Privacy Policy
Welcome to onlinefour.com. We value your trust and are committed to protecting your personal data and respecting your rights. This Privacy Policy outlines how we collect, use, store, and protect information in connection with your use of our website, products, and services. At all times, we uphold a privacy-first approach and comply with applicable data protection laws, including the General Data Protection Regulation (GDPR) and the California Consumer Privacy Act (CCPA).
1. Commitment to Privacy and Data Protection
At onlinefour.com, safeguarding your privacy is paramount. We maintain robust procedures and security protocols to ensure that your personal data is treated securely and in accordance with applicable legislation. We strive to process only the data necessary to provide our services, limit access internally, and empower individuals with control over their information.
2. Scope of Policy and Data Controller Role
This Privacy Policy applies to all personal data collected through our website, onlinefour.com, and affiliated services. For the purposes of the GDPR, onlinefour.com operates as the data controller responsible for your personal data. Where we act jointly with third parties, we ensure that responsibilities are clearly defined and documented. By using our services, you acknowledge the practices described in this notice.
3. Categories of Data Processed
We may process the following categories of personal data:
a. Usage Data
Collected automatically when you visit onlinefour.com. This includes browser type and version, operating system, IP address, referring URLs, session timestamps, and browsing behavior.
b. Account Data
Details provided during registration or account creation, such as full name, postal address, email address, and phone number.
c. Profile Data
Information relating to preferences, activities, purchase history, and interactions with our services or communications.
d. Communication Data
Messages submitted via contact forms, help desk tickets, email correspondence, and other support-related communications.
e. Technical Data
Data regarding the devices and systems you use to access our website, such as device ID, screen resolution, browser plug-ins, and configuration settings.
f. Transaction Data
Records of purchases, payment details, invoicing information, and delivery instructions (excluding complete payment card data, which is processed securely by our payment processors).
g. Preference Data
Marketing opt-ins, newsletter subscriptions, notification settings, and expressed interests in specific products or categories.
4. Legal Bases for Processing Personal Data
We process personal data only where lawfully permitted. Our primary legal bases include:
– Contractual Necessity: To fulfill our obligations in providing services to you.
– Legitimate Interests: To manage, develop, and improve our products, understand usage trends, and safeguard our platforms.
– Consent: Where we request your express permission to process certain types of data (e.g., sending marketing emails).
– Legal Obligations: Where processing is necessary to comply with laws or regulatory requirements.
5. Your Rights Under GDPR and CCPA
We respect your privacy rights, which include:
– Right of Access: You may request a copy of the personal data we hold about you.
– Right to Rectification: You have the right to correct inaccurate or incomplete data.
– Right to Erasure (“Right to be Forgotten”): You may ask us to delete your data where legally permissible.
– Right to Restriction: You may request to limit how your data is processed in specific circumstances.
– Right to Data Portability: You can request a copy of your data in a commonly used, machine-readable format for personal use or transmission to another controller.
– Right to Object: You can object to certain uses of your data, particularly for direct marketing.
– Non-Discrimination (for California residents): We will not discriminate against you if you exercise your privacy rights under the CCPA.
To exercise your rights, please contact us at [email protected] with the subject “Privacy Request.”
6. Security Measures
We implement a comprehensive range of modern security controls to prevent unauthorized access, use, or disclosure of personal data. These measures include:
– Data encryption in transit and at rest
– Multi-tiered access control and user authentication
– Regular system backups and integrity checks
– Internal training on data protection principles
– Secure development practices and vulnerability testing
7. International Transfers
Your data may be processed and stored in countries outside your jurisdiction, including in regions that may not have the same legal protections. Where applicable, we rely on:
– European Commission-approved Standard Contractual Clauses (SCCs)
– Adequacy decisions
– Other legally compliant mechanisms
We ensure that data transferred outside permitted jurisdictions is subject to similar protective measures consistent with this Privacy Policy.
8. Data Retention
We retain personal data only for as long as necessary to fulfill the purposes we collected it for, including for legal, accounting, or reporting obligations. Standard retention periods include:
– Account and profile data: Retained for the duration of your account and up to 24 months after closure
– Transaction data: Retained for at least 7 years for tax and audit requirements
– Support requests and communication data: Retained for up to 36 months
– Marketing preferences: Maintained until you unsubscribe or opt-out
Upon expiration of the relevant retention period, data is securely anonymized or deleted.
9. Cookie Policy
We use cookies and similar technologies to enhance your browsing experience, provide personalized content, analyze traffic, and facilitate essential website features. The cookies we use include:
– Essential Cookies: Required for enabling basic functionality, such as account logins and secure navigation.
– Functional Cookies: Support enhanced features like user preferences and layout choices.
– Analytics Cookies: Help us understand visitor behavior and improve performance using services like Google Analytics.
– Performance Cookies: Monitor system performance and enable diagnostic tools.
Cookies do not enable us to identify individuals directly unless combined with additional personal information voluntarily provided.
10. Cookie Management and Legal Compliance
We comply with GDPR and CCPA requirements by:
– Providing clear, upfront cookie notices on entry to the site
– Offering opt-in consent for non-essential cookies (where required)
– Giving users the ability to manage cookie preferences through our cookie banner and browser settings
– Honoring browser-level Do Not Track (DNT) signals where technically feasible
You can remove or decline cookies using your browser’s configuration settings. Please note this may affect the usability of certain features.
11. Children’s Privacy
Services offered by onlinefour.com are not intended for children under the age of 13. We do not knowingly collect or solicit personal information from minors. If a parent or guardian believes that a child has provided us with personal data without consent, they may contact us at [email protected]. We will take prompt steps to remove such information.
12. Policy Updates and User Notifications
We may update this Privacy Policy to reflect changes in our practices, applicable law, or technical developments. Updated versions will be posted on onlinefour.com, and where required, we will notify you via prominent notice (e.g., banner or email). Continued use of our services after changes indicates your acceptance of the revised policy.
13. Contact and Privacy Inquiries
If you have any questions, concerns, or requests regarding this Privacy Policy or your personal data, you may contact us at:
Email: [email protected]
We are committed to responding promptly and transparently to all privacy inquiries.
—
Onlinefour.com is dedicated to full compliance with data protection laws and the principles of transparency, fairness, and accountability. Please do not hesitate to contact us at [email protected] with any privacy questions or requests regarding your data.