Privacy Policy
Last Updated: 21/09/2024
J Cruz is committed to protecting and respecting your privacy in compliance with the General Data Protection Regulation (GDPR) and other applicable laws. This Privacy Policy outlines how we collect, use, and safeguard your personal information when you visit our website [https://www.jcruzmurder.com/] "J Cruz".
By accessing or using our Website, you agree to this Privacy Policy. If you do not agree, please do not use our Website.
1. Information We Collect
We may collect the following types of information from you:
1.1 Personal Data
In line with the GDPR, "personal data" means any information relating to an identified or identifiable natural person. We may collect personal data, including but not limited to:
- Name
- Email address
- Contact number
- Physical address (if applicable)
- Payment information (if applicable)
- IP address
1.2 Special Categories of Data
We do not intentionally collect sensitive personal data, such as racial or ethnic origin, political opinions, religious beliefs, or health information, unless legally required and with your explicit consent.
1.3 Non-Personal Data
We may collect non-personal data automatically as you navigate through the Website, such as:
- Browser type
- Device information (IP address, operating system)
- Cookies and usage data
- Interaction data
2. Lawful Basis for Processing
We process your personal data under the following lawful bases as defined by the GDPR:
- **Consent**: Where you have provided explicit consent for specific purposes (e.g., receiving marketing emails).
- **Contractual Necessity**: When the processing is necessary for the performance of a contract, such as to process payments or provide services.
- **Legal Obligation**: To comply with legal obligations, such as data retention for tax purposes.
- **Legitimate Interests**: Where we process data in ways reasonably expected as part of operating our business, provided that these interests are not overridden by your rights and freedoms.
3. How We Use Your Information
We use your personal data for purposes including:
- To provide and maintain the Website
- To manage your account and provide customer support
- To process transactions and send you order confirmations
- To improve our Website based on usage trends and analytics
- To send newsletters or promotions (with your explicit consent)
- To comply with legal requirements
4. Data Retention
We retain your personal data for as long as necessary to fulfill the purposes we collected it for, including for legal, accounting, or reporting requirements. If you would like to know how long your data is retained for a specific purpose, please contact us.
5. How We Protect Your Information
We implement appropriate technical and organizational security measures to safeguard your personal data from unauthorized access, disclosure, or loss. However, please note that no method of transmission over the internet or electronic storage is 100% secure.
6. Cookies and Tracking Technologies
We use cookies and similar tracking technologies to enhance your experience on our Website. These may include essential, performance, or advertising cookies. You can manage your cookie preferences through your browser settings, and you may refuse the use of cookies. For more information, see our [Cookie Policy].
7. Sharing Your Information
We only share your personal data with third parties when it is necessary and lawful, including:
- Service providers (e.g., payment processors, web hosting services)
- Legal authorities or law enforcement (when required by law)
- Affiliates or partners, with your explicit consent
We ensure that all third parties with whom we share your data are compliant with GDPR and other applicable data protection laws.
8. International Data Transfers
If we transfer your personal data outside the European Economic Area (EEA), we ensure that it is protected by appropriate safeguards, such as Standard Contractual Clauses, or other lawful mechanisms approved by the European Commission.
9. Your Rights Under GDPR
Under GDPR, you have the following rights concerning your personal data:
- **Right to Access**: You can request access to your personal data.
- **Right to Rectification**: You can request corrections to inaccurate or incomplete personal data.
- **Right to Erasure**: You can request the deletion of your personal data (the "right to be forgotten"), subject to certain conditions.
- **Right to Restrict Processing**: You can request the restriction of processing your data in certain situations.
- **Right to Data Portability**: You can request your personal data be provided in a structured, commonly used, and machine-readable format.
- **Right to Object**: You can object to the processing of your personal data based on legitimate interests or for direct marketing purposes.
- **Right to Withdraw Consent**: Where processing is based on your consent, you can withdraw that consent at any time.
To exercise these rights, please contact us at [enquiries@nickycaroleartwork.co.uk]. We will respond to your request within one month.
10. Data Protection Officer (DPO)
If required, we have appointed a Data Protection Officer (DPO) to oversee GDPR compliance. You can contact our DPO at [Insert DPO Contact Information].
11. Changes to This Privacy Policy
We may update this Privacy Policy periodically to reflect legal updates or changes to our practices. Any changes will be effective immediately upon posting on this page, and we will notify you of significant changes by email or other means.
12. Contact Us
If you have any questions or concerns about this Privacy Policy, or if you wish to exercise any of your GDPR rights, please contact us at:
[https://www.jcruzmurder.com/]
Key GDPR Requirements Addressed:
- **Lawful basis for processing** is specified.
- **Explicit consent** is required for certain processing, such as marketing.
- **International data transfers** and the safeguards in place are addressed.
- **Data subjects' rights** are listed and instructions on how to exercise them are provided.
- **Retention policy** for personal data is outlined.
- **Data Protection Officer** is mentioned if required.
- **Security measures** are highlighted to ensure safe data handling.