Privacy Policy
1. Introduction
At jasondoyleracing.com (“we,” “our,” or “us”), we are fully committed to respecting and protecting your privacy. We understand the importance of the personal data we collect, and we comply with all applicable data protection laws, including the General Data Protection Regulation (EU) 2016/679 (“GDPR”) and the California Consumer Privacy Act of 2018 (“CCPA”). This Privacy Policy outlines how we collect, use, disclose, store, and safeguard your personal data when you visit, access, or use this website. We employ a privacy-first approach in handling all personal information entrusted to us.
2. Scope of Policy and Data Controller Role
This Privacy Policy applies to the personal data processed through your use of jasondoyleracing.com. We act as the “data controller” within the meaning of applicable laws for the personal information collected through our website. This means we determine the purposes and means of processing your personal data.
3. Categories of Data Processed
We may process the following categories of data:
a) Usage Data
Information related to your usage of the website, including browser type, device identifier, operating system version, IP address, geographical location, pages viewed, date and time of visits, and how you interact with website features.
b) Account Data
Information provided by you when creating an account or making a purchase, including your full name, billing and shipping addresses, email address, and telephone number.
c) Profile Data
Details concerning your preferences, product interests, engagement with marketing materials, and browsing and purchase behavior on jasondoyleracing.com.
d) Communication Data
Records of communications between you and us, including support inquiries, feedback submissions, email correspondence, and other contact history.
e) Technical Data
Information collected from your device, including mobile model, platform version, browser configuration, time zone setting, network provider, and diagnostic logs.
f) Transaction Data
Details of product orders and services you purchase through the website, including payment method, transaction status, goods and services ordered, and delivery details.
g) Preference Data
Information regarding your marketing and communication preferences, opt-in and opt-out statuses, and expressed interests in particular products or content categories.
4. Legal Bases for Processing
We will only collect and process personal data where we have a lawful basis to do so. Depending on the context, we rely on the following bases:
– Consent: Where you have affirmatively given us permission to use your personal data for a specified purpose.
– Contract: Where processing is necessary for the performance or initiation of a contract with you.
– Legitimate Interest: Where processing is necessary for our legitimate interests in providing and improving our services, provided that such interests do not override your fundamental rights and freedoms.
– Legal Obligation: Where the processing is necessary to comply with a legal obligation to which we are subject.
5. Your Rights
Under the GDPR and CCPA, you have various rights in connection with your personal data:
– Right of Access: You may request access to the personal data we hold about you.
– Right to Rectification: You may request correction of inaccurate or incomplete data.
– Right to Erasure (“Right to Be Forgotten”): You may request deletion of your data under certain conditions.
– Right to Restrict Processing: You may request that we restrict processing of your data under specific circumstances.
– Right to Data Portability: You may receive your data in a structured, commonly used, and machine-readable format and have the right to transmit it to another controller.
– Right to Object: You have a right to object to processing based on our legitimate interests or for marketing purposes.
– Right Not to Be Subject to Automated Decision-Making: You have the right not to be subject to profiling or decisions based solely on automated processing.
To exercise any of the above rights, please contact us at: [email protected].
6. Security Measures
We maintain strict physical, administrative, and technical safeguards to protect your personal data. These include but are not limited to:
– Data encryption using secure industry-standard protocols (SSL/TLS);
– Controlled access to data through user authentication and authorization policies;
– Regular data backups and secure storage;
– Employee training regarding data privacy and secure handling.
While no system can guarantee complete security, we take meaningful and proportionate steps to mitigate risks.
7. International Transfers
Where personal data is transferred outside the European Economic Area (EEA) or other applicable jurisdictions, we ensure compliance with international transfer requirements. Such safeguards include Standard Contractual Clauses, adequacy decisions, or other measures authorized under GDPR and relevant data protection laws. Transfers are only made to jurisdictions where appropriate data protection measures are in place.
8. Data Retention
We retain personal data only as long as necessary for the purpose for which it was collected, consistent with legal, contractual, and operational obligations. Retention periods vary based on the data category:
– Usage & Technical Data: up to 12 months
– Account & Profile Data: retained while the account is active and for up to 3 years after the last activity
– Communication Data: up to 5 years for support audits and legal purposes
– Transaction Data: up to 7 years, in line with accounting records requirements
– Preference Data: retained until updated by the user or upon opt-out
Upon expiration of the applicable retention period, personal data will be anonymized or deleted securely.
9. Cookie Policy
We use cookies to enhance user experience, evaluate website performance, and tailor marketing efforts. Our cookies fall into the following categories:
– Essential Cookies: Necessary for the site’s functionality and cannot be disabled.
– Functional Cookies: Allow the site to remember your preferences and enhance user experience.
– Performance & Analytics Cookies: Collect aggregated data to understand how users engage with content and improve performance.
– Marketing Cookies: Used to personalize marketing content and measure the effectiveness of advertising campaigns.
10. Cookie Management and Compliance
In accordance with GDPR and CCPA, users are informed of cookie use upon their first visit to jasondoyleracing.com. You may manage your cookie preferences through the cookie banner and settings available on our website. You can also configure your browser to refuse all cookies or to alert you when cookies are being sent. Please note that some parts of the website may not function properly if cookies are disabled.
11. Children’s Data
We do not knowingly collect, use, or disclose personal data from children under the age of 13. If we become aware that we have collected personal data from a child without verified parental consent, we will take appropriate steps to delete the data from our systems. If you believe that we may have collected information from a child under the applicable age threshold, please contact us immediately at [email protected].
12. Policy Updates
We reserve the right to update or modify this Privacy Policy at any time in order to comply with evolving legal, regulatory, and technological requirements. Material updates that significantly affect your rights or how your personal data is handled will be communicated via prominent notice on jasondoyleracing.com and, where appropriate, via email. We encourage you to periodically review this Policy for changes.
13. Contact
If you have any questions, concerns, or requests related to this Privacy Policy or your personal data, you may contact us at:
Email: [email protected]
We take privacy seriously and are committed to complying with all applicable data protection laws. If you have privacy concerns or questions about this Policy, please reach out to us using the contact details above.