Privacy Policy for Oran Mor Pipe Band (oranmorpipeband.com)

1. Introduction

At Oran Mor Pipe Band, accessible via oranmorpipeband.com, we are deeply committed to safeguarding the privacy and personal data of our website visitors, members, customers, and partners. This Privacy Policy explains how we lawfully collect, use, disclose, and protect your data in accordance with applicable data protection laws, including the General Data Protection Regulation (GDPR) and the California Consumer Privacy Act (CCPA). We believe that privacy is a fundamental right and handle personal information with integrity, transparency, and accountability.

2. Scope of the Policy and Data Controller Role

This Privacy Policy applies to all personal data processed by Oran Mor Pipe Band through oranmorpipeband.com, as well as through related communications, services, and transactions. For the purposes of GDPR and other applicable privacy laws, Oran Mor Pipe Band is the data controller responsible for determining the purposes and methods of processing your personal data. Any questions regarding our data practices may be directed to us at [email protected].

3. Categories of Data We Process

We collect and process the following categories of data, either directly from you, through your use of the website, or via authorized third-party service providers:

a. Usage Data:
Information such as IP address, browser type, operating system, device type, referring URLs, pages visited, time and duration of visits, and other diagnostic data generated through your interaction with our site.

b. Account Data:
Identifiers including your name, email address, mailing address, phone number, or other identifiers you provide when registering an account or making a purchase or inquiry.

c. Profile Data:
Details about your preferences, behavior on the website, purchase history, participation in events or groups, and any additional data supplied to customize your experience.

d. Communication Data:
Records of your interactions with us, including support tickets, email correspondence, messages sent via contact forms, and other communication channels.

e. Technical Data:
Device information such as operating system details, device identifiers, browser configurations, time zone settings, and plug-ins used for ensuring cross-platform functionality.

f. Transaction Data:
Information related to your purchases, including payment details (processed through secure, PCI-compliant third-party processors), delivery addresses, and order content.

g. Preference Data:
Data regarding your marketing preferences, communication consents, product and event interests, and newsletter subscriptions.

4. Legal Bases for Processing

We process your personal data based on one or more of the following legal grounds under Article 6 of the GDPR and applicable provisions under the CCPA:

– Consent: Where you have explicitly given us permission (e.g., for marketing communications).
– Contractual Necessity: When processing is necessary for the performance of a contract or requested services.
– Legitimate Interests: For activities such as analytics, fraud prevention, network security, and improving user experience, provided such interests are not overridden by your rights.
– Legal Obligation: When processing is required for compliance with applicable legal or regulatory obligations.

5. Your Rights

Subject to applicable laws and, in particular, GDPR and CCPA, you have the following rights regarding your personal data:

– Right of Access: To request confirmation and obtain a copy of your personal data.
– Right to Rectification: To request correction of inaccurate or incomplete data.
– Right to Erasure (“Right to be Forgotten”): To request deletion of your personal data.
– Right to Restriction: To request temporary or permanent limitation of our processing.
– Right to Data Portability: To receive your data in a structured, commonly used format and have it transferred to another data controller.
– Right to Object: To object to processing under legitimate interests or for direct marketing purposes.
– Right to Withdraw Consent: To withdraw your consent at any time where processing is based on consent.
– Rights under the CCPA: California residents may request disclosure of personal information categories, request deletion, opt-out of the sale of personal data, and not be discriminated against for exercising their privacy rights.

To exercise your rights, please contact us at [email protected].

6. Data Security

We implement robust technical and organizational measures to ensure the security, integrity, and confidentiality of your personal data. These include:

– Data encryption (at rest and in transit)
– Access control and authentication systems
– Regular vulnerability assessments and software patching
– Off-site and encrypted backups
– Secure data centers
– Employee confidentiality agreements and training on data protection

7. International Data Transfers

Your personal data may be stored or processed in jurisdictions outside your own, including countries outside the European Economic Area (EEA). In such cases, we ensure that adequate protection is provided through mechanisms approved by the European Commission, such as Standard Contractual Clauses (SCCs), and compliance with relevant local regulations.

8. Data Retention

We retain personal data only as long as necessary for the purposes identified in this policy:

– Usage and Technical Data: Up to 12 months from collection
– Account and Profile Data: While the account is active and up to 24 months after closure
– Communication Data: Up to 36 months unless required to be retained longer for legal purposes
– Transaction Data: For up to 7 years for financial and legal compliance
– Preference and Marketing Data: Until consent is withdrawn or the user unsubscribes

Once retention periods expire, data is anonymized or securely deleted.

9. Cookie Policy

We use cookies and similar tracking technologies on oranmorpipeband.com to enhance your browsing experience. Cookies are small text files stored on your device when you access our website. Our use of cookies includes:

– Essential Cookies: Necessary for authentication, security, and core functionality.
– Functional Cookies: To remember preferences and settings.
– Performance and Analytics Cookies: To collect usage statistics and diagnostic data (e.g., via Google Analytics).
– Marketing Cookies: To deliver relevant ads and measure user engagement, where applicable.

10. Cookie Management and Compliance

By visiting oranmorpipeband.com, you are asked to manage your cookie preferences through a consent banner in accordance with GDPR and CCPA requirements. You may update or withdraw consent at any time by accessing your browser’s cookie settings, or by using our cookie management tools.

We do not sell your personal data, including cookies, to third parties as defined under CCPA.

11. Children’s Data

oranmorpipeband.com is not intended for use by individuals under the age of 13. We do not knowingly collect or process personal data from children. If you believe a child has provided us with personal information, please contact us at [email protected] so that we may take appropriate action, including data deletion.

12. Policy Updates

We may update this Privacy Policy from time to time to reflect changes in legal, regulatory, or operational requirements. Material changes will be communicated via our website or through direct communication channels where appropriate. Continued use of oranmorpipeband.com following the update constitutes your acknowledgment of the revised terms.

13. Contact Us

If you have questions, concerns, or requests regarding this Privacy Policy or how we handle your data, please contact us at:

Oran Mor Pipe Band
Email: [email protected]
Website: oranmorpipeband.com

We are committed to complying with all applicable data protection laws and to maintaining open and transparent communication with our users. Thank you for placing your trust in Oran Mor Pipe Band.