At FINCH FIRE LLC, operating https://finchfire.store/, we are committed to protecting your privacy and handling your personal data with transparency and care. While our primary operations are based in the United States, we recognize the importance of global data protection regulations, including the General Data Protection Regulation (GDPR) of the European Union. This statement outlines our commitment to GDPR principles for any customers whose data falls under its scope, ensuring your personal information is processed lawfully, fairly, and securely.

Who is the Data Controller? 

FINCH FIRE LLC, located at 2112 BRIDGE BLVD SW, ALBUQUERQUE, NM 87105, US, is the data controller responsible for your personal data collected via https://finchfire.store/.

What Data We Collect 

We collect various types of personal data to provide our services and products:

  • Personal Identifiable Information (PII): This includes your name, shipping and billing addresses, email address, phone number, and account details (if you create one). This data is essential for processing your orders, delivering products, and providing customer support.
  • Payment Information: We process payments through secure third-party services like Stripe and PayPal. FINCH FIRE LLC does not directly store your full payment card details on our servers.
  • Technical Data: This comprises your Internet Protocol (IP) address, browser type and version, time zone setting, operating system and platform, and other technology on the devices you use to access our website. We use this for website functionality, security, and analytics.
  • Usage Data: Information about how you use our website, products, and services, including browsing patterns and product views. This helps us analyze and improve your shopping experience.
  • Marketing and Communications Data: Your preferences in receiving marketing from us and our third parties, and your communication preferences. This is collected if you opt-in.

How We Use Your Data and Our Legal Basis for Processing 

We collect and process your personal data under the following legal bases as defined by GDPR:

  1. Contractual Necessity: To fulfill orders you place, process payments, deliver products, and provide related customer service (e.g., using your name, address, and payment information).
  2. Legitimate Interests: To operate and improve our website, prevent fraud, enhance security, conduct analytics to understand customer behavior, and personalize your experience, provided your rights are not overridden (e.g., using technical data and usage data).
  3. Consent: For sending marketing communications, such as newsletters or promotional offers, where you have explicitly opted-in. You have the right to withdraw this consent at any time.
  4. Legal Obligation: To comply with legal requirements, such as tax regulations or requests from law enforcement (e.g., maintaining transaction records).

How We Store Your Data 

Your personal data is stored securely on servers primarily located in the United States, managed through our WooCommerce platform. We implement appropriate technical and organizational measures to protect your data from unauthorized access, disclosure, alteration, or destruction. We retain your personal data only for as long as necessary to fulfill the purposes for which it was collected, including for the purposes of satisfying any legal, accounting, or reporting requirements.

Data Sharing and Disclosure 

We do not sell your personal data to third parties. We may share your data with trusted third-party service providers who assist us in operating our business and delivering our services, such as:

  • Payment processors (Stripe, PayPal) for secure transaction handling.
  • Shipping carriers for product delivery.
  • Website hosting and analytics providers to help us improve our site.
  • Customer service platforms.

These third parties are contractually obligated to protect your data and only use it for the specific purposes we define. We may also disclose your data if required by law or to protect our rights and safety or the rights and safety of others.

International Data Transfers 

As FINCH FIRE LLC is based in the US, your data may be transferred to and processed in the United States. If your data falls under GDPR, we ensure that appropriate safeguards are in place for such transfers, such as standard contractual clauses or other legally recognized mechanisms, to provide a level of data protection equivalent to that in the EU/EEA.

Your Data Protection Rights (for individuals covered by GDPR) 

If your personal data falls under the scope of GDPR, you have the following rights concerning your personal data:

  • The Right to Access: You have the right to request copies of your personal data.
  • The Right to Rectification: You have the right to request that FINCH FIRE LLC correct any information you believe is inaccurate or complete information you believe is incomplete.
  • The Right to Erasure ("Right to Be Forgotten"): You have the right to request that FINCH FIRE LLC erase your personal data, under certain conditions.
  • The Right to Restrict Processing: You have the right to request that FINCH FIRE LLC restrict the processing of your personal data, under certain conditions.
  • The Right to Object to Processing: You have the right to object to FINCH FIRE LLC's processing of your personal data, under certain conditions.
  • The Right to Data Portability: You have the right to request that FINCH FIRE LLC transfer the data that we have collected to another organization, or directly to you, under certain conditions.
  • The Right to Withdraw Consent: If we are relying on your consent to process your personal data, you have the right to withdraw that consent at any time. This will not affect the lawfulness of any processing carried out before you withdraw your consent.
  • The Right to Complain: You have the right to lodge a complaint with a supervisory authority, particularly in the EU/EEA, if you believe your rights have been violated.

Exercising Your Rights 

To exercise any of these rights, or if you have any questions about this GDPR Compliance Statement, please contact us:

We will respond to your request within one month.

Cookies 

Our website uses cookies to enhance your browsing experience, analyze site traffic, and for advertising purposes. You can manage your cookie preferences through your browser settings. For more detailed information about how we use cookies, please refer to our Privacy Policy (or specific Cookie Policy, if applicable).

Changes to this GDPR Compliance Statement 

FINCH FIRE LLC reserves the right to update or modify this statement at any time. Any changes will be posted on this page with an updated revision date. We encourage you to review this page periodically to stay informed about how we are protecting your data.