Privacy Policy
Windowsera (accessible at https://windowsera.com) is committed to protecting your personal privacy and safeguarding your personal data. This Privacy Policy outlines how we collect, use, store, and disclose your personal information in accordance with applicable data protection laws, including the General Data Protection Regulation (EU) 2016/679 (“GDPR”) and the California Consumer Privacy Act (“CCPA”). We are fully dedicated to ensuring transparency, user control, and respect for your privacy rights.
1. Commitment to Privacy and Data Protection
At Windowsera, we highly value your privacy. We implement rigorous data protection principles and maintain industry-standard practices to ensure your personal information is collected, processed, and used in a secure and lawful manner. We are committed to offering you full transparency on how your data is processed and ensuring you maintain full control and understanding of your privacy rights.
2. Scope of Policy and Data Controller Role
This Privacy Policy applies to all users and visitors of the Windowsera website, available at windowsera.com. It governs how your personal data is collected through our site and related services.
For purposes of the GDPR, Windowsera is the Data Controller of your personal data. This means we determine the purposes and means of processing the personal information you provide to us.
For residents of California, Windowsera is considered a “business” under the CCPA, and this policy outlines your rights and our obligations under that law.
3. Categories of Personal Data Processed
We collect various categories of data, either directly from you or automatically through your use of our website or services:
a. Usage Data:
Includes information about how you use our website such as IP address, browser type and version, time zone setting, pages visited, referring URLs, session time, clickstream data, and other diagnostic data.
b. Account Data:
When you create an account or engage in correspondence with us, we collect identifying information such as your full name, billing/shipping address, email address, and telephone number.
c. Profile Data:
Includes your preferences, feedback, purchase history, browsing behavior, account settings, and any files or data you voluntarily submit through your account interface.
d. Communication Data:
Records of correspondence with us including your queries, complaints, support requests and any related messaging through email or live chat.
e. Technical Data:
Device-specific data such as hardware model, operating system, device identifiers, network and connection information, system configurations, browser plug-ins, and mobile platform identifiers.
f. Transaction Data:
Includes payment information (via secure third-party processors), purchase records, product or services ordered, delivery data, and related fulfillment records.
g. Preference Data:
Includes explicit marketing and cookie consent choices, newsletter opt-ins, preferred categories or products, and account configuration settings.
4. Legal Bases for Processing (GDPR)
We process personal data lawfully under the following legal grounds:
– Consent: Where you have actively given your explicit consent for a particular purpose, such as subscribing to our newsletters or accepting cookies.
– Performance of Contract: Where processing is necessary to fulfill contractual obligations, such as delivering products or services you have purchased.
– Legal Obligation: Where we are required to comply with legal or regulatory mandates.
– Legitimate Interest: Where processing is necessary for our legitimate business interests, provided your interests or fundamental rights do not override those interests. This includes analytics, improving services, fraud detection, and protecting the integrity of our systems.
5. Your Rights
As a data subject under the GDPR or a consumer protected under the CCPA, you have specific rights with respect to your personal data:
a. Right to Access:
You have the right to request confirmation as to whether your personal data is being processed, and access to such data.
b. Right to Rectification:
You may request correction or amendment of inaccurate, incomplete, or outdated data.
c. Right to Erasure:
You may request deletion of your personal data, subject to certain exceptions.
d. Right to Restriction:
You may request restrictions on the processing of your personal data under specific circumstances.
e. Right to Data Portability:
You have the right to receive your personal data in a structured, commonly used, and machine-readable format and to transmit it to another controller.
f. Right to Object:
You may object to the processing of your personal data where processing is based on legitimate interest or for direct marketing purposes.
g. Do Not Sell My Personal Information (CCPA):
Windowsera does not sell your data. If this changes in the future, you will be given clear options to opt out.
To exercise any of these rights, please contact us at: [email protected]
6. Security Measures
We implement appropriate administrative, technical, and organizational measures to ensure a high level of data protection. These include:
– Data encryption during transmission and storage
– Role-based access control and authentication
– Firewall and intrusion detection systems
– Regular security audits
– Staff training and confidentiality agreements
– Secure data backups and disaster recovery protocols
7. International Data Transfers
Your personal data may be transferred to and stored at locations outside the European Economic Area (EEA) or your country of residence. In such cases, Windowsera ensures adequate protection by employing:
– Standard Contractual Clauses approved by the European Commission
– Partnerships with service providers certified under recognized data protection compliance mechanisms
– Appropriate safeguards and data access controls
8. Data Retention
We retain personal data for only as long as necessary to fulfill the purposes for which it was collected, or to comply with legal, regulatory, or contractual obligations. General retention guidelines include:
– Account Data: Retained until account deletion or 5 years after last activity
– Communication Data: Retained for 3 years for support and audit purposes
– Transaction Data: Stored for 7 years for accounting and tax compliance
– Technical and Usage Data: Retained for analytics purposes for up to 2 years
– Marketing Preference Data: Retained until consent withdrawn
9. Cookie Policy
The Windowsera website uses cookies and similar tracking technologies to provide a functional and personalized browsing experience. Cookies used include:
– Essential Cookies: Necessary for website operation, e.g., login, security, navigation
– Functional Cookies: Enhance usability and personalization (e.g., UI preferences)
– Analytics Cookies: Provide statistical data about user behavior for improving our services (e.g., through Google Analytics)
– Performance Cookies: Monitor performance metrics to optimize site speed and UX
10. Cookie Management and Regulatory Compliance
Upon visiting windowsera.com, you will be asked to provide consent for non-essential cookies. You may also:
– Change your cookie settings at any time via your browser
– Use cookie banner options to accept or reject cookies
– Withdraw consent using settings on our Cookie Preferences page
We honor Do Not Track (DNT) browser signals and comply with browser-level privacy settings to the extent technically feasible.
11. Protection of Minors
Windowsera does not knowingly collect or solicit data from children under the age of 13. If we become aware that a person under 13 has submitted personal information without verifiable parental consent, such data will be deleted immediately. Parents who believe their child may have provided data may contact us promptly.
12. Policy Updates and Notification
This policy may be updated periodically to reflect changes in legal, technical, or business developments. We will endeavor to notify users of substantial changes through a notice on our website or through account-specific communication. Continued use of windowsera.com after updates constitutes acceptance of the revised terms.
13. Contact Us
If you have any questions, concerns, or requests regarding your personal data or our privacy practices, we encourage you to contact us directly:
Email: [email protected]
We are committed to complying with applicable data regulations and to ensuring your data is handled lawfully and transparently. If you have any privacy concerns, we invite you to reach out at any time.
