Privacy Policy

1. Introduction

At Fog of Peace (“Company,” “we,” “us,” or “our”), accessible via fogofpeace.com (the “Website”), we are committed to safeguarding your personal data, respecting your privacy, and ensuring transparency in how we collect, use, disclose, and protect your information. Your trust is important to us, and we are dedicated to upholding privacy-first principles aligned with global data protection regulations, including the General Data Protection Regulation (GDPR) and the California Consumer Privacy Act (CCPA).

2. Scope of Policy and Data Controller Role

This Privacy Policy applies to all personal data collected through fogofpeace.com, including any related services, communications, and transactions. For the purposes of the GDPR, Fog of Peace is the “data controller” of your personal data. This means that we determine the purposes and means of processing your data. If you have questions about how your data is handled, you may contact us at [email protected].

3. Categories of Personal Data We Process

We may process the following categories of personal data:

a) Usage Data
Information automatically collected through your interaction with the Website, including browser type, IP address, access times, referring pages, and your activity during each session.

b) Account Data
Details provided during account registration or when creating a profile, such as your full name, postal address, email address, and telephone number.

c) Profile Data
User-generated or behavior-inferred data such as saved preferences, order history, behavior patterns across the site, and information learned from personalized services.

d) Communication Data
Records of your communications with us, including inquiries, feedback, support requests, email messages, and response history.

e) Technical Data
Information about the device you use to access fogofpeace.com, such as hardware model, operating system version, unique device identifiers, browser settings, and system configurations.

f) Transaction Data
Information related to purchases or services, including billing data, payment method (processed via secure third-parties), and order fulfillment details such as delivery address and logistics tracking.

g) Preference Data
Data indicating your choices related to marketing communications, interests in specific products or features, and cookie consent selections.

4. Legal Bases for Processing Personal Data

Where applicable, we process your personal data based on one or more of the following lawful grounds:

– Performance of a Contract: When processing is necessary to fulfill a contractual obligation to you (e.g., product purchase and delivery).
– Consent: When you provide explicit consent for specific processing activities, such as signing up for newsletters or allowing analytics cookies.
– Legitimate Interests: Where we have a legitimate business interest in processing your data and such interests do not override your rights and freedoms (e.g., fraud prevention, improving website functionality).
– Legal Obligation: When processing is required for compliance with legal or regulatory requirements.

5. Your Rights Under Data Protection Law

Subject to applicable law and jurisdiction, you may have the following rights in relation to your personal data:

– Right of Access: Obtain a copy of your personal data that we hold.
– Right to Rectification: Request correction of inaccurate or incomplete data.
– Right to Erasure: Request deletion of your personal data, subject to lawful retention bases.
– Right to Restriction: Request a halt on processing while a dispute regarding data accuracy or lawfulness is resolved.
– Right to Data Portability: Request to receive your personal data in a structured, commonly used format transferrable to another data controller.
– Right to Object: Object to processing based on legitimate interest or direct marketing purposes.
– Right to Withdraw Consent: Withdraw your consent at any time where we rely on consent to process your data.

To exercise these rights, please contact us at [email protected]. We are committed to responding in accordance with applicable legal timeframes.

6. Security Measures

We employ robust technical and organizational safeguards to protect your personal data, including:

– SSL encryption to ensure secure data transmission
– Access controls and user authentication protocols
– Regular system security reviews and penetration testing
– Encrypted data backups and disaster recovery controls
– Staff awareness training on data privacy responsibilities

While no system can guarantee absolute security, we continually refine our practices in line with evolving threats and regulatory guidance.

7. International Data Transfers

Your personal data may be transferred to and processed in countries outside your jurisdiction, including regions that may not provide the same level of legal data protection. When such transfers occur, we use appropriate legal safeguards, such as Standard Contractual Clauses (SCCs) approved by the European Commission, or the UK’s Transfer Mechanism equivalents, to ensure adequate protection of your data in compliance with the GDPR and CCPA.

8. Data Retention

Your personal data is retained only for as long as necessary for the purposes for which it was collected, or as required by law. Data retention timeframes vary by category:

– Usage and Technical Data: Retained for up to 12 months for analytic and operational purposes.
– Account and Profile Data: Retained for the duration of your active account and for 6 years thereafter for contractual recordkeeping and legal compliance.
– Transaction Data: Retained for 7 years to comply with fiscal and accounting obligations.
– Communication Data: Retained for 3 years following resolution of request for quality control and claims management.
– Marketing and Preference Data: Retained until you opt out or withdraw consent.

Where data is no longer needed, it is securely deleted and, where applicable, anonymized for aggregate use.

9. Cookie Policy

The Website uses cookies and similar tracking technologies to enhance your user experience and analyze usage patterns. These cookies fall into the following categories:

– Essential Cookies: Necessary for the operation of the Website and access to secure areas.
– Functional Cookies: Enable website personalization and remember your preferences.
– Analytics Cookies: Gather aggregated usage data to improve site performance and functionality.
– Performance Cookies: Monitor service delivery and loading times to enhance reliability.

10. Cookie Management and Regulation Compliance

Upon your initial visit to fogofpeace.com, you will be presented with the option to manage your cookie preferences through a consent banner in accordance with GDPR and CCPA standards. You may update your preferences or withdraw consent at any time via our Cookie Settings panel or by adjusting your browser settings. You also have the right to opt out of the sale or sharing of your personal data, where applicable under the CCPA.

11. Children’s Privacy

Our Website and services are not directed to children under 13 years of age, and we do not knowingly collect personal data from anyone under the age of 13. If we learn that we have collected personal data from a child under 13 without verifiable parental consent, we will promptly delete it. If you believe we may have inadvertently collected such information, please contact us at [email protected].

12. Policy Updates and Notification

This Privacy Policy may be revised periodically to reflect changes in regulatory requirements or our data processing practices. We will notify users of substantive policy changes through appropriate means, which may include updates posted to fogofpeace.com or direct communication via email where legally required.

13. Contact Us

If you have any questions, concerns, or comments regarding this Privacy Policy or our data handling practices, please contact our privacy representative at:

[email protected]

We are fully compliant with all applicable data protection laws and encourage users to reach out with any privacy concerns or requests regarding their personal data.