Privacy Policy - Thepjpband

1. Introduction

At thepjpband.com, we are committed to protecting your privacy and safeguarding your personal data. This Privacy Policy outlines how we collect, process, and store your personal information in compliance with applicable data protection laws, including the General Data Protection Regulation (GDPR) and the California Consumer Privacy Act (CCPA). We respect your fundamental rights to privacy and data protection and are devoted to maintaining your trust through responsible data handling practices.

2. Scope of This Policy and Data Controller Responsibility

This Privacy Policy applies to all users of the website operating at https://thepjpband.com (the “Website”). The data controller responsible for your personal data under this Policy is The PJP Band, which you may contact at [email protected]. As the data controller, we determine the purposes and means of processing your personal data and ensure that such processing is done lawfully, fairly, and transparently.

3. Categories of Data We Process

We may process various categories of personal data, including but not limited to the following:

a. Usage Data
We collect data relating to your interaction with the Website, such as your IP address, browser type and version, time zone setting, referring URLs, pages viewed, session duration, and website navigation paths.

b. Account Data
When you create an account, purchase items, or fill out forms on the Website, we may collect personal identifiers such as your full name, billing/shipping address, email address, phone number, and account login credentials.

c. Profile Data
This includes data relating to your user profile, such as product preferences, purchase history, site behavior (including user feedback), and account settings.

d. Communication Data
We collect information contained in or relating to any communication you send to us, such as customer support inquiries, emails, contact form submissions, and our correspondence history.

e. Technical Data
We collect details about the device and software you use to access the Website, such as device type, operating system, screen resolution, language settings, browser plug-ins, and system configurations.

f. Transaction Data
If you make purchases on the Website, we process relevant financial and transactional data, such as payment method (processed via third parties), transaction amounts, timestamps, billing/shipping information, and order status.

g. Preference Data
We collect your marketing preferences, including your opt-in or opt-out choices for newsletters, promotional offers, and notifications, as well as interests in certain products or services.

4. Legal Bases for Processing

We process personal data based on the following lawful bases in accordance with GDPR:

– Consent: when you have given explicit permission for us to process your data for specific purposes (e.g., marketing subscriptions).
– Contract: where processing is necessary to fulfill a contract with you or to take steps at your request before entering into such a contract (e.g., fulfilling an order).
– Legal Obligation: where we are required to process your data to comply with legal or regulatory obligations.
– Legitimate Interests: to pursue our legitimate interests in maintaining and improving our Website, ensuring security, preventing fraud, and enhancing user experience—provided these interests do not override your rights and freedoms.

Your rights under CCPA include notice, access, deletion, and opting out of certain data uses, which are fulfilled as described below.

5. Your Data Protection Rights

You have the following rights under applicable data protection laws:

– Right of Access: To request confirmation as to whether we process your personal data, and to receive a copy of such data.
– Right to Rectification: To request correction of inaccurate or incomplete personal data.
– Right to Erasure: To request deletion of your personal data under certain circumstances (also known as “the right to be forgotten”).
– Right to Restriction: To request the restriction of processing where you contest the accuracy, lawfulness, or necessity of the data.
– Right to Data Portability: To receive your data in a structured, commonly used machine-readable format and to request transmission of this data to another controller.

You may exercise your rights by contacting us via [email protected]. We may require verification of your identity before fulfilling your request.

6. Security Measures

We implement robust technical and organizational measures to protect your personal data, including:

– Encryption of data in transit and at rest
– Role-based access controls and strong authentication mechanisms
– Firewalls, intrusion detection systems, and secure hosting
– Regular data backups and disaster recovery protocols
– Staff training and awareness programs on data security and confidentiality

Despite these measures, no data transmission over the Internet is entirely secure. We encourage you to take reasonable precautions when transmitting personal information online.

7. International Data Transfers

Where we transfer your personal information outside the European Economic Area (EEA) or other equivalent jurisdictions, we do so only pursuant to lawful transfer mechanisms such as:

– The European Commission’s Standard Contractual Clauses (SCCs)
– Binding Corporate Rules or equivalent frameworks
– Adequacy decisions issued by the European Commission

We take all reasonable steps to ensure that your information is treated securely and in accordance with this Privacy Policy.

8. Data Retention

We retain personal data only for as long as is necessary for the purposes for which it was collected, or to comply with legal, regulatory, or contractual obligations. Retention periods vary by data type:

– Usage and Technical Data: up to 12 months
– Account and Profile Data: for the duration of your account plus 6 years
– Transaction Data: up to 7 years for tax and accounting compliance
– Communication Data: 2 years following last contact
– Preference Data: until consent is withdrawn or data is updated

We periodically review our retention policies to ensure alignment with best practices and legal requirements.

9. Cookie Policy

We use cookies and similar tracking technologies to optimize user experience on the Website. Cookies are small data files stored on your device which may track:

– Essential Cookies: Necessary for site navigation, user login, and secure checkout.
– Functional Cookies: Enhance personalization and remember user preferences.
– Analytics Cookies: Collect data to analyze website traffic, user behavior, and preferences (e.g., via Google Analytics).
– Performance Cookies: Measure website performance metrics such as load times and error rates.

10. Cookie Management and GDPR/CCPA Compliance

Upon your first visit to the Website, you will be presented with a cookie consent banner allowing you to:

– Accept all cookies
– Reject non-essential cookies
– Customize cookie preferences individually

You can change your cookie preferences at any time via your browser settings or the “Cookie Settings” link available on the Website. In compliance with GDPR and CCPA, we do not deploy non-essential cookies without obtaining your prior consent, and we honor Do Not Track (DNT) browser settings where applicable.

11. Children’s Privacy

The Website is not directed to or intended for individuals under the age of 13. We do not knowingly collect personal data from children under 13 years of age. If we become aware that we have collected data from a child without verified parental consent, we will promptly delete such information. If you believe we may have unlawfully collected data from a minor, please contact us at [email protected].

12. Policy Updates and Notifications

We reserve the right to update or modify this Privacy Policy at any time. Any changes will be posted on thepjpband.com, and significant changes will be communicated directly to users where appropriate (e.g., via email or banner notice). Your continued use of the Website after such updates constitutes acknowledgment and acceptance of the revised terms.

13. Contact Us

If you have any questions, concerns, or requests related to your privacy or this Privacy Policy, please contact:

The PJP Band
Email: [email protected]
Website: https://thepjpband.com

We are committed to ensuring your data is handled in compliance with GDPR, CCPA, and other applicable privacy regulations. Please reach out if you require any assistance or would like to report a concern about your data privacy.