Privacy Policy for TenAfterFive.com

1. Introduction

At TenAfterFive.com (“we,” “our,” “us”), we recognize the importance of protecting the personal information of our users and are committed to maintaining robust privacy protections across all aspects of our services. This Privacy Policy reflects our dedication to transparency, accountability, and user empowerment, and sets forth how we collect, use, disclose, and safeguard your data in full accordance with the General Data Protection Regulation (GDPR) and the California Consumer Privacy Act (CCPA).

By using TenAfterFive.com, you acknowledge and agree to the practices described in this Notice. We encourage all users to review this Privacy Policy to understand their rights and our data handling practices.

2. Scope and Data Controller

This Privacy Policy applies to all personal data collected through your interaction with TenAfterFive.com, including all services, features, and digital content offered on or through the website.

For the purposes of applicable data protection laws, TenAfterFive.com is the data controller of your personal data. As the data controller, we determine the purposes and means by which personal data is processed.

To contact us regarding your privacy rights or questions about this policy, please email [email protected].

3. Categories of Data We Process

We may collect, use, and store the following categories of personal data:

– Usage Data:
Includes your IP address, browser type and version, pages viewed, time spent on pages, referral sources, interaction information, and similar diagnostic data collected via standard internet logs and analytics tools.

– Account Data:
Includes full name, email address, mailing address, phone number, and other identifiers provided when you create an account or fill out a form on TenAfterFive.com.

– Profile Data:
Includes your preferences, user behavior, interests, product or service interactions, and your previous purchases.

– Communication Data:
Includes messages submitted via contact forms, customer support interactions, chat transcripts, and email correspondence.

– Technical Data:
Includes information about the devices you use to access TenAfterFive.com, including operating system, device identifiers, system settings and configurations, language settings, and browser configurations.

– Transaction Data:
Includes purchase details, transaction history, billing and shipping addresses, payment method (processed securely through third parties), and delivery information.

– Preference Data:
Includes your consent to receive marketing communications, product wishlists, opt-in/opt-out preferences, and expressed interests in content or services.

4. Legal Basis for Processing

We process your personal data only when we have a proper legal basis under applicable law, including:

– Consent: Where you have given clear consent for us to process your personal data for a specific purpose (e.g., receiving newsletters).
– Contract: Where processing is necessary to fulfill a contract with you or to take pre-contractual steps (e.g., order fulfillment).
– Legal Obligation: Where we must comply with a legal obligation (e.g., tax reporting obligations).
– Legitimate Interests: Where processing is necessary for our legitimate business interests and those interests do not override your data protection rights (e.g., enhancing website security, improving user experience, or detecting fraudulent activity).

5. Your Rights

As a data subject under GDPR and CCPA, you have the following rights:

– Right to Access: You may request access to the personal data we hold about you.
– Right to Rectification: You may request correction of inaccurate or incomplete data.
– Right to Erasure: You may request deletion of your personal data, subject to legal or contractual obligations.
– Right to Restriction: You may request a temporary or permanent restriction on our processing of your data.
– Right to Data Portability: You may request to receive your data in a structured, commonly used, and machine-readable format, and to transmit that data to another controller.
– Right to Object: You may object to the processing of your data based on our legitimate interests or direct marketing.
– Right to Withdraw Consent: Where processing is based on your consent, you may withdraw your consent at any time without affecting the lawfulness of processing carried out before its withdrawal.
– Right to Non-Discrimination (CCPA): You will not receive discriminatory treatment for the exercise of your privacy rights.

You may exercise these rights by contacting us at [email protected].

6. Data Security

We employ rigorous technical and organizational safeguards to protect your personal data. Our security measures include but are not limited to:

– Data encryption, both in transit and at rest
– Multi-factor authentication and restricted access to personal data
– Periodic data backups and recovery protocols
– Secure data centers located in compliant regions
– Employee training and access controls based on job function

Despite our comprehensive efforts, no method of transmission or storage is 100% secure. We encourage you to take reasonable steps to protect your credentials and devices.

7. International Data Transfers

Your personal data may be transferred to and processed in countries outside your jurisdiction, including to data processors and service providers located in jurisdictions that may not have equivalent data protection laws.

In such cases, we use legally recognized transfer mechanisms such as Standard Contractual Clauses (SCCs), adequacy decisions, or binding corporate rules to ensure compliance with applicable privacy laws and adequate protection of your data.

8. Data Retention

We retain personal data for only as long as it is necessary for the legitimate purpose for which it was collected, including:

– Usage Data: up to 12 months
– Account and Profile Data: as long as your account remains active
– Communication Records: 2 years after last user contact
– Transactional Records: 7 years for legal and tax compliance
– Preference Data: until withdrawal of consent or request for deletion

When the retention period expires, we delete or anonymize your data, unless required to retain it for legitimate or legal reasons.

9. Cookie Policy

TenAfterFive.com uses cookies and similar technologies to enhance user experience, analyze site performance, and deliver personalized content. Categories of cookies include:

– Essential Cookies: Required for enabling core website functionality such as security, authentication, and accessibility.
– Functional Cookies: Facilitate site personalization and remembered preferences.
– Analytics Cookies: Help us understand user behavior, site performance, and error diagnostics through tools like Google Analytics.
– Performance Cookies: Optimize performance and user experience across different devices and connection types.

10. Cookie Management and Compliance

In accordance with GDPR and CCPA, TenAfterFive.com provides a clear and accessible cookie management interface, allowing users to grant or withdraw consent for non-essential cookies at any time via our Cookie Preferences panel.

Additionally, browser-level controls are available to block or delete cookies. However, disabling certain cookies may limit functionality or access to parts of our site.

11. Children’s Privacy

TenAfterFive.com does not knowingly collect or solicit personal information from children under the age of 13. If we become aware that personal information has been collected from a child without verified parental consent, we will promptly delete such data.

Parents or guardians who believe information has been inadvertently collected from a child may contact us at [email protected] to request removal.

12. Modifications to This Policy

We reserve the right to amend this Privacy Policy to reflect changes in legislation, best practices, or the structure of our services. When updates occur, a prominent notice will be provided on TenAfterFive.com, and affected users may be notified through email or other direct communication channels, when appropriate.

13. Contact Us

If you have any questions, concerns, or requests related to this Privacy Policy or the manner in which your personal data is handled, please contact us at:

Email: [email protected]

TenAfterFive.com is committed to maintaining high standards of data privacy and protection, and to fulfilling our obligations under GDPR, CCPA, and other applicable laws. We welcome all inquiries regarding privacy rights, data security, or policy-related matters.