Privacy Policy
1. Introduction
Riftjoy (“we”, “us”, “our”) is committed to safeguarding the privacy and personal data of all visitors and users of our website, located at riftjoy.com (the “Website”). We recognize and respect the importance of data protection and are dedicated to managing your personal information responsibly and in accordance with applicable privacy and data protection regulations, including the General Data Protection Regulation (EU) 2016/679 (“GDPR”) and the California Consumer Privacy Act (“CCPA”).
This Privacy Policy outlines how we collect, use, disclose, store, and protect your personal data and the rights you have in relation to that data.
2. Scope of Policy and Data Controller Role
This Privacy Policy applies to all data collected through riftjoy.com and any related services or interactions you have with us online or offline. For the purposes of applicable data protection laws, Riftjoy is the data controller responsible for determining the purposes and means of the processing of your personal data.
3. Categories of Data We Process
We may collect and process the following categories of personal data, directly from you or through your interaction with the Website:
‣ Usage Data:
Information about how you access and use riftjoy.com, including IP address, browser type and version, pages visited, time spent, and session identifiers.
‣ Account Data:
Details provided when creating an account, including your name, mailing address, email address, telephone number, and login credentials.
‣ Profile Data:
Data related to your preferences, user behavior, purchase history, favorited items, and browsing habits.
‣ Communication Data:
Correspondence with us via email (including support inquiries and feedback), chatbots, or other communication platforms, along with metadata linked to such communications.
‣ Technical Data:
Information about the devices and systems you use to access our Website, such as device type, operating system, browser specifications, language settings, and other system configurations.
‣ Transaction Data:
Details related to purchases or service requests made through riftjoy.com, such as billing information, delivery address, order history, and payment method (note: we do not store payment card details; payments are processed through secure third-party providers).
‣ Preference Data:
Your choices concerning marketing communications, product alerts, promotional offers, and other interests you have indicated through the Website or account settings.
4. Legal Bases for Processing
We process your personal data lawfully, fairly, and transparently based on one or more of the following legal bases:
– Consent: Where you have given express consent to the processing of your personal data for one or more specific purposes (e.g., marketing or cookies).
– Contractual Necessity: To fulfill our contractual obligations to you, such as processing purchases or providing customer support.
– Legal Obligation: To comply with legal obligations, such as tax or regulatory requirements.
– Legitimate Interests: For purposes that support our legitimate business functions, such as ensuring Website security, service improvements, fraud prevention, or direct communications, provided such interests are not overridden by your data protection rights.
5. Your Rights
Under applicable data protection laws, you have the following rights regarding your personal data:
– Right of Access: Obtain confirmation as to whether your personal data is being processed and access a copy of such data.
– Right to Rectification: Request correction of inaccurate or incomplete personal data.
– Right to Erasure: Request deletion of your personal data where it is no longer necessary or where you withdraw consent, subject to our legal obligations.
– Right to Restrict Processing: Limit how your personal data is processed in certain circumstances.
– Right to Data Portability: Receive the personal data concerning you in a structured, commonly used, and machine-readable format and transmit it to another controller.
– Right to Object: To the extent permitted by law, object to the processing of your personal data based on our legitimate interests or for direct marketing purposes.
You also have the right to lodge a complaint with a supervisory authority if you believe your data rights have been infringed.
6. Security Measures
We implement robust technical and organizational safeguards to protect your personal data. These include, but are not limited to:
– Encryption of data at rest and in transit
– Secure data storage on industry-standard platforms
– Access controls with role-based authentication
– Periodic security audits and data protection impact assessments
– Internal staff training and strict confidentiality agreements
Despite our efforts, no transmission over the Internet or electronic storage system can be guaranteed as 100% secure.
7. International Data Transfers
Where data is transferred outside the European Economic Area (EEA) or other jurisdictions with data transfer restrictions, such transfers are performed in compliance with applicable data protection regulations. We use appropriate safeguards, including standard contractual clauses approved by the European Commission or relevant authorities to ensure the protection of your personal information.
8. Data Retention
We retain your personal data only for as long as necessary to fulfill the purposes outlined in this Privacy Policy, unless a longer retention period is required by law. Specific retention periods include:
– Account Data and Profile Data: Retained for the duration of your account and for up to 6 years thereafter for auditing and legal purposes.
– Transaction Data: Retained for a minimum of 7 years to comply with tax and accounting regulations.
– Communication and Support Data: Retained for 2 years following the latest communication.
– Usage and Technical Data: Retained for 12 to 24 months for analytics and operational continuity.
Once data is no longer needed, we securely delete or anonymize it.
9. Cookie Policy
We use cookies and similar tracking technologies on riftjoy.com to enhance user experiences, provide functionality, and gather analytics. The cookies we use fall into the following categories:
– Essential Cookies: Necessary for the operation of the Website and cannot be disabled.
– Functional Cookies: Enable enhanced functionality and personalization.
– Analytics Cookies: Collect information about how visitors use the Website to improve performance and content.
– Performance Cookies: Measure how the Website is performing so improvements can be made.
You may disable non-essential cookies, though this may impact site functionality.
10. Cookie Management & Compliance
We offer granular cookie consent management through a dedicated cookie banner when you first visit riftjoy.com. This mechanism allows users to:
– Accept all cookies
– Reject non-essential cookies
– Customize preferences for each category of cookies
You can also control cookies by adjusting browser settings or using opt-out mechanisms provided under relevant privacy frameworks, including Do Not Sell My Personal Information provisions under CCPA.
11. Children’s Privacy
Riftjoy does not knowingly collect or process personal data from children under the age of 13. If we become aware that such data has been collected in violation of this provision, we will delete it promptly. Parents or guardians who believe that their child has provided us with personal information are encouraged to contact us at [email protected].
12. Policy Updates & User Notifications
We reserve the right to amend this Privacy Policy at our discretion and at any time. Any material changes will be communicated through riftjoy.com via prominent notices or direct communication, where appropriate. Continued use of our Website indicates your acknowledgment and acceptance of the updated terms.
13. Contact Us
If you have questions or concerns about this Privacy Policy, your personal data, or how your rights are exercised, please contact us at:
Email: [email protected]
Website: riftjoy.com
We remain committed to full compliance with all applicable privacy laws and are here to address any privacy-related inquiries or requests.