PRIVACY POLICY

1. Introduction

At Hatchsmile.com, we are committed to safeguarding the privacy and personal data of our users. We respect your rights and recognize the importance of maintaining the trust you place in us. As a data controller, Hatchsmile.com processes your personal data in accordance with all applicable data protection laws, including the General Data Protection Regulation (“GDPR”) and the California Consumer Privacy Act (“CCPA”). This Privacy Policy outlines our practices regarding the collection, use, disclosure, and protection of your personal data.

2. Scope of This Policy and Data Controller Role

This Privacy Policy applies to all users and visitors of Hatchsmile.com and governs how we collect, use, and protect your personal data. Hatchsmile.com is the data controller of all personal data processed through our website and related services. Should you have any questions about the way we handle your personal data, please contact us at [email protected].

3. Categories of Data We Process

We collect and process the following categories of personal data:

a. Usage Data: This includes information automatically collected when you interact with Hatchsmile.com, such as browser type and version, IP address, referring URLs, device identifiers, pages visited, session duration, and website navigation paths.

b. Account Data: If you register or create an account on Hatchsmile.com, we may collect your full name, billing and shipping addresses, email address, and phone number.

c. Profile Data: Includes your preferences, interests, previously purchased products or services, and behavior on our platform to enhance your user experience.

d. Communication Data: Encompasses all correspondence between you and Hatchsmile.com, including support queries, emails exchanged, and message history.

e. Technical Data: Refers to information about the devices you use to access our site, including operating systems, hardware models, system configurations, and browser settings.

f. Transaction Data: Includes information relating to purchases and payments, such as payment method, card numbers (processed securely by payment processors), transaction history, and delivery information.

g. Preference Data: Contains your choices in relation to receiving marketing communications, customized offers, and product or service interests.

4. Legal Bases for Processing Personal Data

We process your personal data only when there is a legal basis to do so under applicable laws, specifically:

– Contractual Necessity: When processing is essential to perform our obligations under a contract (e.g., buying products or creating an account).
– Consent: When you have proactively consented to specific data processing activities (e.g., receiving newsletters or installing cookies).
– Legitimate Interest: When processing is necessary for our legitimate business interests, such as improving our website, preventing fraud, ensuring network security, and enhancing user experience—provided these interests are not overridden by your fundamental rights and freedoms.
– Legal Obligation: When processing is required to comply with statutory or regulatory duties.

5. Your Rights

Under GDPR, CCPA, and other applicable data protection laws, you have the following rights:

– Right of Access: You may request access to personal data held about you.
– Right to Rectification: You can ask us to correct incomplete or inaccurate personal data.
– Right to Erasure: You can request the deletion of your personal data, subject to legal retention requirements.
– Right to Restrict Processing: You may request that we restrict the processing of your personal data in certain circumstances.
– Right to Data Portability: You have the right to receive your data in a structured, commonly used, and machine-readable format and transmit it to another controller.
– Right to Object: You may object to our processing under specific legal bases, such as direct marketing or legitimate interests.

To exercise any of these rights, contact us at [email protected].

6. Security Measures

We employ industry-standard technical and organizational measures to protect your personal data. This includes, but is not limited to:

– Data encryption during transit and storage
– Role-based access control and secure authentication protocols
– Regular data backups and data integrity monitoring
– Security awareness and privacy training for staff
– Secure hosting infrastructure and vulnerability assessments

While we strive to use commercially acceptable means to protect your information, no method of transmission over the internet is 100% secure.

7. International Data Transfers

Where your personal data is transferred outside of the European Economic Area (EEA) or other jurisdictions with equivalent protections, we will implement appropriate safeguards, including Standard Contractual Clauses approved by the European Commission and supplemental security measures as required by applicable law.

8. Data Retention

We retain personal data only for as long as necessary for the purposes it was collected. Retention periods are defined as follows:

– Usage and Technical Data: Up to 12 months for analytics and site improvement
– Account and Profile Data: Retained while the account is active and for up to 6 years after account termination
– Transaction Data: Retained for regulatory, tax, and audit purposes for up to 7 years
– Communication Data: Retained up to 3 years after resolution of query
– Preference Data: Retained until you update or withdraw consent

9. Cookie Policy

Hatchsmile.com uses cookies and similar tracking technologies to improve user experience. Cookies are categorized as follows:

– Essential Cookies: Required for basic website functionality
– Functional Cookies: Enable enhanced functionality and personalization
– Analytics Cookies: Collect information on usage patterns to help us understand user behavior
– Performance Cookies: Track the performance and loading times of the website

Cookies do not typically contain personally identifiable information but may be linked to such data if you have an account with us.

10. Cookie Management and Compliance

Upon your first visit to Hatchsmile.com, you will be presented with a cookie consent banner. Under GDPR and CCPA, you may:

– Accept or reject non-essential cookies
– Withdraw or modify your consent at any time using cookie settings
– Use browser settings to block or delete cookies

We respect the “Do Not Track” signals and ensure transparency in accordance with privacy regulations.

11. Children’s Privacy

Hatchsmile.com does not knowingly collect information from or market to children under the age of 13. If we discover that we have collected personal data from a minor without verified parental consent, we will promptly delete such information. If you are a parent or guardian and are concerned that your child may have provided personal data, please contact us at [email protected].

12. Policy Updates

We may update this Privacy Policy to reflect changes in our practices, legal requirements, or technological developments. Any amendments will be posted on Hatchsmile.com. Where changes materially affect your rights or how we process personal data, we will alert you via email or prominent notice on the site.

13. Contact

If you have any questions, requests, or concerns related to this Privacy Policy, our data practices, or the way Hatchsmile.com processes your personal data, please reach out to us at:

Email: [email protected]

We are committed to ensuring full compliance with applicable privacy regulations and to maintaining the highest standards of data protection. If you have any privacy concerns, we welcome you to contact us for further clarification or assistance.