisfy any regulatory, legal, accounting, or reporting obligations. Our standard retention periods are as follows:

– Usage Data: 24 months from last activity.
– Account Data: Maintained until account closure and securely archived for 7 years post deactivation.
– Profile Data: 36 months from last interaction or site activity.
– Communication Data: 3 years from last interaction or resolution.
– Technical Data: 12 months rolling retention.
– Transaction Data: 7 years for financial compliance.
– Preference Data: Retained until revoked or updated by the user.

9. Cookie Policy

tonguesucker.com uses cookies and similar tracking technologies to enhance functionality, measure performance, analyze website usage, and support advertising and personalization.

Types of cookies used:

– Essential Cookies: Necessary for basic website operation and security.
– Functional Cookies: Enable features such as remembering preferences and account settings.
– Analytics Cookies: Help us assess user behavior across the site and improve services (e.g., Google Analytics).
– Performance Cookies: Improve load time and responsiveness.

10. Cookie Management and Compliance

Visitors from jurisdictions covered by the GDPR and CCPA will be presented with a cookie consent banner upon first visit, allowing them to accept or reject the use of specific categories of non-essential cookies. You may modify your cookie preferences at any time via the Consent Management Platform on tonguesucker.com or through your browser settings.

For California residents, the “Do Not Sell My Personal Information” link enables opt-out of the sale of personal data where applicable.

11. Children’s Privacy

tonguesucker.com is not intended for or directed to individuals under the age of 13. We do not knowingly collect personal data from children under 13. If we become aware that we have collected personal data from a child without verifiable parental consent, we will take immediate steps to delete such information. Parents or guardians with concerns may contact us at [email protected].

12. Policy Updates and Notification

We reserve the right to amend or update this Privacy Policy at our discretion. Any material changes to our data handling practices will be communicated through prominent notice on tonguesucker.com. You are encouraged to review this policy periodically to remain informed about how we protect your data.

13. Contact Us

If you have questions about this Privacy Policy, your data rights, or how we process your personal information, please contact us at:

Email: [email protected]
Website: https://tonguesucker.com

We are committed to full compliance with applicable privacy laws and aim to provide transparent and accountable data practices. Please reach out with any concerns or requests regarding your privacy rights.