Privacy Policy for thedrteethbigband.com

1. Introduction

At The Dr. Teeth Big Band (“we”, “our”, or “us”), your privacy and the security of your personal data are of paramount importance. We are fully committed to safeguarding any personal information collected through our website, thedrteethbigband.com, and complying fully with applicable data protection laws, including the General Data Protection Regulation (EU Regulation 2016/679) (“GDPR”) and the California Consumer Privacy Act (“CCPA”) as amended by the CPRA. This Privacy Policy outlines how we collect, use, disclose, and protect your data, and your statutory rights regarding your personal information.

2. Scope of This Policy and Role as Data Controller

This Privacy Policy applies to all personal data collected, stored, or processed by us when you access or use our website at thedrteethbigband.com, contact our support team, or interact with us in any way. For the purposes of applicable data protection legislation, we act as the “data controller” for all personal data processed through our website.

By using thedrteethbigband.com, you acknowledge that you have read and understood this Privacy Policy.

3. Categories of Data We Process

We collect and process the following types of personal data:

a. Usage Data
Information about how you use our site, including your browser type, IP address, access times, pages viewed, referring website addresses, session duration, and interactions with site features.

b. Account Data
Information you provide when creating an account or registering for services, such as your full name, email address, phone number, billing and shipping addresses.

c. Profile Data
Details related to your interests, purchase history, account preferences, and user behavior on thedrteethbigband.com.

d. Communication Data
Correspondence records including messages sent to our support team, inquiries via contact forms, feedback, and communications history.

e. Technical Data
Device and browser information, connection data, operating system versions, screen resolution, language settings, and diagnostic logs.

f. Transaction Data
Payment and transaction history including billing details, delivery addresses, order information, and information necessary for fraud prevention.

g. Preference Data
Your marketing preferences, consents given for promotional emails or SMS, and information on products or content you choose to engage with.

4. Legal Bases for Processing Personal Data

We process your personal data only when lawfully permitted under applicable data protection laws, based on the following legal grounds:

– Consent: Where you affirmatively opt in, e.g., for marketing communications.
– Contractual necessity: Where the processing is necessary to fulfill the terms of a contract, such as processing your orders.
– Legitimate interests: Where we have a fair, lawful business reason to process your data, provided it is not overridden by your personal rights.
– Legal obligation: Where the processing is necessary to comply with legal and regulatory duties.

5. Your Rights

Subject to applicable local laws, you have the following rights concerning your personal data:

– Access: To obtain confirmation as to whether we hold your personal data and, if so, request a copy.
– Rectification: To request correction of any inaccurate or incomplete personal data.
– Erasure: To request deletion of your personal data, under certain circumstances.
– Restriction: To request limiting the processing of your personal data where appropriate.
– Portability: To request a copy of your personal data in a structured, commonly used, and machine-readable format for transfer to a third party.
– Objection: In certain cases, to object to the processing of your personal data.

To exercise any of these rights, please contact us at [email protected].

6. Security Measures

We implement robust technical and organizational measures to protect your personal data against unauthorized access, loss, and misuse. These include:

– SSL/TLS encryption for data in transit
– Access controls and strict internal data handling policies
– Secure authentication mechanisms
– Regular data backups and audit trails
– Staff training on confidentiality and data protection regulations

Despite these precautions, no system is completely immune from intrusion. We encourage responsible use and additional security measures on your devices.

7. International Data Transfers

Where we transfer personal data to service providers, partners, or systems located outside of your jurisdiction, including outside the European Economic Area or California, such transfers occur under appropriate safeguards such as:

– Standard Contractual Clauses approved by the European Commission
– Binding Corporate Rules or comparable legal mechanisms ensuring adequate data protection
– Verification of regional adherence to recognized foreign data protection frameworks

8. Data Retention

We retain personal data only for as long as necessary to fulfill the purposes set out in this Privacy Policy, subject to applicable legal, contractual, or regulatory obligations. Retention periods are defined as follows:

– Usage and Technical Data: 12 months
– Account and Profile Data: For the duration your account is active and up to 3 years after account closure
– Transaction and Communication Data: 7 years for legal compliance and audit purposes
– Preference Data: Until consent is withdrawn or no longer relevant

Anonymized or aggregated data may be retained indefinitely for analytical and business development purposes.

9. Cookie Policy

Our website, thedrteethbigband.com, uses cookies and similar technologies to enhance user experience and analyze website performance. Cookies fall into the following categories:

– Essential Cookies: Necessary for the basic functioning of the site.
– Functional Cookies: Facilitate user preferences and enhanced features.
– Analytics Cookies: Collect aggregated statistical information to understand usage.
– Performance Cookies: Improve site speed and user interaction tracking.

We do not use cookies to profile individual users or for automated decision-making without consent.

10. Cookie Management and Regulatory Compliance

Upon visiting our site, you will be presented with choices to accept, reject, or customize cookie preferences in accordance with GDPR and CCPA provisions. You can withdraw or modify consent at any time by accessing your browser settings or using the on-site cookie management tools.

California residents also retain the right to opt-out of the sale or sharing of personal data under CCPA. We honor global privacy control (GPC) signals in supported browsers.

11. Protection of Minors

Our website and services are not intended for children under the age of 13. We do not knowingly collect or process personal data relating to children under the minimum age threshold specified by relevant laws. If we are made aware of any such data being collected without verifiable parental consent, we will delete it promptly.

12. Policy Updates

We reserve the right to modify this Privacy Policy from time to time to ensure compliance with legal standards and operational changes. Updates will be posted on this page with clear indication of revisions. We encourage you to check this Policy periodically to stay informed about how we protect your data.

In cases of material changes, we will provide additional notice through appropriate means (e.g., email notice or a pop-up on our website).

13. Contact Us

If you have questions, concerns, or requests regarding this Privacy Policy or how your personal data is handled, you may contact us at:

[email protected]

We are committed to handling privacy inquiries promptly and transparently.

Your trust is vital to us, and we pledge to uphold the highest standards of privacy and data protection in line with global regulations.