Privacy Policy for Paloma Hollywood
1. Introduction
At Paloma Hollywood (“we,” “us,” or “our”), accessible at palomahollywood.com, we are deeply committed to safeguarding your privacy and ensuring the highest level of protection for your personal data. This Privacy Policy outlines how we collect, use, disclose, and protect information that identifies or can be used to identify you (“personal data”) in accordance with applicable privacy and data protection laws, including the General Data Protection Regulation (GDPR) and the California Consumer Privacy Act (CCPA).
We are dedicated to upholding your rights, maintaining transparency, and fostering trust in how we handle information provided to us through your interactions with our website, services, and communications.
2. Scope of Policy and Data Controller Role
This Privacy Policy applies to all users of our website, palomahollywood.com, as well as related services, interactions, and communications. Paloma Hollywood acts as the data controller with respect to all personal data collected through our website and services. As a data controller, we determine the purposes and means of processing your personal data and ensure such processing complies with applicable data protection regulation.
If you have any questions regarding this Privacy Policy, please contact us at [email protected].
3. Categories of Data Processed
We may collect, use, store, and process the following categories of personal data:
a) Usage Data
Information about how you interact with our website, including your IP address, browser type and version, referral source, pages visited, time spent on pages, date and time of visit, device identifiers, and similar analytics data.
b) Account Data
Information provided when you create an account or make a reservation or purchase, such as your full name, address, email address, phone number, and login credentials.
c) Profile Data
Details related to your preferences, past purchases, interests, browsing and selection behaviors, demographic information, and additional choices or history tied to your account.
d) Communication Data
Information obtained when you communicate with us, including emails, support inquiries, content of customer service communications, and details about your interactions with our team or systems.
e) Technical Data
Details about the device used to access our site or services, such as device model, operating system, platform, screen resolution, system language, regional and location settings, and configuration files.
f) Transaction Data
Payment data including method of payment, transaction ID, billing address, purchase history, product details, delivery preferences, and fulfillment status. Payment credentials are processed securely via third-party processors and are not stored by us.
g) Preference Data
Data pertaining to your marketing subscriptions, opt-in or opt-out choices, and information about your product or content interests for promotional outreach.
4. Legal Bases for Processing Personal Data
Our processing of your personal data is grounded in one or more of the following legal bases:
– Contractual Necessity: where processing is required to fulfill a contract entered into with you, such as for purchases or services you request.
– Legitimate Interests: where processing is necessary for our legitimate business interests, provided such interests are not overridden by your data protection rights.
– Consent: where you have actively provided consent for a specific form of data processing, including for marketing or cookies not strictly necessary.
– Legal Obligation: where processing is required to comply with our legal obligations and regulatory requirements.
5. Your Rights
Subject to applicable laws, you have the following rights with respect to your personal data:
– Right of Access: To request access to the personal data we hold about you.
– Right to Rectification: To correct inaccurate or incomplete personal data.
– Right to Erasure: To request the deletion of your personal data where there is no compelling reason for its continued processing.
– Right to Restriction: To request a restriction on processing in certain situations.
– Right to Data Portability: To receive a copy of your data in a structured, commonly used, and machine-readable format, and to request transfer to another data controller.
– Right to Object: To object to processing based on legitimate interests or direct marketing.
– Right Not to Be Subject to Automated Decision-Making: To request human intervention in automated decisions where legally required.
To exercise any of these rights, please contact us directly at [email protected].
6. Security Measures
We implement and maintain robust administrative, technical, and physical safeguards to protect your personal data against unauthorized access, disclosure, alteration, and destruction. Key measures include:
– Secure data encryption (both in transit and at rest)
– Role-based access control and multi-factor authentication
– Regular data backups and disaster recovery protocols
– Staff training in data protection and privacy awareness
– Continuous system monitoring and vulnerability management
7. International Transfers
We may process and store your personal data in jurisdictions outside of your own, including countries that may not offer the same level of data protection. Where we transfer personal data internationally (including to technology and service providers), we do so in compliance with applicable data protection laws and implement Standard Contractual Clauses or similar safeguards approved by the European Commission or competent authorities to ensure adequate protections are in place.
8. Data Retention
We retain personal data only for as long as necessary to fulfill the purposes for which it was collected, including satisfying legal, accounting, or reporting obligations. Data retention periods vary depending on the category of data:
– Usage Data: retained for up to 12 months for analytics and performance optimization
– Account and Profile Data: retained for the duration of your relationship with us plus 5 years
– Transaction Data: retained for 7 years to meet financial and tax compliance
– Communication Data: retained for up to 3 years to support customer service and legal obligations
– Technical and Preference Data: retained for as long as necessary to administer system performance and user experience
9. Cookie Policy
Our website uses cookies and similar tracking technologies to enhance your experience. We categorize cookies as follows:
– Essential Cookies: Necessary for the operation of palomahollywood.com, including navigation and access to secure areas.
– Functional Cookies: Enable personalized features such as remembering preferences.
– Performance Cookies: Collect aggregated data for analysis of site usage and performance improvements.
– Analytical Cookies: Help us understand user behavior and improve content delivery through data analytics tools such as Google Analytics.
10. Cookie Management & GDPR/CCPA Compliance
Visitors from the EU and California are provided granular controls to manage their cookie preferences via our Cookie Consent Management banner. You may update your preferences or withdraw consent at any time. You can also disable cookies directly through your browser settings.
We honor Do Not Track (DNT) signals where legally required and provide mechanisms to opt-out of data selling or sharing under CCPA.
To opt-out of marketing communications, you may follow the unsubscribe link in our emails or contact us directly at [email protected].
11. Children’s Privacy
Our services are not directed toward children under the age of 13, and we do not knowingly collect personal information from individuals under this age. If we become aware that such data has been collected without verified parental consent, we will take immediate steps to delete the information. Parents or guardians who believe their child has submitted data to palomahollywood.com may contact us at [email protected].
12. Policy Updates & User Notification
We may revise this Privacy Policy from time to time to reflect changes in laws, technology, or operational practices. All updates will be posted on palomahollywood.com. We encourage users to review this policy periodically. Where material changes are made, we will notify you through prominent notice on our site or direct communication where possible and required by law.
13. Contact Us
For questions, concerns, or to exercise your rights under this Privacy Policy, please contact us at:
Email: [email protected]
Website: https://www.palomahollywood.com
We are fully committed to maintaining compliance with applicable privacy laws, including GDPR and CCPA, and welcome any feedback regarding this policy or our data protection practices.
Your privacy is our priority.