Privacy Policy
This Privacy Policy outlines how The Owl Chicago (“we,” “our,” or “us”) collects, uses, shares, and protects personal data in connection with your use of our website, theowlchicago.com. We are committed to safeguarding your privacy and handling your personal data in compliance with applicable data protection laws, including the General Data Protection Regulation (GDPR) and the California Consumer Privacy Act (CCPA).
1. Commitment to Privacy and Data Protection
Your privacy is our priority. We are dedicated to ensuring that your personal data is processed transparently, securely, and lawfully. Whether you are browsing our website or engaging with us through our services, we respect your privacy rights and work rigorously to protect your information.
2. Scope of This Policy and Role of the Data Controller
This Privacy Policy applies to all personal data collected and processed by The Owl Chicago through our website located at theowlchicago.com and through related communications. The Owl Chicago is the data controller for purposes of personal data under GDPR and the “business” under CCPA. Our contact email for all privacy-related inquiries is [email protected].
3. Categories of Data We Process
Depending on how you interact with our site, we may collect and process the following categories of data:
a) Usage Data
Includes information about how you use our website, such as your IP address, browser type and version, device identifiers, geographical location, time zone settings, pages viewed, referring URLs, and browsing activity on our site.
b) Account Data
Includes contact information you may provide when creating an account or interacting with us, such as your full name, mailing address, email address, and phone number.
c) Profile Data
Includes user-defined preferences, interests, demographic details, login credentials, past purchases, and behavioral tendencies while using theowlchicago.com.
d) Communication Data
Includes all records of communication with us, such as support inquiries, email correspondence, live chat records, contact form submissions, and customer service interactions.
e) Technical Data
Includes data from your device used to access our website, such as operating system, mobile network information, browser plug-ins, screen resolution, and language settings.
f) Transaction Data
Includes details regarding purchases made through our website, such as billing and shipping addresses, payment methods (limited to tokens, we do not store card details), and order history.
g) Preference Data
Includes your choices and settings regarding marketing communications, newsletter subscriptions, product preferences, and consents for cookies and personal data usage.
4. Legal Bases for Processing
The processing of your personal data is based on one or more of the following legal grounds:
– Consent: Where you have given explicit permission, such as for email marketing or cookies.
– Contractual Necessity: Where processing is necessary to fulfill a contract with you or to take steps at your request prior to entering a contract.
– Legitimate Interests: To operate and improve our website, ensure security, perform analytics, prevent fraud, and administer communications relevant to our services.
– Legal Obligation: Where processing is required to comply with applicable laws or enforcement actions.
5. Your Rights Under GDPR and CCPA
As a data subject or consumer, you have the following rights regarding your personal data:
– Right of Access: Obtain confirmation about whether we process your personal data and, if so, access to that data.
– Right of Rectification: Request correction of inaccurate or incomplete personal data.
– Right to Erasure (“Right to Be Forgotten”): Request deletion of your personal data in legally permitted situations.
– Right to Restrict Processing: Request limitation on how we use your personal data.
– Right to Data Portability: Receive your personal data in a structured, commonly used, and machine-readable format and transmit it to another controller.
– Right to Object: Object to data processing based on legitimate interests, direct marketing, or profiling.
– Right to Opt-Out of Sale (CCPA): Residents of California may request not to have their personal information sold to third parties.
To exercise any of these rights, please contact us at [email protected]. We will respond without undue delay and in accordance with applicable legal timelines.
6. Security Measures
We implement appropriate technical and organizational measures to protect your personal data from unauthorized access, loss, misuse, disclosure, or alteration, including:
– HTTPS encryption and secure data transmission
– Role-based access restrictions and authentication protocols
– Regular data backups and redundancy measures
– Staff training in data privacy and security awareness
– Frequent review and tightening of internal privacy controls
7. International Data Transfers
Your data may be stored and processed outside your country of residence, including in jurisdictions that may not offer the same level of data protection. Where such transfers take place, we implement standard contractual clauses and other mechanisms to ensure your data is protected in accordance with GDPR requirements and global privacy standards.
8. Data Retention
We retain personal data only for as long as necessary for the purposes described in this policy. The criteria we use include:
– Usage Data: Up to 12 months
– Account Data: Retained while the user maintains an active account
– Profile Data: Retained for up to 3 years after last activity
– Communication Data: Retained for up to 2 years
– Technical Data: Up to 12 months
– Transaction Data: Retained for 7 years in accordance with financial recordkeeping obligations
– Preference Data: Retained until request for deletion or change of consent
When retention is no longer necessary, data is securely deleted or anonymized.
9. Cookie Policy
The Owl Chicago employs cookies and similar tracking technologies on theowlchicago.com to enhance your experience, understand user behavior, and improve our services. These include:
– Essential Cookies: Required for core website functions, such as login and security features.
– Functional Cookies: Enable advanced features, like language preferences and persistent sessions.
– Analytics Cookies: Collect aggregated usage metrics for site optimization (e.g., Google Analytics).
– Performance Cookies: Improve page loading times and overall site responsiveness.
10. Cookie Management and Compliance
In compliance with GDPR and CCPA, we present a cookie banner on your initial website visit that allows you to accept or reject non-essential cookies. You can update your cookie preferences at any time through your browser settings or our cookie management tool. For more information or to manage cookies, contact us at [email protected].
11. Children’s Privacy
Our services are not directed toward individuals under the age of 13. We do not knowingly collect, use, or disclose personal information from children under 13. If we become aware that personal data from a child has been collected inadvertently, we will take appropriate steps to delete such information. Guardians or parents concerned about their child’s data may contact us at [email protected].
12. Changes to This Policy
We reserve the right to update this Privacy Policy to reflect modifications in our practices, legal obligations, or services. Any material changes will be posted to theowlchicago.com, and where required, we will notify you by direct communication or pop-up notifications upon your next visit. Your continued use of the website constitutes your agreement to the updated policy.
13. Contact and Questions
If you have questions, concerns, or wish to exercise your privacy rights, please contact our privacy team at [email protected]. We are committed to responding to inquiries and requests in a timely and transparent manner.
—
This Privacy Policy reflects our ongoing commitment to protecting your personal information and complying with applicable data protection regulations, including GDPR and CCPA. For further information or assistance, please reach out to our privacy team at [email protected].