Privacy Policy

At Open Social Stuff (accessible via opensocialstuff.com), we are fully committed to safeguarding your personal data and upholding your rights to privacy and protection under applicable law. This Privacy Policy outlines how we collect, use, store, disclose, and protect your data in accordance with the General Data Protection Regulation (GDPR), the California Consumer Privacy Act (CCPA), and other relevant regulations.

1. Commitment to Privacy and Data Protection

Open Social Stuff values your trust and is dedicated to ensuring the confidentiality, security, and lawful handling of your personal information. This policy explains how we approach data protection with transparency, accountability, and a privacy-by-design mindset.

2. Scope of This Policy and Our Role as Data Controller

This Privacy Policy applies to all users and visitors of opensocialstuff.com and associated services. Open Social Stuff operates as the data controller for information collected through its website and services, meaning we determine the purposes and means of processing your personal data.

3. Categories of Data We Process

We collect the following categories of personal data, depending on your level of interaction with opensocialstuff.com:

a) Usage Data
Such as IP addresses, browser types, operating systems, referring URLs, clickstreams, access dates/times, session duration, and pages visited. This data helps us improve website functionality and security.

b) Account Data
When you register for an account, we collect your full name, postal address, email address, and phone number.

c) Profile Data
Includes your preferences, purchase history, activity on opensocialstuff.com, interests, and demographic data derived from your usage patterns.

d) Communication Data
Covers the content and metadata of emails or messages sent to or from [email protected], customer support interactions, and any telephone or chat transcripts.

e) Technical Data
Includes device identifiers, operating system and browser settings, screen resolution, system configurations, and mobile network information.

f) Transaction Data
Encompasses billing details, payment methods (processed through secure third-party providers), delivery addresses, order history, and any refunds or returns.

g) Preference Data
Comprises your choices regarding marketing materials, product notifications, advertising preferences, and survey responses.

4. Legal Bases for Processing Personal Data

We rely on several legal bases under the GDPR for processing your personal data, including:

– Consent – When you provide voluntary, informed consent (e.g., subscribing to newsletters).
– Contract – When data is necessary to fulfill our contractual obligations to you (e.g., completing transactions).
– Legitimate Interests – When processing is necessary for our legitimate business interests (e.g., website analytics), provided such interests are not overridden by your fundamental rights.
– Legal Obligation – When we are required by applicable law to process personal data (e.g., tax compliance, fraud prevention).

Under the CCPA, we may “collect,” “use,” or “share” personal data as detailed here, and we provide users the right to opt-out of such collection when applicable.

5. Your Rights

Under GDPR and CCPA, you have the following rights:

– Right of Access – You may request access to your personal data we hold.
– Right to Rectification – You may have inaccurate data corrected or updated.
– Right to Erasure – You may request deletion of your data, subject to applicable limitations.
– Right to Restrict Processing – You may object to or limit the use of your data in certain situations.
– Right to Data Portability – You may request your data in a structured, commonly used, machine-readable format.

To exercise any of these rights, please contact us at [email protected]. Verification may be required to process certain requests.

6. Security Measures

To ensure the integrity, confidentiality, and availability of your data, Open Social Stuff implements robust technical and organizational safeguards, including but not limited to:

– Data encryption in transit and at rest
– Access controls with secure authentication and authorization
– Regular system backups and secure data centers
– Staff training and internal data protection procedures
– Intrusion detection and system audit logging

While we employ stringent measures, we cannot fully guarantee absolute security due to the nature of internet-based data transmission.

7. International Transfers

Whenever we transfer your personal data outside of the European Economic Area (EEA) or your applicable jurisdiction, we ensure that equivalent protections are in place, either through Standard Contractual Clauses approved by the European Commission, adequacy decisions, or provider certification under frameworks such as the EU-U.S. Data Privacy Framework.

8. Data Retention

We retain your personal data only as long as necessary for the purposes for which it was collected or as required by law:

– Usage Data: 12 months
– Account and Profile Data: Retained until you close your account or request deletion
– Communication Data: Up to 3 years from last contact
– Technical and Transaction Data: Retained for 6 years for accounting and audit purposes
– Preference Data: Retained unless you withdraw consent

We regularly review and securely delete data past its retention period, unless we are legally obliged to retain it longer.

9. Cookie Policy

Opensocialstuff.com uses cookies and similar technologies for the following categories:

– Essential Cookies – Necessary for site functionality and navigation
– Functional Cookies – Enhance user experience (e.g., remembering language preferences)
– Analytics Cookies – Collect anonymized traffic and behavior data to improve performance
– Performance Cookies – Measure effectiveness of marketing campaigns and site responsiveness

Cookies are never used to personally identify you without your consent. Wherever possible, data collected through cookies is aggregated or anonymized.

10. Cookie Management and Compliance

In compliance with the GDPR and CCPA, you can manage your cookie preferences through our site’s cookie consent tool and/or by adjusting your browser settings. You may opt-out of non-essential cookies at any time. Do Not Track (DNT) signals sent by browsers will be respected where legally required or technologically supported.

To adjust or withdraw your consent preferences, please use the cookie settings banner available on opensocialstuff.com or contact us directly.

11. Children’s Privacy

Our services are not directed to or intended for children under the age of 13. We do not knowingly collect or process personal information from anyone under 13. If we become aware that we have inadvertently gathered such data, we will take immediate steps to delete it. Parents or guardians with concerns may contact [email protected] to request removal of any such data.

12. Updates to this Privacy Policy

We reserve the right to update or modify this Privacy Policy as necessary to reflect legal, regulatory, or operational changes. Where material changes are made, we will communicate such updates prominently via opensocialstuff.com and via email if appropriate. Continued use of the site following changes indicates your acknowledgment and consent.

13. Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy or the handling of your personal data, please contact us at:

Email: [email protected]

We are committed to ensuring your privacy rights are respected and encourage open dialogue regarding our data practices.

Compliance Statement

Open Social Stuff strives to remain fully compliant with applicable privacy regulations, including the GDPR and CCPA. You may reach out to us at any time at [email protected] with privacy-related questions or to exercise your data rights.