Privacy Policy
1. Introduction
At findjamesnutley.com (the “Website”), we are committed to safeguarding your privacy and ensuring the protection of your personal data. We understand the importance of trust in our digital interactions and are dedicated to transparently handling your information with the highest standards of security and legal compliance. This Privacy Policy outlines how we collect, use, store, and share your personal data in accordance with applicable data protection laws, including the General Data Protection Regulation (GDPR) and the California Consumer Privacy Act (CCPA).
2. Scope of This Policy and Our Role as Data Controller
This Privacy Policy applies to all users who access or interact with the Website, including visitors, account holders, donors, contributors, and any individuals who provide data through our services. The Website, findjamesnutley.com, acts as data controller where we determine the purposes and means of processing your personal data. If you have any questions regarding this Policy or your personal data, you may contact us at [email protected].
3. Categories of Personal Data We Process
We process the following categories of personal data, depending on your interaction with the Website:
• Usage Data: Includes information such as your IP address, browser type, geographical location, referring URLs, device identifiers, pages visited, and time spent on each page.
• Account Data: Information provided when creating an account or subscription, including your full name, email address, physical or mailing address, and telephone number.
• Profile Data: Preferences, user-generated content, behavioral insights, donation history, or information about how you engage with our services and campaigns.
• Communication Data: Includes correspondence you send to us via support forms, email, or inquiry submissions, along with the history of these interactions.
• Technical Data: Information from your device and systems used to access our Website, such as your operating system, browser configuration, platform type, language settings, and system preferences.
• Transaction Data: Details of any financial or in-kind contributions you make through the Website, records of donations or transactions, relevant billing information, and delivery details if physical items are exchanged.
• Preference Data: Your marketing preferences, communication frequency settings, consent status for promotional communications, and subject matter interests.
4. Legal Bases for Processing Personal Data
We process personal data based on the following legal bases, as required by applicable data protection laws:
• Consent: Where you have explicitly agreed to the processing of your information for specific purposes, such as newsletter subscriptions or marketing activities.
• Contractual Necessity: To fulfill our obligations under an agreement with you, including provision of services, responding to inquiries, or processing donations.
• Legitimate Interests: To conduct and manage our operations in a way that serves our mission and enhances our services, provided that such interests do not override your fundamental rights and freedoms.
• Legal Obligation: Where processing is required to comply with applicable laws or regulatory requirements.
5. Your Rights
Under GDPR and CCPA, you have several rights regarding your personal data:
• Right of Access: You may request access to the personal data we hold about you.
• Right to Rectification: You have the right to have inaccurate or incomplete data corrected.
• Right to Erasure: You may request the deletion of your personal data, subject to certain exemptions.
• Right to Restriction: You may request that we limit the processing of your personal data in specific circumstances.
• Right to Portability: You can obtain a copy of your data in a structured, commonly used, and machine-readable format for use elsewhere.
• Right to Object: You may object to processing based on legitimate interest or direct marketing.
• Non-Discrimination: We will not discriminate against you for exercising your privacy rights under CCPA.
You can exercise these rights by contacting us at [email protected]. We may require verification of your identity before fulfilling such requests.
6. Security Measures
We implement technical and organizational measures to ensure a level of security appropriate to the risk related to the personal data we process. Measures include, but are not limited to:
• End-to-end encryption of data in transit and at rest.
• Access control to protect against unauthorized access, alteration, or disclosure.
• Routine data backups and failover systems.
• Staff data protection training and confidentiality agreements.
• Secure payment processing through PCI-DSS-compliant providers.
7. International Data Transfers
Where applicable, we may transfer personal data to service providers or partners located outside your country of residence, including jurisdictions that may not provide the same level of data protection. In such cases, we ensure that appropriate safeguards are in place, including adherence to Standard Contractual Clauses approved by the European Commission, or other lawful transfer mechanisms under GDPR and CCPA frameworks.
8. Data Retention
We retain your personal data only as long as necessary for the purposes described in this Policy, or to comply with legal, regulatory, or contractual obligations. Retention periods vary depending on the data category:
• Usage and Technical Data: Retained for up to 12 months for analytics and website optimization.
• Account and Profile Data: Retained for the duration of the user relationship and up to 7 years post-termination.
• Communication Data: Retained for 2 years after the last interaction or resolution of inquiry.
• Transaction Data: Retained for 7 years to comply with financial and regulatory obligations.
• Preference Data: Retained until preference is updated or consent is withdrawn.
9. Cookie Policy
We use cookies and similar tracking technologies to enhance user experience, remember your settings, analyze traffic, and deliver personalized content. Cookies may be:
• Essential Cookies: Necessary for core functionality such as login, navigation, and security.
• Functional Cookies: Enable us to remember user preferences and enhance usability.
• Analytics Cookies: Help us understand how users engage with the Website, using aggregated and anonymized data.
• Performance Cookies: Improve the speed, responsiveness, and layout of our site.
10. Cookie Management and Legal Compliance
Upon your first visit, you will be prompted to manage your cookie preferences consistent with GDPR and CCPA requirements. You may modify or withdraw your consent at any time through the cookie consent banner or your browser settings.
Under CCPA, you have the right to opt out of “sale” of personal data. While we do not sell personal data in the traditional sense, certain third-party services may be classified as such under CCPA definitions. To exercise your right to opt out, please contact us at [email protected] or use the cookie consent tools provided.
11. Children’s Privacy
We do not knowingly collect or process personal data from children under the age of 13. If we become aware that we have inadvertently collected such data, we will take immediate steps to delete it from our systems. Parents or guardians who believe their child may have submitted personal data to us should contact us promptly at [email protected].
12. Changes to This Policy
We reserve the right to update or amend this Privacy Policy as necessary to comply with legal requirements or business developments. Users will be notified of material changes via notices posted on the Website and are encouraged to review this Policy periodically to stay informed about how we protect your personal information.
13. Contact Information
If you have questions, concerns, or requests related to this Privacy Policy or the handling of your personal data, you may contact us at:
Email: [email protected]
Website: https://findjamesnutley.com
We are committed to respecting your rights and will respond promptly and diligently to any inquiries.
—
We affirm our ongoing dedication to privacy, data protection, and compliance with applicable global data laws. If you have any concerns regarding your data or this Privacy Policy, please don’t hesitate to contact us.