PRIVACY POLICY

This Privacy Policy outlines how we collect, use, store, and share your personal data when you interact with our website, officialmattgoss.com. We are committed to protecting your privacy and handling your personal data transparently and in full accordance with applicable data protection laws, including the General Data Protection Regulation (EU) 2016/679 (“GDPR”) and the California Consumer Privacy Act of 2018 (“CCPA”), as amended.

1. Commitment to Privacy and Data Protection

Your privacy is of paramount importance to us. At officialmattgoss.com, we prioritize the confidentiality, integrity, and security of your personal information. We implement robust technical and organizational safeguards to ensure your data is used only as outlined in this policy and in ways that respect your legal rights and expectations.

2. Scope of Policy and Role of Data Controller

This Privacy Policy applies to all personal data collected through your use of officialmattgoss.com, including when you browse, create an account, communicate with us, or make purchases. Our organization acts as the “data controller” under GDPR, which means we determine the purposes and means of processing your personal data.

For any privacy-related queries or concerns, you may contact us via email at [email protected].

3. Categories of Personal Data Collected and Processed

We may collect and process the following categories of personal data, directly from you or through automated technologies:

a. Usage Data
Information about how you use our website, such as your browser type and version, IP address, operating system, referral sources, pages visited, time spent on pages, interactions with content, and session identifiers.

b. Account Data
Details provided when you register for an account, including your full name, postal address, email address, phone number, and login credentials.

c. Profile Data
Preferences, behavior on the site, purchase history, and interests relevant to our products and services.

d. Communication Data
Records of your communications with us, including support requests, inquiries, and correspondence via email or other means.

e. Technical Data
Details about your device, including device type, operating system, browser settings, screen resolution, and other technical configurations.

f. Transaction Data
Information related to purchases and financial transactions carried out on the website, including billing and shipping details (excluding full payment information, which is processed securely through third-party payment providers).

g. Preference Data
Marketing and communication preferences you set, including your interests in specific products or services and consent status.

4. Legal Bases for Processing Personal Data

We process your personal data only when lawfully permitted to do so, under the following legal grounds:

– Consent: Where you have provided explicit consent, such as for subscribing to newsletters or accepting cookies not essential to site functionality.
– Contractual Necessity: When processing is required to perform a contract with you, such as fulfilling orders or providing account-related services.
– Legitimate Interests: For purposes necessary to pursue our legitimate business interests, including website optimization, direct marketing (where permitted), and fraud prevention—provided such interests are not overridden by your rights.
– Legal Obligation: Where we are required to process data to comply with applicable legal obligations.

5. Your Rights Under Data Protection Laws

Depending on your location and subject to certain exceptions, you may have the following rights:

– Right of Access: To request confirmation and access to your personal data.
– Right to Rectification: To request correction of inaccurate or incomplete data.
– Right to Erasure: To request deletion of your personal data, subject to legal or contractual retention obligations.
– Right to Restrict Processing: To request temporary suspension of data processing under certain conditions.
– Right to Data Portability: To receive your personal data in a structured, commonly used format for transfer to another controller.
– Right to Object: To object to processing based on legitimate interests or direct marketing purposes.

To exercise any of these rights, please contact us at [email protected].

6. Security Measures

We implement appropriate technical and organizational measures to protect your personal data against unauthorized access, unlawful processing, accidental loss, destruction, or damage. Our security protocols include:

– Encryption of data in transit and at rest
– Access controls and authentication mechanisms
– Regular data backups and disaster recovery practices
– Privacy training for personnel with access to data

7. International Data Transfers

Where personal data is transferred outside the European Economic Area (EEA) or other jurisdictions with equivalent protections, we ensure such transfers comply with applicable laws. We rely on standard contractual clauses or equivalent legal safeguards to ensure data remains protected regardless of location.

8. Data Retention

Your personal data is retained only for as long as reasonably necessary to fulfill the purposes outlined in this policy, including for legal, regulatory, tax, accounting, and operational needs:

– Usage Data: Retained for up to 12 months for analytics and user experience improvements
– Account Data: Retained while your account is active and up to 24 months after closure
– Profile and Preference Data: Retained for the duration of your relationship with us or until an objection is raised
– Communication Data: Retained for 36 months following resolution of the initial inquiry
– Technical and Transaction Data: Retained for at least 6 years where required for tax or financial compliance

Data may be anonymized or aggregated for longer-term statistical purposes.

9. Cookie Policy

Our website uses cookies and similar tracking technologies to enhance your browsing experience. Cookies may be classified as:

– Essential Cookies: Necessary for website functionality, such as navigation and secure login.
– Functional Cookies: Enable personalization features, such as remembering login credentials.
– Analytics Cookies: Help us measure user behavior and improve site performance.
– Performance Cookies: Enhance website speed, responsiveness, and technical performance.

10. Cookie Management and Compliance

In compliance with GDPR and CCPA, visitors are given clear notice of non-essential cookies and the ability to provide or withdraw consent for their use. Our cookie notice includes a detailed list of cookies used, and you may update your preferences at any time via the cookie banner settings. You may also adjust browser settings to manage or delete cookies at your discretion.

Users in California may opt out of the “sale” or “sharing” of their data as defined under CCPA by using our Do Not Sell or Share My Personal Information link, where applicable.

11. Children’s Privacy

We do not knowingly collect personal data from children under the age of 13. If we discover that such data has been collected without verified parental consent, we will take immediate steps to delete it. Parents or legal guardians who believe their child has submitted data to us may contact us at [email protected].

12. Policy Updates

This Privacy Policy may be updated periodically to reflect legal or operational changes. Material changes will be communicated via the website and, where required by law, directly to affected individuals via email or on-site notification. Users are encouraged to review this policy regularly.

13. Contact Us

If you have any questions, requests, or concerns regarding this Privacy Policy or the handling of your personal data, you may contact us via email at:

[email protected]

We strive to ensure full compliance with all applicable data protection laws and will respond to verified requests in accordance with our legal obligations.

Your trust is important to us. If you have any concerns regarding your privacy on officialmattgoss.com, please reach out and we will work diligently to address your inquiries.