Privacy Policy for twentyfour20.com

1. Introduction

At twentyfour20.com (“we”, “our”, or “us”), your privacy is of paramount importance. We are firmly committed to safeguarding your personal information and handling it in a responsible and transparent manner. This Privacy Policy outlines how we collect, use, share, and protect your data in accordance with applicable privacy laws, including the General Data Protection Regulation (GDPR) and the California Consumer Privacy Act (CCPA). Our mission is to provide a trusted digital environment centered around respect for your privacy rights.

2. Scope of Policy and Data Controller Role

This Privacy Policy applies to all personal data collected through our website (twentyfour20.com) and related services, features, content, and communications. For the purposes of data protection legislation, twentyfour20.com is the controller of your personal data, which means we determine the purposes and means of processing your information.

3. Categories of Data Processed

We collect and process various categories of personal information, including but not limited to:

a. Usage Data
Includes information regarding how you use twentyfour20.com, such as your browser type, IP address, time zone, access times, unique device identifiers, and referring/exit pages.

b. Account Data
Personal information you provide when creating an account or making a purchase, including your full name, email address, physical or billing address, and telephone number.

c. Profile Data
Includes information collected about your preferences, purchase history, content interactions, and user behavior within our site.

d. Communication Data
Includes records of your interactions with us, for example, via emails, chat, customer support requests, and contact forms submitted through twentyfour20.com.

e. Technical Data
Data collected about your device and configuration, including operating system, hardware model, browser plug-ins, internet connectivity, and system diagnostics.

f. Transaction Data
Includes payment information (e.g., masked payment card details via third-party processors), shipping addresses, order tracking, and delivery confirmations.

g. Preference Data
Information related to your marketing preferences, newsletter opt-ins, notification settings, and areas of interest concerning our products or services.

4. Legal Bases for Processing

We process your personal data under the following lawful bases as provided by the GDPR:

– Performance of a contract: To fulfill obligations under a service or purchase agreement with you.
– Consent: Where you have explicitly granted permission for specific uses of your data (e.g., newsletters).
– Legal obligation: Where processing is required to comply with legal or regulatory requirements.
– Legitimate interest: Where justified by business interests, provided such interests do not override your data protection rights (e.g., website analytics, fraud prevention, product improvements).

Under the CCPA, we do not sell your personal information and honor all consumer rights provided under the statute.

5. Your Rights

In accordance with data protection laws, you have the following rights:

– Right of access: You may request copies of personal information we hold about you.
– Right to rectification: You may request that we correct inaccurate or incomplete data.
– Right to erasure: Also known as the “right to be forgotten,” you may request deletion of personal data.
– Right to restriction: You may request limitation of data processing in certain scenarios.
– Right to data portability: You may request your data in a structured, commonly used format for transfer to another controller.
– Right to object: Where processing is based on legitimate interests, you may raise objections.

California residents also have the right under the CCPA to opt-out of certain data processing, access their personal information, and request deletion.

To exercise any of these rights, please contact us at [email protected].

6. Security Measures

We implement robust technical and organizational security measures to protect your data against unauthorized or unlawful processing, accidental loss, destruction, or damage. These measures include encryption, secure access controls, firewall protections, regular data backups, and staff training on data privacy compliance.

7. International Transfers

Your personal data may be transferred to and processed in countries outside of your jurisdiction. Where such transfers occur, we employ Standard Contractual Clauses and other lawful mechanisms to ensure adequate protection in line with GDPR requirements. By using twentyfour20.com, you understand that your data may be processed outside of your country of residence, including in jurisdictions that may not offer the same level of data protection.

8. Data Retention

We retain personal data only as long as necessary to fulfill the purposes for which it was collected:

– Usage Data: retained for up to 26 months for analytics purposes.
– Account and Profile Data: retained for the duration of your active account and up to seven years following closure.
– Communication Data: retained for three years for operational continuity.
– Transaction Data: retained for up to seven years for legal, tax, and audit compliance.
– Preference Data: retained until you update or revoke your preferences.

9. Cookie Policy

Our site uses cookies and similar tracking technologies. These may include:

– Essential Cookies: Required for core site functionality and account authentication.
– Functional Cookies: Enhance user experience, such as remembering preferences or enabling chat support.
– Analytics Cookies: Collect statistical insights using tools like Google Analytics.
– Performance Cookies: Measure site speed, usage trends, and user interactions to optimize performance.

These technologies may collect data such as IP address, browser type, session length, and referral links. Cookies are only used as necessary and in compliance with applicable law.

10. Cookie Management and Compliance

Your consent is solicited for non-essential cookies upon your first visit to twentyfour20.com. You may update your cookie preferences at any time from your browser settings or through cookie preference tools we may provide.

Under GDPR, we only use cookies that require consent after receiving your opt-in. Under CCPA, you are entitled to opt-out of tracking through cookies that constitute a sale of personal information, although we do not engage in such sales.

11. Protection for Children Under 13

We do not knowingly collect personal information from children under the age of 13. If we become aware that such data has been provided without verifiable parental consent, we will take steps to delete it promptly. If you believe a minor has shared personal information with us, please contact us immediately at [email protected].

12. Policy Updates

We may update this Privacy Policy to reflect changes in legal requirements, best practices, or enhancements to our data processing activities. You will be notified of any material updates through our website or via email, where applicable. Your continued use of twentyfour20.com constitutes agreement with the current version of the Privacy Policy.

13. Contact

For any questions, concerns, requests, or complaints regarding this Privacy Policy or our processing of your personal data, please contact us at:

Email: [email protected]
Website: twentyfour20.com

We are committed to full compliance with applicable data protection laws and welcome your inquiries regarding your privacy rights.