Privacy Policy

1. Introduction

Riftjoy.com (“we,” “us,” or “our”) is committed to protecting the privacy and personal data of all visitors, users, and customers interacting with our website. Maintaining the confidentiality and security of your personal information is at the core of our operations. This Privacy Policy outlines how we collect, use, disclose, and protect your data in accordance with applicable data protection laws, including the General Data Protection Regulation (GDPR) and the California Consumer Privacy Act (CCPA).

2. Scope of Policy and Data Controller Role

This Privacy Policy applies to all personal data collected and processed through riftjoy.com. We act as the “Data Controller” in relation to the information you provide or that we collect from you. This means we determine the purposes and manner in which your personal data is collected, used, and protected.

If you have any questions regarding the processing of your data, you may contact us at [email protected].

3. Categories of Data We Process

We collect and process various categories of personal data, primarily for the operation, improvement, and personalization of our services. These categories include:

A. Usage Data
Information about how you access and use our website, including IP addresses, browser types, session durations, interaction data, and referring URLs.

B. Account Data
Data you provide when creating an account or registering for our services, such as your name, address, email address, and phone number.

C. Profile Data
Information related to your user behavior and profile, such as purchase history, preferences, saved items, and personalized content configurations.

D. Communication Data
Records of communications with us, such as submitted support requests, contact form entries, feedback, and communication logs with customer service.

E. Technical Data
Information about the device and system you use to access riftjoy.com, including device model, operating system, browser configuration, mobile carrier, and application versions.

F. Transaction Data
Details of purchases and transactions made through our platform, including payment method information (processed via third-party providers), billing and shipping addresses, and delivery tracking data.

G. Preference Data
Your expressed choices and consents regarding marketing communications, product interest categories, wishlist items, and notification settings.

4. Legal Bases for Processing

We only process your personal data when permitted by applicable law and rely on the following legal bases:

– Consent: When you have given us explicit permission to process your personal data for a specified purpose.
– Contract Performance: When processing is necessary to fulfill our obligations under any contract with you.
– Legitimate Interests: For purposes such as improving our services, maintaining security, and marketing, provided such interests are not overridden by your rights.
– Legal Obligation: When we are required to process data to comply with applicable laws or regulations.

5. Your Data Protection Rights

Depending on your jurisdiction, you may have the following rights regarding your personal data:

– Right of Access: To obtain access to the personal data we hold about you.
– Right to Rectification: To request correction of inaccurate or incomplete personal data.
– Right to Erasure: To request that we delete your personal data under certain circumstances.
– Right to Restrict Processing: To limit how we process your data, particularly where accuracy or legality is contested.
– Right to Data Portability: To request the transfer of your personal data in a structured, commonly used, and machine-readable format.
– Right to Object: To object to processing based on legitimate interest or for direct marketing purposes.

To exercise any of these rights, please contact us at [email protected].

6. Security Measures

Protecting your data is of paramount importance. We implement industry-standard security measures, including:

– Data encryption during transit and storage
– Role-based access control and monitoring
– Regular data backups and disaster recovery practices
– Employee training on data protection principles
– Physical and digital access restrictions to secured environments

7. International Data Transfers

Where we transfer personal data outside the European Economic Area (EEA) or the United States, we ensure appropriate safeguards are in place, such as Standard Contractual Clauses approved by the European Commission or other legally approved mechanisms that maintain equivalent data protection standards.

8. Data Retention

We retain your personal data only for as long as necessary to fulfill the purposes outlined in this Privacy Policy or to comply with legal, regulatory, or contractual obligations. Our general retention practices are as follows:

– Usage and Technical Data: 24 months after the last interaction
– Account, Transaction, and Profile Data: Up to 7 years for legal, tax, and commercial record-keeping
– Communication Data: 5 years from the last communication
– Preference Data: Until you withdraw consent or delete your account

We may anonymize data for analytical purposes and retain it indefinitely in a non-identifiable format.

9. Cookie Policy

Riftjoy.com uses cookies and similar technologies to enhance user experience, analyze website traffic, and support personalization. Cookies may fall into the following categories:

– Essential Cookies: Necessary for basic website functionality and access.
– Functional Cookies: Remember your choices and improve your user experience.
– Analytics Cookies: Help us understand how users interact with the site.
– Performance Cookies: Optimize performance and load speeds.

10. Cookie Management and Compliance

Users may manage cookie preferences through the cookie banner presented upon first visit or via browser settings. For GDPR compliance, we obtain consent for non-essential cookies and allow opt-out. Under CCPA, California residents have the right to opt out of “sale” or “sharing” of their personal information tracked via cookies. Instructions and Do Not Sell My Personal Information links are available through the website footer or settings.

11. Children’s Privacy

Riftjoy.com does not knowingly collect or solicit personal data from children under the age of 13. If you are under 13, please do not use our services or provide any personal data. Parents or guardians who believe a minor has submitted personal information should contact us at [email protected] to request deletion.

12. Policy Updates and Notifications

We may update this Privacy Policy from time to time in order to reflect changes to our practices or for legal or regulatory reasons. Any material changes will be communicated appropriately through website notifications or direct communication channels where applicable. Continued use of riftjoy.com following updates constitutes acceptance of the revised policy.

13. Contact

If you have any questions, concerns, or requests regarding this Privacy Policy or your personal data, you may contact us at:

Email: [email protected]
Website: https://riftjoy.com

We are committed to upholding the highest standards of data protection and regulatory compliance, and we encourage you to reach out with any privacy-related inquiries.