PRIVACY POLICY
1. Introduction
At John Elliott & Co. (“we,” “our,” or “us”), we are fully committed to safeguarding your privacy and protecting your personal data. We understand that your privacy is important, and we treat your personal information with the highest standards of care, confidentiality, and transparency. This Privacy Policy outlines how we collect, use, share, and secure your information in the course of your use of our website, johnelliottco.com, in strict accordance with applicable data protection laws, including the General Data Protection Regulation (GDPR), the California Consumer Privacy Act (CCPA), and other relevant legislation.
2. Scope of Policy and Data Controller Role
This Privacy Policy applies to users and visitors of johnelliottco.com, including all services, transactions, and communications conducted through our website. For the purposes of the GDPR, John Elliott & Co. is the Data Controller responsible for the processing of your personal data as described herein.
3. Categories of Data Processed
We may collect and process the following categories of personal data through your interaction with our website and services:
a) Usage Data:
Information about how you use our website, including browser type and version, IP address, geographic location, referring website, device identifiers, pages visited, time spent, and timestamps of access.
b) Account Data:
Details provided during account creation or order placement, such as your full name, billing address, shipping address, email address, and phone number.
c) Profile Data:
Information derived from your account or derived through usage, such as your product preferences, purchase history, and behavioral interactions on johnelliottco.com.
d) Communication Data:
Records of communications including support inquiries, submitted forms, and correspondence with our customer service.
e) Technical Data:
Details about the device or system used to access our services, including operating system type and version, device type, screen resolution, and system language settings.
f) Transaction Data:
Details relating to purchases and orders made via our website, including payment method, order details, shipping and delivery information, and transaction status.
g) Preference Data:
Marketing and communication preferences, product wishlist entries, opt-in/opt-out status, and other consent indicators.
4. Legal Bases for Processing
Your personal data is processed under the following lawful bases:
– Performance of a Contract: When processing is necessary for the fulfillment of a purchase or service requested by you.
– Legitimate Interests: To analyze trends, optimize our services, prevent fraud, and improve user experience while ensuring your rights and freedoms are protected.
– Consent: Where you have explicitly consented to the use of your data for specified purposes, such as marketing communications or non-essential cookies. You may withdraw your consent at any time.
– Legal Obligation: When processing is necessary to meet statutory or regulatory compliance requirements.
5. Your Rights
You have the following rights concerning your personal data, as provided under GDPR and CCPA:
– Right to Access: Request confirmation of whether we process your personal data, and access to that data.
– Right to Rectification: Correct inaccurate or incomplete personal data.
– Right to Erasure: Request deletion of your data under certain conditions (“right to be forgotten”).
– Right to Restriction: Request limitation of processing in specific circumstances.
– Right to Data Portability: Obtain and reuse your personal data across different services.
– Right to Object: Object to processing based on legitimate interest or direct marketing.
– Right to Non-Discrimination: Under CCPA, you have the right to exercise your privacy rights without being subject to discriminatory practices.
To exercise these rights, please contact us at [email protected].
6. Security Measures
To ensure the protection of your personal data, we implement comprehensive technical and organizational security measures, including:
– Encryption of data during transmission and storage
– Access control policies with multi-factor authentication
– Regular security audits and vulnerability assessments
– Secure server infrastructure and firewall protection
– Routine employee data protection training
These protocols are in place to prevent unauthorized access, alteration, disclosure, or destruction of your personal information.
7. International Transfers
Your data may be transferred and processed in countries outside of your jurisdiction, including jurisdictions that may not offer the same level of data protection. In such cases, we employ standard contractual clauses approved by the European Commission or rely on other appropriate safeguards to ensure adequate protection in compliance with applicable data protection laws.
8. Data Retention
We retain personal data only as long as necessary to fulfill the purposes outlined in this Policy:
– Account and Profile Data: Retained as long as the user maintains an active account or as required by legal obligations.
– Transaction Data: Retained for a minimum of seven (7) years for tax and regulatory requirements.
– Communication Data: Generally retained for up to two (2) years to resolve customer service queries.
– Usage and Technical Data: Retained for up to three (3) years for analytics and performance optimization, unless anonymized.
Data may be retained longer where required to comply with legal obligations or to resolve disputes.
9. Cookie Policy
We use cookies and similar technologies to enhance your experience on johnelliottco.com. Cookies fall into the following categories:
– Essential Cookies: Necessary for website functionality, including shopping cart, login, and secure areas.
– Functional Cookies: Enable enhanced functionality and personalization.
– Analytics Cookies: Help us understand usage of the website through tools such as Google Analytics.
– Performance Cookies: Assist in optimizing website speed and performance.
10. Cookie Management and Compliance
In compliance with GDPR and CCPA, you are informed of cookie usage upon your first visit and are provided with options to manage your cookie preferences. You may adjust your consent settings at any time via our cookie management tool, accessible through the website footer. You may also disable cookies via your browser settings, though some services may be degraded as a result.
11. Children’s Privacy
Our services are not directed at or intended for individuals under the age of 13. We do not knowingly collect or process personal data from children. If we become aware that data has been collected from a child under 13 without verified parental consent, we will promptly delete such data. Parents or guardians who believe their child has submitted personal data may contact us at [email protected].
12. Policy Updates
This Privacy Policy may be updated periodically to reflect legal, regulatory, or operational changes. We will notify users of significant changes via prominent notices on johnelliottco.com or through registered communication channels. Continued use of the website after such updates constitutes acceptance of the revised Policy.
13. Contact Information
If you have questions, requests, or concerns regarding your personal data or this Privacy Policy, please contact us:
Email: [email protected]
Website: https://johnelliottco.com
We are committed to full compliance with privacy laws and to ensuring that your personal data is processed responsibly and transparently. Please reach out to us with any privacy-related inquiries or requests.