Privacy Policy
1. Introduction
At cameronbrooksart.com, your privacy is of paramount importance. We are committed to protecting your personal data and ensuring transparency about how we collect, use, and safeguard your information. This Privacy Policy outlines our dedication to privacy-first principles and our compliance with applicable data protection regulations, including the General Data Protection Regulation (GDPR) and the California Consumer Privacy Act (CCPA).
2. Scope and Data Controller
This Privacy Policy governs data collected through cameronbrooksart.com and any related interactions, including when you browse our website, make purchases, or contact us. For the purposes of applicable data protection legislation, the data controller responsible for your personal information is:
Cameron Brooks Art
[email protected]
3. Categories of Personal Data We Process
We may collect and process the following categories of personal data when you visit cameronbrooksart.com or interact with our services:
a) Usage Data
Data gathered automatically through the website and related services, including IP addresses, browser types, pages visited, duration of sessions, geographic locations, and referral URLs.
b) Account Data
Information you provide when creating an account or placing an order, such as your full name, delivery and billing addresses, email address, and phone number.
c) Profile Data
Information related to your preferences, interests, purchase history, and behavior within the site, including wish lists and product interactions.
d) Communication Data
Records of your exchanges with us, including support requests, inquiries through our contact forms, and email communications.
e) Technical Data
Device identifiers, operating systems, browser configurations, security settings, and language preferences used to access cameronbrooksart.com.
f) Transaction Data
Payment-related data, including order details, payment method, billing history, and delivery confirmations (note: we do not store full payment card details on our servers).
g) Preference Data
Marketing and communication preferences, expressed consents, and information regarding your interest in particular categories of products or content.
4. Legal Bases for Processing
We only process personal data when there is a lawful basis to do so, including:
– Performance of a Contract: To fulfill orders, deliver products, and manage customer accounts.
– Consent: When you explicitly consent to marketing communications or the use of certain cookies.
– Legitimate Interests: To ensure website security, prevent fraud, improve services, and analyze user engagement.
– Legal Obligation: Where we are required to retain personal information for compliance with applicable laws or legal claims.
5. Your Rights
Subject to applicable law, you have the following rights regarding your personal data:
– Right of Access – Request confirmation and access to personal data we hold about you.
– Right to Rectification – Request correction of incomplete or inaccurate data.
– Right to Erasure – Request deletion of your personal data, subject to retention obligations.
– Right to Restriction – Request limitation on how your personal data is processed.
– Right to Portability – Request transmission of your data to another controller in a structured, commonly used, machine-readable format.
– Right to Object – Object to processing of data based on legitimate interests or for direct marketing purposes.
– Right to Withdraw Consent – Where processing is based on consent, you may withdraw this at any time without affecting lawful processing prior to withdrawal.
To exercise your rights, please contact us at [email protected]. We may request verification of your identity before fulfilling your request.
6. Security Measures
We implement a range of technical and organizational security measures to protect your personal information from unauthorized access, alteration, disclosure, or destruction. These include:
– HTTPS encryption across cameronbrooksart.com
– Access control protocols and user authentication procedures
– Regular system backups and data recovery testing
– Security awareness training for relevant personnel
– Secure hosting and cloud infrastructure provided by trusted third-party vendors
Despite these measures, no system can guarantee complete security; users are advised to maintain vigilance and safeguard their credentials.
7. International Transfers
Your information may be processed in jurisdictions outside your country of residence, including in the United States. Where personal data is transferred internationally, we implement lawful safeguards such as Standard Contractual Clauses approved by the European Commission or ensure the third country has been deemed to provide an adequate level of data protection under GDPR.
Transfers involving California residents comply with all applicable CCPA and CPRA requirements regarding notification, access, and opt-out rights.
8. Data Retention
We retain personal data only for as long as necessary to fulfill the purposes for which it was collected, including:
– Usage and Technical Data: up to 2 years from collection
– Account and Profile Data: for the duration of the customer relationship and up to 5 years thereafter
– Communication Data: up to 3 years post interaction
– Transaction Data: retained for 7 years for tax, accounting, and legal compliance
– Preference Data: until you update your preferences or withdraw consent
Data may be retained for longer if required by law or necessary for defense of legal claims.
9. Cookie Policy
Our website uses cookies and similar tracking technologies to enhance your experience and provide tailored services. Cookies may be categorized as follows:
– Essential Cookies: Required for core website functionality, such as shopping cart management and secure login.
– Functional Cookies: Enable enhanced features like saved preferences or region-specific content.
– Performance and Analytics Cookies: Help us measure site activity and improve functionality using aggregated, pseudonymized metrics.
– Marketing Cookies: Used to personalize ads and content recommendations, based on your browsing behavior and preferences.
10. Cookie Management & Compliance
You have the right to accept or reject the use of non-essential cookies. When you first visit cameronbrooksart.com, you will be presented with a cookie banner that explains our use of cookies and requests your consent for those not strictly necessary. You may modify your cookie settings at any time via your browser settings or by accessing the cookie preferences section on our website. We honor “Do Not Track” signals where supported and offer opt-out mechanisms to comply with both GDPR and CCPA frameworks.
California residents may also exercise their right to opt-out of the sale or sharing of personal data by selecting the appropriate preferences or contacting us directly at [email protected].
11. Children’s Privacy
cameronbrooksart.com is not intended for use by children under the age of 13. We do not knowingly collect or process personal data from anyone under the age of 13 without verifiable parental consent. If we become aware that a child has provided us with personal data without this consent, we will take steps to delete such information as promptly as possible. If you become aware of such an incident, please contact us immediately at [email protected].
12. Changes to This Policy
We reserve the right to modify or update this Privacy Policy at our discretion to reflect changes in technology, law, or business operations. When changes are made, we will take appropriate steps to inform you, which may include updating the policy on cameronbrooksart.com and, where required by law, requesting your renewed consent. You are encouraged to review this policy periodically.
13. Contact
For any questions, concerns, or requests related to your personal data or this Privacy Policy, please contact:
Cameron Brooks Art
Email: [email protected]
Website: cameronbrooksart.com
We are committed to maintaining the highest standards of user privacy and data protection, in full compliance with GDPR, CCPA, and other applicable privacy laws. If you have any concerns about your privacy, do not hesitate to reach out.