SECTION 1 – WHAT INFORMATION IS COLLECTED?
When we use the term "Personal Data" we mean “any information relating to an identified or identifiable natural person who can be identified, directly or indirectly, in particular by reference to an identifier such as a name, an identification number, location data, an online identifier or to one or more factors specific to the physical, physiological, genetic, mental, economic, cultural or social identity of that natural person.” Personal Data that we collect (and have collected over the last 12 months) may vary with each separate purpose for which you provide it, and includes one or more of the following: name, physical address, an email address, phone number, credit card information including credit card number, expiration date, and billing address, and location data.
When you purchase something from our store, as part of the buying and selling process, we collect the personal information you give us such as your name, address and email address. This information is for our internal operations processes only; we do not sell your data to any third parties.
When you browse our store, we also automatically receive your computer’s internet protocol (IP) address in order to provide us with information that helps us learn about your browser and operating system.
We reserve the right to collect anonymous information based on your usage of this website automatically, either by this website or third-party services employed in this website (Usage Data).
We will obtain your consent before collecting or using your Personal Data except when the collection or use is:
(a) necessary for the performance of a contract to which the you are a party or in order to take steps prior to entering into a contract;
(b) necessary for compliance with a legal obligation that applies to us
(c) necessary for the purpose of the legitimate interests pursued by the us or by a third party, except where such interests are overridden by your interests or fundamental rights and freedoms which require protection of personal data.
We also obtain information from other sources. We protect this information according to the practices described in this Privacy Statement, plus any additional restrictions imposed by the source of the data. These sources vary over time, but could include:
- service providers that help us determine a location based on your IP address in order to customize our service and for other uses consistent with this Privacy Statement; or
- payment service providers who provide us with payment information, or updates to that information, based on their relationship with you.
We will never rent or sell your personal data without your consent, which may be withdrawn at any time.
SECTION 2 - WHAT DO WE DO WITH YOUR INFORMATION?
We may use your Personal Data for the performance of the Services or transaction for which it was given, our private, internal reporting for this website, and security assessments for this website. Such usage includes for purposes of conducting business through the website, analytics, payment processing, or other services connected to the website. We may also use your data to determine your general geographic location.
We reserve the right to make full use of Usage Data. For example, we may use Usage Data to provide better service to website visitors, customize the website based on your preferences, compile and analyze statistics and trends about the use of this website, and otherwise administer and improve the usability of this website.
We may display personal testimonials of satisfied customers on our site, along with other endorsements. If you wish to update or delete your testimonial, please contact us.
With your permission, we may send you emails about our store, new products and other updates.
We collect anonymous aggregate data of user interactions with the site which we use to improve site performance and functionality.
SECTION 3 - CONSENT
How do you get my consent?
When you provide us with personal information to complete a transaction, verify your credit card, place an order, arrange for a delivery or return a purchase, we imply that you consent to our collecting it and using it for that specific reason only.
If we ask for your personal information for a secondary reason, like marketing, we will either ask you directly for your expressed consent or provide you with an opportunity to opt-out.
Certain discount codes are provided for members of paid groups. My redeeming a discount code you authorize ProxyHeaven to verify your eligibility to redeem the discount code by contacting the group owners and sharing your personal information. In the case of a chargeback or dispute your information will be shared with the owner of the group that provided the discount code. By redeeming any discount code, you agree to these terms.
How do I withdraw my consent?
If after you opt-in, you change your mind, you may withdraw your consent for us to contact you, for the continued collection, use or disclosure of your information, at any time, by contacting us at email@example.com.
SECTION 4 - DISCLOSURE
We reserve the right to disclose your Personal Data only as described below. We reserve the right to disclose Usage Data without restriction.
We reserve the right to provide your Personal Data and Usage Data to any affiliated entities we may have, including our subsidiaries in the regular conduct of business and only for the purposes for which you provided the Personal Data. Affiliated entities are entities that we legally control (by voting rights) or that control us.
We reserve the right to provide access to your Personal Data and Usage Data to our trusted service providers that assist us with the operation and maintenance of this website. For example, we may contract with third parties to process payments, host our servers, provide security, and provide production, fulfillment, optimization, analytics, and reporting services. Our service providers will be given access to your Usage Data only as is reasonably necessary to provide the services for which they are contracted and will only be given access to your Personal Data as it is necessary to provide the service for which you originally provided the Personal Data.
We reserve the right to disclose your Personal Data and Usage Data if we have a good faith belief that access, use, preservation or disclosure of such information is reasonably necessary to: (1) Satisfy any applicable law, regulation, legal process or enforceable governmental request (such as for example, to comply with a subpoena or court order); (2) Detect, prevent, and address fraud or other illegal activity; and (3) Investigate, respond to, or enforce violations of our rights or the security of this website.
We do not sell your Personal Data to third parties - ever. Although we may disclose information about the use of our websites, that information does not contain Personal Data. Generally, we do not disclose Personal Data to third parties. However, we may share Personal Data with our contractors and service providers in order to provide the service for which you originally provided the Personal Data.
We may share your data with third parties for business purposes. Those purposes include, compliance with regulations, marketing, accounting, processing payments. In the last 12 months, we have shared the following categories of Personal Data with third parties:
- Anonymous use data
SECTION 5 - SHOPIFY
Our store is hosted on Shopify Inc. They provide us with the online e-commerce platform that allows us to sell our products and services to you.
Your data is stored through Shopify’s data storage, databases and the general Shopify application. They store your data on a secure server behind a firewall.
If you choose a direct payment gateway to complete your purchase, then Shopify stores your credit card data. It is encrypted through the Payment Card Industry Data Security Standard (PCI-DSS). Your purchase transaction data is stored only as long as is necessary to complete your purchase transaction. After that is complete, your purchase transaction information is deleted.
All direct payment gateways adhere to the standards set by PCI-DSS as managed by the PCI Security Standards Council, which is a joint effort of brands like Visa, Mastercard, American Express and Discover.
PCI-DSS requirements help ensure the secure handling of credit card information by our store and its service providers.
SECTION 6 - THIRD-PARTY SERVICES
In general, the third-party providers used by us will only collect, use and disclose your information to the extent necessary to allow them to perform the services they provide to us.
However, certain third-party service providers, such as payment gateways and other payment transaction processors, have their own privacy policies in respect to the information you are required to provide to them for your purchase-related transactions.
For these providers, we recommend that you read their privacy policies so you can understand the manner in which your personal information will be handled by these providers.
In particular, remember that certain providers may be located in or have facilities that are located a different jurisdiction than either you or us. So, if you elect to proceed with a transaction that involves the services of a third-party service provider, then your information may become subject to the laws of the jurisdiction(s) in which that service provider or its facilities are located.
As an example, if you are located in Canada and your transaction is processed by a payment gateway located in the United States, then your personal information used in completing that transaction may be subject to disclosure under United States legislation, including the Patriot Act.
When you click on links on our store, they may direct you away from our site. We are not responsible for the privacy practices of other sites and encourage you to read their privacy statements.
SECTION 7 - SECURITY
To protect your personal information, we take reasonable precautions and follow industry best practices to make sure it is not inappropriately lost, misused, accessed, disclosed, altered or destroyed.
Some Web browsers incorporate a "Do Not Track" feature that signals to websites that you visit that you do not want to have your online activity tracked. Each browser communicates "Do Not Track" signals to websites differently, making it unworkable to honor each and every request correctly. In order to alleviate any communication error between browsers and our website, we do not respond to "Do Not Track" signals at this time. As the technology and communication between browsers and websites improve, we will reevaluate the ability to honor "Do Not Track" signals and may make changes to our policy. Any specific inquiries related to our Do No Track Policy may be directed to the address below.
Any Personal Data which we may collect on this website may be stored and processed in our servers located in the United States or in any other country in which we, or our affiliates, subsidiaries, or agents may maintain facilities. By using this website, you consent to transfer of Personal Data outside your country of residence to servers located in the United States.
SECTION 8 - COOKIES
Here is a list of cookies that we use. We’ve listed them here so you that you can choose if you want to opt-out of cookies or not.
- _session_id, unique token, sessional, Allows Shopify to store information about your session (referrer, landing page, etc).
- _shopify_visit, no data held, Persistent for 30 minutes from the last visit, Used by our website provider’s internal stats tracker to record the number of visits
- _shopify_uniq, no data held, expires midnight (relative to the visitor) of the next day, Counts the number of visits to a store by a single customer.
- cart, unique token, persistent for 2 weeks, Stores information about the contents of your cart.
- _secure_session_id, unique token, sessional
- storefront_digest, unique token, indefinite If the shop has a password, this is used to determine if the current visitor has access.
SECTION 9 - AGE OF CONSENT
By using this site, you represent that you are at least the age of majority in your state or province of residence, or that you are the age of majority in your state or province of residence and you have given us your consent to allow any of your minor dependents to use this site.
We are committed to preserving online privacy for all of its website visitors, including children. This website is a general audience website. Consistent with the Children's Online Privacy Protection Act (COPPA), we will not knowingly collect any information from, or sell to, children under the age of 13. If you are a parent or guardian who has discovered that your child under the age of 13 has submitted his or her personally identifiable information without your permission or consent, we will remove the information from our active list, at your request. To request the removal of your child's information, please contact our website as provided below under "Contact Us,” and be sure to include in your message the same login information that your child submitted.
If our store is acquired or merged with another company, your information may be transferred to the new owners so that we may continue to sell products to you. In such case you may contact us to delete or amend any personal information currently held by ProxyHeaven according to the contact information at the bottom of this page.
SECTION 11 – NOTICE, MODIFICATION, AND DELETION OF PERSONAL DATA
Upon request, we will permit you to request information on, make changes or updates to, or cause to be removed from our databases your Personal Data for legitimate purposes. We will require verification of identification prior to approving such requests. We reserve the right to decline any requests that undermine the privacy rights of others.
You have the right to know what Personal Data we have about you, how we have collected it and how we are using it, who we have shared it with and whether we have sold it to anyone. You also have the right to know how long we plan to store your Personal Data, and why we are keeping it for that length of time. You can request this information for period starting up to 12 months prior to the date that you submit the request. Requests can be submitted by using the contact information at the end of this Statement. We will need to validate your identity before we can process your request.
You may ask us to delete any Personal Data we have about you. Requests can be submitted using the contact information at the end of this Statement We will need to validate your identity before we can process your request. We may not be able to delete your Personal Data if we need it to:
- Complete the transaction for which the personal information was collected, provide a good or service requested by the consumer, or reasonably anticipated within the context of a business’s ongoing business relationship with the consumer, or otherwise perform a contract between the business and the consumer.
- Detect security incidents, protect against malicious, deceptive, fraudulent, or illegal activity; or prosecute those responsible for that activity.
- Debug to identify and repair errors that impair existing intended functionality.
- Exercise free speech, ensure the right of another consumer to exercise his or her right of free speech, or exercise another right provided for by law.
- Comply with the California Electronic Communications Privacy Act pursuant to Chapter 3.6 (commencing with Section 1546) of Title 12 of Part 2 of the Penal Code.
- Engage in public or peer-reviewed scientific, historical, or statistical research in the public interest that adheres to all other applicable ethics and privacy laws, when the businesses’ deletion of the information is likely to render impossible or seriously impair the achievement of such research, if the consumer has provided informed consent.
- To enable solely internal uses that are reasonably aligned with the expectations of the consumer based on the consumer’s relationship with the business.
- Comply with a legal obligation.
- Otherwise use the consumer’s personal information, internally, in a lawful manner that is compatible with the context in which the consumer provided the information.
- REQUEST TO STOP PROCESSING/USING DATA
You may be able to request that we stop using or processing your data. Requests can be submitted using the contact information at the end of this Statement. We will need to validate your identity before we can process your request. We will honor requests to stop using or processing data in the following circumstances:
- for a period allowing us to verify the accuracy of your Personal Data in cases where you have contested its accuracy;
- where we no longer have the right to use or process the data and you would rather that we restrict its use than delete it;
- we no longer need the personal data for the purposes of the processing, are required the you for the establishment, exercise or defense of legal claims;
- you have objected to processing pursuant to section 3(c) above pending the verification whether our legitimate grounds override your objection.
QUESTIONS AND CONTACT INFORMATION
If you would like to: access, correct, amend or delete any personal information we have about you, register a complaint, or simply want more information contact our Privacy Compliance Officer at firstname.lastname@example.org. Responses to requests for personal information to be deleted will be responded to within 30 calendar days.