Privacy Policy for HatchSmile.com
1. Introduction
Your privacy is of critical importance to us. At HatchSmile.com (“we”, “our”, or “us”), we are committed to safeguarding the personal data of our website users, customers, and partners. We uphold stringent standards of data protection, ensuring compliance with the General Data Protection Regulation (GDPR), the California Consumer Privacy Act (CCPA), and all applicable data privacy laws. This Privacy Policy explains the types of personal data we collect, how we use it, and the rights you have in relation to your personal information.
2. Scope of Policy and Data Controller Role
This Privacy Policy applies to all users of the website located at https://hatchsmile.com and any associated services, platforms, and digital offerings (collectively, the “Site”). For purposes of applicable data protection law, HatchSmile.com acts as the “data controller” when determining the purpose and manner in which your data is processed.
If you have questions or concerns about our use of your personal data, you may contact us at [email protected].
3. Categories of Data Processed
We may collect and process the following categories of personal data:
– Usage Data: Includes information about your browser type, device type, operating system, language settings, IP address, access times, session durations, referring URLs, and interactions with pages or features.
– Account Data: Includes names, email addresses, mailing addresses, usernames, phone numbers, and login credentials you provide when you create or update your account.
– Profile Data: Includes information such as your preferences, past purchases, browsing behavior, and product interests.
– Communication Data: Includes the content of emails, chat messages, support tickets, inquiries submitted via forms, and any communications you initiate with us through the Site.
– Technical Data: Involves device identifier data, session cookies, JavaScript settings, plug-in configurations, screen resolution, and diagnostic logs.
– Transaction Data: Includes order details, payment method (limited to non-sensitive data where applicable), billing and delivery addresses, and transaction history.
– Preference Data: Includes marketing preferences, subscription settings, feedback, and expressed interests in products, services, or offers.
4. Legal Bases for Processing
We collect and process your personal data under one or more of the following lawful bases, as permitted by the GDPR and analogous laws:
– Contractual Necessity: Where data processing is required to fulfill our contractual obligations to you (e.g., account creation, order processing, service delivery).
– Consent: Where you have given clear, informed consent to our use of your data for specified purposes (e.g., marketing communications).
– Legitimate Interests: Including improving the Site, security, fraud prevention, and customer service, where such interests are not overridden by your data protection rights.
– Legal Obligation: Where data processing is required to comply with legal or regulatory responsibilities.
5. Your Rights Under Data Protection Law
We are committed to providing you with secure access to your personal data and respecting your rights, which include:
– Right of Access: You may request a copy of the personal data we hold about you.
– Right to Rectification: You are entitled to have inaccurate or incomplete data corrected.
– Right to Erasure: You may request that we delete your personal data where there is no legal or contractual obligation to retain it.
– Right to Restrict Processing: You can request that we limit the processing of your personal data.
– Right to Data Portability: Upon request, we can provide your personal data in a structured, commonly-used, machine-readable format and, where feasible, transmit it to another controller.
– Right to Object: You may object to certain forms of data processing, including direct marketing activities.
– Right to Withdraw Consent: Where we rely on your consent for processing, you may withdraw it at any time without affecting the legality of prior processing.
To exercise any of these rights, please contact us at [email protected]. We will respond in compliance with applicable data protection laws.
6. Security Measures
We employ comprehensive technical and organizational security measures to protect your personal data from unauthorized access, disclosure, misuse, or loss. These measures include:
– End-to-end encryption of data in transit and at rest
– Role-based access controls and multi-factor authentication for internal systems
– Routine data backups and secure storage
– Intrusion detection and monitoring systems
– Regular staff privacy training and awareness initiatives
7. International Data Transfers
Where required, we may transfer your personal data outside of your jurisdiction, including to countries that may not provide the same level of data protection as your home country—for example, hosting providers or service vendors based in the United States or internationally. In such cases, we ensure lawful data transfers by implementing approved Standard Contractual Clauses, adequacy decisions, or other lawful safeguards recognized by the GDPR or CCPA.
8. Data Retention
We retain your personal data only for as long as necessary to fulfill the purposes for which it was collected, comply with legal obligations, resolve disputes, or enforce our agreements. Retention durations are as follows:
– Usage Data: retained for up to 12 months for analytics and fraud monitoring.
– Account Data: retained for the lifetime of the account plus up to 6 years thereafter.
– Profile Data: retained while actively used and up to 2 years post-interaction.
– Communication Data: retained for 2 years for customer support and audit purposes.
– Technical Data: retained for system diagnostics for up to 12 months.
– Transaction Data: retained for 7 years to meet financial and legal recordkeeping obligations.
– Preference Data: retained according to your account settings, or until consent is withdrawn.
9. Our Cookie Policy
We use cookies and similar technologies to enhance user experience, analyze usage data, and support targeted services. Types of cookies we use include:
– Essential Cookies: Enable site functionality (e.g., secure login, cart management).
– Functional Cookies: Remember your preferences and settings across sessions.
– Analytics Cookies: Provide aggregated data to help us optimize performance (e.g., Google Analytics).
– Performance Cookies: Measure site responsiveness, errors, and uptime stability.
10. Cookie Management and Compliance
You have the right to control the use of cookies. Upon your first visit to HatchSmile.com, a cookie consent banner will give you options to accept, customize, or reject non-essential cookies in compliance with GDPR and CCPA requirements. You can also manage cookies through your web browser settings. Note: Disabling some cookies may affect the performance and functionality of the Site.
11. Children’s Privacy
HatchSmile.com is not intended for, nor do we knowingly collect personal data from, children under the age of 13. If we learn that we have inadvertently collected such data, we will promptly delete it. Parents or guardians concerned about children’s data may contact us at [email protected] to request its removal.
12. Policy Updates
We reserve the right to modify or update this Privacy Policy at any time, without prior notice. Changes will take effect upon publication on HatchSmile.com. We may also notify users of material changes by email or through on-site notices where applicable. We encourage you to review this page periodically to stay informed about how we protect your personal data.
13. Contact Us
If you have any questions, concerns, or requests concerning this Privacy Policy, your data rights, or our data practices, please contact us:
Email: [email protected]
Website: https://hatchsmile.com
We are fully committed to maintaining compliance with applicable privacy laws and best practices. Your trust is important to us, and we value the opportunity to protect your personal data responsibly.
Thank you for visiting HatchSmile.com.