• Home
  • Data Privacy Policy

Data Privacy Policy

Introduction

Welcome to the data privacy policy for Casey Jane Dickerson. We prioritize safeguarding your personal information. This policy outlines how we manage your data when you visit our websites, regardless of your location. It also outlines your privacy rights and the legal safeguards in place.

Important Information:

Purpose of this Privacy Policy

This privacy policy is designed to provide you with information on how Casey Jane Dickerson collects and processes your personal data when you use our website. This includes data you provide when sharing personal information or consenting to receive materials from us or our business partners. This website is not intended for children, and we do not knowingly collect data related to children.

Controller

Casey Jane Dickerson is the controller responsible for your personal data. We may consist of different legal entities, but this policy applies to each entity within Casey Jane Dickerson that operates this website and processes your data. We have a designated Data Protection Manager (DPM) responsible for overseeing privacy policy questions and requests to exercise your legal rights.

The Data We Collect About You

Personal data refers to information that can identify an individual. We may collect, use, store, and transfer various types of personal data, including:

  • Identity Data: such as your name, username, marital status, date of birth, and gender.
  • Contact Data: including billing address, email address, and phone numbers.
  • Financial Data: like bank account and payment card details.
  • Transaction Data: comprising payment details and information about products or services you’ve purchased.
  • Technical Data: which includes your IP address, browsing habits, device information, and more.
  • Profile Data: covering your preferences, orders, feedback, and survey responses.
  • Usage Data: information about how you use our websites and services.
  • Marketing and Communications Data: your marketing preferences and communication choices.

We also use Aggregated

Data, which is not personally identifiable information. We do not collect Special Categories of Personal Data or information about criminal convictions and offenses.

If You Fail to Provide Personal Data

When we’re legally or contractually obligated to collect personal data and you fail to provide it, we may not be able to fulfill the contract or service you’ve requested. In such cases, we will inform you accordingly.

How Your Personal Data Is Collected

We collect data from and about you through:

  • Direct Interactions: when you provide personal data through forms or communication with us.
  • Automated Technologies: via cookies, server logs, and similar technologies as you interact with our website.
  • Third Parties: we may receive personal data from third parties or publicly available sources.

How We Use Your Personal Data

We only use your personal data when the law permits. Common purposes include performing contracts, legitimate interests, legal obligations, or, occasionally, with your consent. We do not rely on consent for processing your data except for third-party direct marketing communications, which you can withdraw at any time.

Cookies

Cookies are small pieces of data stored on your computer. We use them to analyze website usage and improve user experience. Most web browsers accept cookies by default, but you can manage your preferences. Disabling cookies may affect website functionality.

Change of Purpose

We will use your personal data for the purposes it was collected unless it’s reasonably considered compatible with the original purpose.

Disclosures of Your Personal Data

We may share your data with Casey Jane Dickerson companies, external third parties, or entities involved in business mergers or acquisitions. We require third parties to respect the security and privacy of your data and process it only for specified purposes and according to our instructions.

International Data

Transfers

We may transfer your data beyond the borders of the European Economic Area (EEA).

To ensure the same level of protection, we implement one of the following safeguards when we transfer your personal data out of the EEA:

  • We only transfer your personal data to countries with an adequate level of data protection as approved by the European Commission.
  • When using specific service providers, we employ contracts approved by the European Commission, extending the same protection as in Europe.
  • If we engage providers in the US, we transfer data to them only if they adhere to the Privacy Shield framework, which ensures data protection similar to that in Europe.

For more details about the mechanisms we use for transferring your personal data out of the EEA, please contact us.

Data Security We’ve established rigorous security measures to prevent unauthorized access, loss, or alteration of your personal data. We limit access to your data to employees, agents, contractors, and other third parties with a legitimate need. They process your data based on our instructions and are bound by confidentiality obligations.

In the event of a suspected personal data breach, we have procedures in place to address it. We will inform you and relevant authorities if required by law.

Data Retention

How long do we keep your personal data?

We retain your personal data for as long as necessary to fulfill the purposes for which it was collected, including legal, regulatory, tax, accounting, or reporting requirements. In cases of potential complaints or litigation, we may retain your data for a longer period.

To determine the appropriate retention period, we consider the amount, nature, and sensitivity of the data, the risk of unauthorized use or disclosure, the purposes of processing, legal and regulatory requirements, and alternative methods to achieve these purposes.

Your legal rights

Under data protection laws, you have certain rights regarding your personal data:

  • Access: You can request access to the personal data we hold about you.
  • Correction: You can request the correction of any incomplete or inaccurate data we hold.
  • Erasure: You can ask us to delete or remove personal data, subject to certain conditions.
  • Object: You have the right to object to processing, especially in cases where your rights and freedoms outweigh our legitimate interests.
  • Restriction: You can request the suspension of personal data processing in specific situations.
  • Data Portability: You can request your personal data in a machine-readable format.
  • Withdrawal of Consent: If we rely on your consent for processing, you can withdraw it at any time, affecting future processing.

We do not usually charge a fee for exercising these rights. However, for unfounded, repetitive, or excessive requests, we may charge a reasonable fee or refuse to comply. We may also request additional information to confirm your identity.

We aim to respond to legitimate requests within one month. In complex cases or multiple requests, it may take longer, but we will keep you informed throughout the process.