Privacy Policy - Official Richard & Judy

1. Introduction

At OfficialRichardandJudy.com (“we,” “us,” or “our”), we are committed to safeguarding your privacy and protecting your personal information. We understand the importance of data protection and respect your right to privacy in accordance with applicable data privacy regulations, including the General Data Protection Regulation (EU) 2016/679 (“GDPR”) and the California Consumer Privacy Act (“CCPA”). This Privacy Policy outlines our practices regarding the collection, use, storage, and disclosure of your personal data when you use our website at www.officialrichardandjudy.com and related services.

2. Scope of Policy and Data Controller Role

This Privacy Policy applies to all personal data collected through your interaction with OfficialRichardandJudy.com. We act as the “data controller” under GDPR, meaning we determine the purposes and means of processing your personal data. This policy governs any individual accessing our website or interacting with us via services, including contact via the email address: [email protected].

3. Categories of Personal Data We Process

We may collect and process the following types of personal data:

a. Usage Data
Includes data collected automatically about your interaction with our website, such as your IP address, browser type, operating system, referral sources, pages visited, session duration, and similar analytic data.

b. Account Data
Information provided when you create an account or engage with our site, such as your name, email address, telephone number, billing/shipping address, and credentials associated with your user account.

c. Profile Data
Includes preferences, product interests, browsing behavior, order history, feedback, and survey responses associated with your use of the site and services.

d. Communication Data
Correspondence records including inquiries, support requests, and the content of communications exchanged via email or web forms.

e. Technical Data
Details about the device(s) you use to access the website, such as device identifiers, screen resolution, time zone settings, and browser plug-in types.

f. Transaction Data
Data related to purchases made through the website, including purchase history, payment method, transaction totals, order details, and fulfillment status.

g. Preference Data
Your opt-in and opt-out selections regarding communications, marketing preferences, notification settings, and product interest categories.

4. Legal Bases for Processing

We rely on the following legal grounds to collect and process your data:

– Performance of a Contract: To fulfill our obligations under any agreement with you, such as processing payments and delivering goods.
– Consent: Where required, we obtain explicit consent prior to processing, e.g., for marketing emails or non-essential cookies.
– Legal Obligation: To comply with relevant laws and regulations.
– Legitimate Interests: For purposes such as maintaining platform security, improving our services, and ensuring a personalized experience, provided such interests are not overridden by your data protection rights.

5. Your Rights Under Data Protection Laws

You have the following rights regarding your personal data:

– Right of Access: Request access to your data and obtain a copy.
– Right to Rectification: Request correction of inaccurate personal data.
– Right to Erasure: Request deletion of your data in certain circumstances.
– Right to Restriction: Request that we limit processing under specific conditions.
– Right to Data Portability: Request the transfer of your personal data to another service provider in a structured, commonly used, and machine-readable format.
– Right to Object: Object to processing based on legitimate interests or for direct marketing purposes.
– Right to Withdraw Consent: Withdraw any previously given consent at any time.

To exercise any rights, you can contact us at: [email protected].

6. Security Measures

We implement appropriate technical and organizational measures to ensure a level of security proportionate to the risks presented by processing your personal data, including:

– Data encryption in transit and at rest
– Access controls and authentication safeguards
– Regular security patching of systems
– Secure server infrastructure
– Employee training in data protection principles
– Regular audits and incident response protocols

7. International Data Transfers

If your personal data is transferred outside the European Economic Area (EEA) or another applicable jurisdiction, we ensure such transfers comply with applicable legislation. This may include reliance on:

– European Commission Standard Contractual Clauses (SCCs)
– Adequacy decisions by the European Commission for certain countries
– Additional safeguards such as encryption and strict contractual terms

8. Data Retention

We retain personal data only as long as necessary to fulfill the purposes for which we collected it or as required to comply with legal, regulatory, contractual, or reporting obligations. Specific retention periods include:

– Account Data: Retained as long as the user has an active account + 3 years thereafter
– Transaction Data: Retained for 7 years for accounting and tax purposes
– Communication Data: Retained for 2 years from the last correspondence
– Usage & Technical Data: Retained for 18 months for analytics and troubleshooting purposes
– Marketing Preferences: Retained until an opt-out is executed or consent is withdrawn

9. Cookie Policy

Our website uses cookies and similar technologies to enhance user experience and to analyze usage trends. Cookies used fall into several categories:

– Essential Cookies: Required for site functionality, such as login and checkout processes
– Functional Cookies: Support personalization and remember user preferences
– Analytics Cookies: Collect aggregate data on usage patterns for site improvement
– Performance Cookies: Monitor performance and error reporting

These cookies may be set by our website or by trusted third-party services.

10. Cookie Management and Compliance

Upon visiting OfficialRichardandJudy.com, users are presented with cookie consent options in compliance with GDPR and CCPA. You may manage cookie settings directly through our cookie banner or adjust settings within your browser. Users in California have the right to know what personal information is sold or disclosed and to opt-out of the sale of personal information. While we do not sell personal data in the traditional sense, we honor “Do Not Sell My Personal Information” requests as required under CCPA frameworks where applicable.

11. Children’s Privacy

Our services are not directed to children under the age of 13, and we do not knowingly collect or process personal data from children under 13. If we become aware that we have inadvertently collected such data, we will take immediate steps to delete it. Parents or guardians who believe that we may have collected information from a child may contact us at [email protected].

12. Policy Updates

We reserve the right to update this Privacy Policy at our discretion to reflect changes in law, technology, or our data practices. In the event of material changes, we will inform users via prominent notice on OfficialRichardandJudy.com or direct communication where appropriate.

13. Contact Us

For any privacy-related inquiries, data subject access requests, or concerns regarding our data handling practices, please contact us at:

Email: [email protected]

We are committed to operating OfficialRichardandJudy.com in full compliance with international data protection standards and to ensuring that your personal data is processed lawfully, fairly, and transparently. Please reach out with any questions or concerns regarding this Privacy Policy.