Privacy Policy

TweetPeddler (“we,” “our,” or “us”) is firmly committed to safeguarding the privacy, integrity, and security of your personal data. This Privacy Policy outlines our practices regarding the collection, use, disclosure, and protection of personal information when you visit our website, tweetpeddler.com, or otherwise interact with our services. We adhere to applicable data protection laws, including the General Data Protection Regulation (GDPR) and the California Consumer Privacy Act (CCPA), with a privacy-first approach.

1. Introduction to Our Commitment to Privacy

At TweetPeddler, we prioritize your trust and value your right to privacy. We implement best practices for data protection and maintain compliance with global privacy regulations. We strive to collect only the data necessary for delivering and improving our services and to process that data responsibly and transparently.

2. Scope of Policy and Data Controller Responsibility

This Privacy Policy applies to all personal data collected through tweetpeddler.com and associated services. TweetPeddler is the data controller for the personal data described in this policy and is responsible for determining how and why your data is processed.

3. Categories of Data We Process

We collect and process different types of personal data based on your interactions with our website and services:

a. Usage Data
Includes information about how you interact with our website, such as Internet Protocol (IP) address, browser type, operating system, referral sources, geographical location, access dates and times, session duration, and navigation paths.

b. Account Data
Includes your name, residential or billing address, email address, phone number, and other details provided when creating an account.

c. Profile Data
Includes data related to your service preferences, purchase history, user behaviors, and activity patterns on tweetpeddler.com.

d. Communication Data
Includes records of your communications with us, such as customer support requests, live chat logs, user feedback, and any data submitted through contact forms.

e. Technical Data
Includes device identifiers, configuration settings, time zone, language preferences, and other technical information captured by your browser or device.

f. Transaction Data
Includes payment information (excluding full credit card numbers), billing records, delivery details, and service transaction history.

g. Preference Data
Includes your marketing and communication preferences, subscription settings, and information regarding your interest in particular products or services.

4. Legal Bases for Processing Personal Data

We process your personal data under the following lawful bases, as outlined by the GDPR:

– Consent: When you explicitly permit us to process your data (e.g., for marketing communications).
– Contractual Necessity: When processing is required to fulfill a contract with you, such as service delivery or account management.
– Legitimate Interest: When processing serves our legitimate interests and those interests are not overridden by your data protection rights (e.g., fraud prevention, website optimization).
– Legal Obligation: When processing is necessary for compliance with legal requirements.

5. Your Data Protection Rights

You may exercise the following rights under applicable privacy laws:

– Right of Access: You may request access to the personal data we hold about you.
– Right to Rectification: You may request corrections to inaccurate or incomplete data.
– Right to Erasure: Also known as the “right to be forgotten,” you may request deletion of your personal data under certain circumstances.
– Right to Restrict Processing: You may request that we limit the processing of your data in specified situations.
– Right to Data Portability: You may request a copy of your personal data in a structured, commonly used, machine-readable format.
– Right to Object: You may object to processing based on our legitimate interests or direct marketing purposes.

To exercise these rights, please contact us using the information provided in Section 13.

6. Security Measures

We implement and maintain robust administrative, technical, and physical security measures designed to protect your personal data from unauthorized access, disclosure, loss, misuse, or destruction. These include but are not limited to:

– SSL/TLS encryption for data in transit,
– Controlled access rights and authentication protocols,
– Routine backups and system monitoring,
– Staff training in data protection practices.

While we strive to use commercially acceptable means to protect your personal data, no method of transmission over the Internet or electronic storage is absolutely secure.

7. International Data Transfers

Personal information we collect may be stored and processed outside your country of residence, including in jurisdictions that may not offer equivalent data protection laws. In such cases, we ensure appropriate safeguards are in place, including the use of Standard Contractual Clauses (SCCs) approved by the European Commission or verification of privacy certifications, to ensure a level of protection equivalent to that required under the EU and US data protection frameworks.

8. Data Retention

We retain personal data for no longer than is necessary for the purposes outlined in this Privacy Policy. Retention periods vary depending on data type and processing purpose:

– Usage Data: retained for analytics for up to 12 months.
– Account Data: retained during the life of the account and for up to 6 years thereafter for legal compliance.
– Profile Data: retained while the account remains active and for 12 months thereafter.
– Communication Data: retained for customer service recordkeeping for up to 3 years.
– Technical Data: retained for diagnostics and troubleshooting for up to 12 months.
– Transaction Data: retained for financial and legal compliance for up to 7 years.
– Preference Data: retained in accordance with user settings or up to 24 months after last interaction.

9. Cookie Policy

Our website, tweetpeddler.com, uses cookies and similar technologies to enhance your browsing experience and offer personalized content. Cookies fall into the following categories:

– Essential Cookies: Necessary for site navigation and core functionality.
– Functional Cookies: Enhance user experience by remembering preferences and login credentials.
– Analytics Cookies: Collect anonymized data to analyze traffic patterns and site usage.
– Performance Cookies: Measure responsiveness and error rates to improve usability.

10. Managing Cookies and Compliance

You can control and manage cookies via your browser settings or through our website’s cookie consent management tool. Users from the EU and UK are prompted to consent to non-essential cookies. California residents have the right to opt-out of the “sale” of personal data via appropriate settings on the cookie banner or using authorized mechanisms under the CCPA.

11. Children’s Privacy

TweetPeddler does not knowingly collect or solicit personal data from children under the age of 13. If we determine that personal data from a child under 13 has been collected without verified parental consent, we will delete that data promptly. If you are a parent or guardian and believe your child has provided us with personal data, please contact us at [email protected].

12. Updates to This Policy

We may update this Privacy Policy periodically to reflect changes in applicable laws or our data processing practices. Updated versions will be published on tweetpeddler.com. In cases of material changes that significantly affect your rights, we will provide prominent notice or seek your renewed consent, if required by law.

13. Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy or your personal data, please reach out to us at:

Email: [email protected]

At TweetPeddler, we are committed to full compliance with privacy regulations and responsible stewardship of your personal data. We welcome inquiries and will respond promptly to any privacy-related concerns you may raise.