Privacy Policy for lent22.com

1. Introduction

At lent22.com, we are committed to upholding the highest standards of data protection and user privacy. We recognize the importance of securing personal information and comply with applicable privacy regulations, including the General Data Protection Regulation (GDPR) and the California Consumer Privacy Act (CCPA). This Privacy Policy outlines how we collect, use, disclose, and safeguard your personal data when you visit our website or otherwise interact with us.

2. Scope of This Policy and Data Controller Role

This Privacy Policy applies to all visitors, users, and others who access lent22.com and covers all data processing activities conducted by us in relation to the services offered through our website. For the purposes of data protection laws, lent22.com is the data controller of your personal information, meaning we determine the purposes and means of processing your data.

3. Categories of Data Processed

We may collect, use, store, and transfer different kinds of personal data about you, which we have grouped as follows:

– Usage Data: Includes information about how you use our website, such as your IP address, browser type and version, pages visited, session timestamps, referring URLs, and site interaction data.
– Account Data: Includes your full name, billing or shipping address, email address, and telephone number when you register for an account or make a purchase.
– Profile Data: Includes your username, purchase history, preferences, behavior on the site, and saved items or settings.
– Communication Data: Includes the content of customer support communications, inquiries via forms, and your interactions with our support and service teams.
– Technical Data: Includes device information, operating system and platform details, screen resolution, browser plugins, time zone, and language settings.
– Transaction Data: Includes information collected to process payments and deliveries, such as payment method details (collected securely via third-party processors), billing records, order history, and shipping details.
– Preference Data: Includes your marketing and communication preferences, newsletter opt-ins, promo participation history, and interests in specific product categories.

4. Legal Bases for Processing

We process personal data only when we have a lawful basis to do so under applicable law. These bases include:

– Consent: Where you have voluntarily provided your information and explicitly agreed to our use of it.
– Contractual Obligation: When processing is necessary for the performance of a contract with you or to take steps at your request prior to entering into a contract.
– Legitimate Interests: Where necessary for our legitimate business interests, such as fraud prevention, website analytics, product enhancement, and improving user experience, provided these interests are not overridden by your rights and freedoms.
– Legal Obligation: When processing is required to comply with a legal requirement to which we are subject.

5. Your Rights

Subject to applicable laws, you have the following rights regarding your personal data:

– Right of Access: You may request information about the personal data we hold on you.
– Right to Rectification: You may request corrections to inaccurate or incomplete personal data.
– Right to Erasure: You may request that your personal data be deleted, subject to legal or contractual retention requirements.
– Right to Restriction: You may request the limitation of processing where appropriate.
– Right to Data Portability: You may receive your personal data in a structured, commonly used format, and have the right to transmit that data to another controller.
– Right to Object: You may object to processing when it is based on legitimate interest or direct marketing.

To exercise any of these rights, please contact us at [email protected].

6. Security Measures

We implement comprehensive security measures designed to protect your personal information from accidental loss, unauthorized access, alteration, disclosure, or destruction. These include, but are not limited to:

– Secure Socket Layer (SSL) encryption
– Tiered access controls on systems and infrastructure
– Regular system and security audits
– Off-site backups and disaster recovery protocols
– Employee training on data protection principles

7. International Transfers

Your data may be processed, stored, and transferred outside your country of residence, including to countries outside the European Economic Area (EEA). In such cases, we ensure appropriate safeguards are in place, including the use of Standard Contractual Clauses approved by the European Commission or other valid mechanisms providing adequate protection.

8. Data Retention

We retain personal data only for as long as necessary to fulfill the purposes we collected it for, including to satisfy legal, accounting, or reporting requirements. Below are general retention periods:

– Usage and Technical Data: Retained for up to 24 months for analytics and diagnostics.
– Account and Profile Data: Kept until the account is deleted or becomes inactive for over 36 months.
– Communication Data: Retained for up to 3 years for customer service quality assurance.
– Transaction Data: Retained for legal compliance, typically up to 7 years.
– Preference Data: Retained until consent is withdrawn or updated.

9. Cookie Policy

We use cookies and similar tracking technologies on lent22.com to enhance your browsing experience, provide essential functionality, and analyze performance. Cookies we use include:

– Essential Cookies: Necessary to operate core features such as secure account login and transaction processing.
– Functional Cookies: Increase website usability by remembering user preferences and settings.
– Analytical Cookies: Help us understand how visitors interact with the site through data aggregation and statistical analysis.
– Performance Cookies: Used to measure the effectiveness of marketing campaigns and optimize site performance.

10. Cookie Management and Compliance with GDPR & CCPA

You can manage your cookie preferences at any time using the cookie consent banner or your browser settings. Under GDPR, we only store non-essential cookies on your device after obtaining your explicit consent. Under CCPA, users have the right to opt out of the sale or sharing of personal information derived from cookies. If you wish to exercise these rights, please contact [email protected] or use the appropriate cookie management tools displayed on the website.

11. Special Protections for Children Under 13

Lent22.com does not knowingly collect personal data from children under the age of 13. If we become aware that a child under this age has provided personal data without parental consent, we will take immediate steps to delete such information. If you believe we may have inadvertently collected data from a minor, please contact us at [email protected].

12. Policy Updates and User Notifications

We may update this Privacy Policy from time to time to reflect changes in legal requirements, technology, or our practices. When we make material changes, we will notify you prominently on lent22.com and/or by other methods of communication, consistent with applicable legal obligations. Continued use of the website signifies your acceptance of the modified policy.

13. Contact

If you have questions, concerns, or requests regarding this Privacy Policy or our data protection practices, please contact us at:

Email: [email protected]

We are committed to ensuring the privacy and protection of your personal data and endeavor to respond to all inquiries in a timely and transparent manner.

This Privacy Policy reflects our adherence to global data protection standards. For concerns related to your privacy or the handling of your personal information, we encourage you to contact us directly at [email protected].