Privacy Policy for Old Port House

1. Introduction

At Old Port House, we are committed to safeguarding the privacy and data protection rights of our users. Your trust is fundamental to us, and we recognize the importance of responsibly managing, protecting, and processing your personal information. This Privacy Policy outlines how we collect, use, disclose, and protect your personal data in compliance with the General Data Protection Regulation (GDPR), the California Consumer Privacy Act (CCPA), and other applicable privacy laws. Our objective is to maintain the highest standards of transparency and security when handling your information across oldporthouse.com (“the Website”).

2. Scope of Policy and Data Controller Role

This Privacy Policy applies to personal data collected through oldporthouse.com and any associated services or communications. Old Port House is the data controller responsible for your personal information unless otherwise stated. For any questions or concerns regarding this policy or your personal data, you may contact us at [email protected].

3. Categories of Data Processed

We collect and process the following categories of personal information:

a. Usage Data
This includes data automatically collected when you access the Website, such as browser type, device identifiers, OS version, IP address, geolocation data, referring URLs, and site navigation patterns.

b. Account Data
When you create an account or make a purchase, we may collect your full name, billing/shipping address, email address, and phone number.

c. Profile Data
This includes information you provide about your preferences, purchase history, browsing behavior, account settings, and interactions with our content.

d. Communication Data
We maintain records of any correspondence you send us, including customer support requests, direct inquiries via email, or feedback provided through our contact forms or live chat services.

e. Technical Data
We collect information about the devices and systems you use to access our Website, such as hardware models, browser plug-ins, operating systems, screen resolutions, time zones, and network identifiers.

f. Transaction Data
This includes details about payments you make or receive, order history, shipping details, billing summaries, and transaction-related correspondence.

g. Preference Data
This includes your marketing and communication preferences, product or service interests, and opt-in or opt-out selections for newsletters and promotional content.

4. Legal Bases for Processing

We process your personal data on a variety of lawful grounds, including:

– Performance of a Contract: When needed to fulfill our contractual obligations, such as processing orders or delivering services.
– Legitimate Interests: For business improvement, fraud prevention, managing our Website, and customer service—unless those interests are overridden by your rights and freedoms.
– Consent: When you explicitly agree to our collection or use of certain types of data, such as subscribing to newsletters or accepting cookies.
– Legal Obligation: When processing is necessary to comply with applicable laws or regulatory requirements.

5. Your Rights

Under applicable privacy laws, you may exercise the following rights:

– Right of Access: To request access to the personal data we hold about you.
– Right to Rectification: To correct inaccurate or incomplete data.
– Right to Erasure: To request deletion of your data, subject to certain exceptions.
– Right to Restriction: To restrict further processing under certain circumstances.
– Right to Data Portability: To obtain your personal data in a commonly used, machine-readable format and transfer it to another controller.

To exercise any of these rights, please contact [email protected]. Verification of your identity may be requested to comply with security requirements.

6. Security Measures

We implement a range of technical and organizational measures to safeguard your personal data, including:

– AES encryption and secure socket layer (SSL) technology
– Multi-factor access control for internal systems
– Routine backups with restricted and encrypted storage
– Regular data protection training for staff handling personal information

Despite our security measures, transmission of data over the internet is not completely secure. You acknowledge and accept this risk when using our services.

7. International Transfers

Where applicable, we may transfer your personal data outside of your jurisdiction in compliance with international data protection standards. In doing so, we incorporate Standard Contractual Clauses approved by the European Commission or rely upon an adequacy decision where available. For residents of the United States, your data may be transferred internationally only with suitable protective measures in place.

8. Data Retention

We retain personal data only for as long as necessary based on the purpose of collection, subject to legal and contractual obligations. Below are general retention timelines:

– Usage Data: 6 to 12 months for diagnostic and analytics purposes
– Account Data: Retained while account remains active and up to 5 years after account deletion
– Transaction Data: Retained for up to 7 years due to legal and accounting requirements
– Communication Data: Retained for up to 3 years post-interaction
– Marketing Preferences: Retained until withdrawal of consent or unsubscription

9. Cookie Policy

Our Website uses cookies to enhance user experience and analyze site performance. The types of cookies we use include:

– Essential Cookies: Necessary for basic functionality of oldporthouse.com (e.g., login, shopping cart).
– Functional Cookies: Used to remember settings and preferences to personalize your experience.
– Analytics Cookies: Collect aggregated usage statistics to optimize site performance using tools such as Google Analytics.
– Performance Cookies: Monitor feature usage and improve interface responsiveness.

10. Cookie Management and Compliance with GDPR & CCPA

You can manage your cookie preferences via your browser settings or our Privacy Preference Center. Under GDPR and CCPA, you have the right to opt-out of certain cookie categories, except for cookies strictly necessary for the operation of this Website. California residents may exercise “Do Not Sell My Personal Information” rights. Cookie consent is obtained before non-essential cookies are used, and preferences are recorded for accountability.

11. Special Protections for Children Under 13

Our Website is not intended for children under the age of 13, and we do not knowingly collect personal data from individuals in this age group. If you believe we have inadvertently collected information from a child under 13, please email us immediately at [email protected] so we can take appropriate action, including deletion of the data.

12. Policy Updates & User Notifications

We may revise this Privacy Policy periodically to reflect changes in legal obligations, technological advancements, or our data practices. We encourage users to regularly review the latest version available on oldporthouse.com. You will be notified of significant updates through prominent notices on the Website or via email where appropriate.

13. Contact

For any questions, concerns, or requests related to this Privacy Policy or your personal data, please contact us at:

Email: [email protected]
Website: https://oldporthouse.com

We are committed to complying with all applicable data protection laws and ensuring responsible stewardship of your information. If you believe your privacy rights have been violated, please reach out to us, and we will respond promptly and in accordance with legal requirements.