Privacy Policy for MonkeyPetCo.com
1. Introduction
MonkeyPetCo (“we,” “our,” or “us”), accessible at monkeypetco.com, is dedicated to protecting and respecting your privacy. We uphold a deep commitment to safeguarding your personal data in compliance with applicable data protection laws, including the General Data Protection Regulation (GDPR) and the California Consumer Privacy Act (CCPA). This Privacy Policy outlines how we collect, use, store, and protect your information while using our services, and it informs you of your rights and how you can exercise them.
2. Scope of This Policy and Data Controller Responsibilities
This Privacy Policy applies to the collection and processing of personal data through the website located at monkeypetco.com, and all related services and communications.
For the purposes of the GDPR, MonkeyPetCo is the data controller of the personal data collected via our website or otherwise. Under the CCPA, we operate as a business that determines the purposes and means of processing your personal information.
3. Categories of Personal Data We Process
Depending on how you interact with monkeypetco.com, we may collect and process the following categories of personal data:
– Usage Data: Information about how you use our website, including browser type, IP address, pages visited, time and date of visits, session duration, and referring URLs.
– Account Data: Information you provide when registering an account, such as first and last name, email address, phone number, billing and shipping addresses.
– Profile Data: Information such as product preferences, order history, saved shopping carts, and behavioral activity while using our services.
– Communication Data: Records of communications with us, such as helpdesk support tickets, submitted contact forms, emails, and live chat interactions.
– Technical Data: Device-related data, including operating system version, device type, unique device identifiers, system and app settings, and software configurations.
– Transaction Data: Payment and purchase information including transaction IDs, chosen payment methods, order details, and delivery arrangements. We do not store full credit card numbers, which are processed securely by third-party payment providers.
– Preference Data: Information relating to your marketing and cookie preferences, newsletter subscriptions, and expressed interests in products or services.
4. Legal Bases for Processing Personal Data
We rely on several legal bases under both GDPR and CCPA for processing personal data, including:
– Contractual Necessity: Processing your data to fulfill a contract with you, such as delivering ordered goods or managing your account.
– Legitimate Interests: For improving customer experience, security, fraud prevention, and website optimization, provided your fundamental rights do not override these interests.
– Consent: Where explicitly provided, such as opting in to marketing communications or accepting non-essential cookies.
– Legal Obligation: Where processing is necessary to comply with a legal requirement, including tax and accounting regulations.
5. Your Rights
Under applicable data protection laws, you have the following rights:
– Right of Access: You have the right to request access to the personal data we hold about you.
– Right to Rectification: You can request correction of inaccurate or incomplete data.
– Right to Erasure: You may request we delete your personal data in certain circumstances.
– Right to Restrict Processing: You may request temporary suspension of processing while we investigate an issue.
– Right to Data Portability: You can request that we transfer your personal information to you or another provider in a structured, commonly used, and machine-readable format.
– Right to Object: You may object to our use of your data where processing is based on legitimate interest or for marketing purposes.
CCPA-Specific Rights (for California residents):
– Right to Know: You have the right to request disclosure of the categories and specific pieces of personal information collected about you.
– Right to Delete: Subject to certain exceptions, you may request deletion of your personal information.
– Right to Opt-Out: You have the right to opt-out of the sale of personal information, even though we do not sell your data for monetary value.
– Right to Non-Discrimination: You will not receive discriminatory treatment for exercising any of your rights under CCPA.
To exercise your rights, please contact us at [email protected].
6. Security Measures
We implement a range of technical and organizational safeguards to protect personal data, including:
– End-to-end encryption of data transmitted over the internet.
– Industry-standard firewall and intrusion detection technologies.
– Role-based access controls to personal data.
– Regular security training for employees and staff.
– Backup and disaster recovery protocols to safeguard data continuity.
7. International Transfers
Some of the recipients or service providers we use may be located outside the European Economic Area (EEA) or your local jurisdiction. Where your personal data is transferred internationally, we ensure appropriate safeguards are applied, including Standard Contractual Clauses approved by the European Commission and other lawful mechanisms to ensure data protection equivalent to your local laws.
8. Data Retention
We retain personal data for only as long as necessary to fulfill the purposes outlined in this Policy, including:
– Account Data: Retained while your account remains active and then securely deleted or anonymized within 12 months of deactivation.
– Transaction Data: Retained for 7 years to meet tax and audit requirements.
– Communication and Support Data: Retained for 24 months to review internal customer service and performance.
– Usage and Technical Data: Retained for 13 months for analytics and site performance purposes.
– Marketing Preferences and Consents: Retained indefinitely or until you withdraw your consent.
9. Cookie Policy
monkeypetco.com uses cookies and similar technologies to enhance your browsing experience. Cookies are small data files stored on your device when you visit our website. We classify cookies as follows:
– Essential Cookies: Necessary for the functioning of the site (e.g., login access, shopping cart).
– Functional Cookies: Enhance usability, such as remembering language or region preferences.
– Analytics Cookies: Help us understand site usage and performance (e.g., Google Analytics).
– Performance Cookies: Optimize website speed and functionality.
10. Cookie Management and Compliance
Upon first visit to monkeypetco.com, you will be presented with a cookie notice allowing you to manage cookie preferences. You may update these settings at any time via the cookie settings link located at the bottom of our website.
We comply with the GDPR by requiring consent prior to setting non-essential cookies and honor all browser “Do Not Track” signals in accordance with the CCPA.
11. Children’s Data
monkeypetco.com is not intended for children under the age of 13. We do not knowingly collect or solicit personal information from individuals in this age group. If we become aware that we have inadvertently collected data from a child under 13, we will promptly delete such information.
Parents or guardians who believe their child has provided us information may contact us at [email protected] for immediate review and removal.
12. Policy Updates and Notifications
We reserve the right to amend this Privacy Policy to reflect changes in legal obligations, service updates, or privacy practices. When we make material changes, we will notify you via a prominent notice on monkeypetco.com and/or by contacting you through appropriate channels, such as email (if we hold a valid address for you).
13. Contact Information
If you have any questions, concerns, or requests relating to your personal data or this Privacy Policy, please contact us at:
Email: [email protected]
—
We are committed to full compliance with GDPR, CCPA, and other applicable data privacy regulations. Your privacy is important to us, and we welcome you to reach out to us at any time with questions or concerns regarding how your personal data is handled.