Privacy Policy for Ice-Cream-Forum.com

1. Introduction

At ice-cream-forum.com (“we”, “our”, or “us”), the privacy and security of our visitors and registered users (“you”, “your”, “user”) is of paramount importance. We are fully committed to maintaining the confidentiality, integrity, and appropriate use of personal information entrusted to us. This Privacy Policy reflects our dedication to complying with the obligations outlined under the General Data Protection Regulation (EU) 2016/679 (“GDPR”) and the California Consumer Privacy Act of 2018 (“CCPA”), as applicable, while maintaining a transparent, user-centric approach to processing personal data.

2. Scope of Policy and Data Controller Role

This Privacy Policy applies to all data collected through or in connection with your use of the website located at https://ice-cream-forum.com (the “Website”). For purposes of applicable data protection laws, ice-cream-forum.com operates as the “Data Controller” where we determine the purposes and means of processing your personal data. In jurisdictions where CCPA applies, we may also act as a “Business” as defined therein.

3. Categories of Data Processed

We collect and process the following categories of personal data either directly from you or through your interaction with the Website:

a) Usage Data

This includes information collected automatically when you access our Website, including IP address, browser type, operating system, geographic location, referring URLs, access times, pages viewed, session data, and diagnostic logs.

b) Account Data

When you create an account, we may collect your full name, email address, postal address, telephone number, and account credentials.

c) Profile Data

This includes data related to your preferences, topic interests, user-generated content (e.g., posts in a forum), purchase history (if applicable), submission behavior, and interactions within the Website.

d) Communication Data

Any correspondence with us, including support inquiries, content submissions, contact form messages, and interaction logs, are stored securely and may be used to facilitate support or improve user engagement.

e) Technical Data

We may collect device type, hardware model, operating system version, browser plugins, language settings, time zone data, and browser configuration captured through log files and analytic tools.

f) Transaction Data

Where purchases are supported (e.g., for premium content or products), we collect data related to order fulfillment, including payment confirmation data, shipping details, billing address, and transaction history. Payment data is processed through third-party PCI-DSS compliant processors and is not stored directly on our servers.

g) Preference Data

Information such as your consent choices, marketing and communication preferences, and specific product or forum topic interests fall under this category.

4. Legal Bases for Processing

We process personal data based on the following legal foundations:

– Consent: Where you have expressly consented to the processing of your data for a specific purpose, such as marketing subscriptions or cookie tracking.
– Contractual Necessity: Where processing is required to perform the contract or pre-contractual obligations entered into with you (e.g., account registration, digital service delivery).
– Legitimate Interests: For the improvement of site functionality, fraud detection, and to ensure network and information security, where such interests do not override your fundamental rights and freedoms.
– Legal Obligation: Where processing is required to comply with a valid legal obligation, including tax, audit, or consumer protection obligations.

5. Your Rights

Under GDPR and, where applicable, CCPA, you have the following rights with respect to your personal data:

– Right of Access: To request access to the personal data we hold about you.
– Right to Rectification: To request corrections or updates to inaccurate or incomplete information.
– Right to Erasure (Right to Be Forgotten): To request deletion of your data, subject to legal retention obligations.
– Right to Restriction: To request limitation of processing activities under certain conditions.
– Right to Portability: To receive your data in a portable, machine-readable format or request transfer to another controller.
– Right to Object: To object to data processing done on legitimate interest grounds or for direct marketing.
– Right to Non-Discrimination (CCPA): To receive equal service and pricing, even if you exercise your privacy rights.

You may exercise these rights by submitting a request to [email protected]. We will respond in accordance with applicable laws and may require identity verification before acting on your request.

6. Security Measures

We implement robust technical and organizational security measures to protect your data, including:

– End-to-end encryption of data in transit using HTTPS/TLS protocols.
– Secure and access-controlled data storage using modern hosting infrastructure.
– Regular data backups and recovery mechanisms.
– Role-based access controls and staff training on data protection obligations.

Despite our efforts, no data transmission can be guaranteed as 100% secure. Users are encouraged to use strong passwords and keep account credentials private at all times.

7. International Transfers

Personal data collected by ice-cream-forum.com may be processed in jurisdictions outside the European Economic Area (EEA), including the United States. Where such transfers occur, we implement safeguards such as the use of European Commission-approved Standard Contractual Clauses (SCCs) or ensure the receiving entity is certified under frameworks like the EU-U.S. Data Privacy Framework, if applicable, to satisfy applicable legal requirements.

8. Data Retention

We retain personal data only as long as necessary to fulfill the purposes for which it was collected:

– Usage and Technical Data: Retained for 12 months for analytics purposes.
– Account and Profile Data: Retained for as long as the account remains active and for five years after closure for audit and legal compliance.
– Transaction Data: Retained for up to seven years for financial and tax obligations.
– Communication Data: Retained for two years unless legally required for longer.
– Preference Data: Retained until you withdraw your consent or update preferences.

Data may be anonymized for statistical purposes and retained in aggregate format indefinitely.

9. Cookie Policy

Cookies are small data files stored on your device that help us improve functionality and user experience. The Website uses the following categories of cookies:

– Essential Cookies: Necessary for core functionality such as login and site navigation.
– Functional Cookies: Enables remembering your settings and preferences.
– Analytics Cookies: Gathers aggregate data on page views, usage behavior, and performance metrics (e.g., via Google Analytics).
– Performance Cookies: Support real-time feedback on site performance and user interaction.

10. Cookie Management and Compliance

Upon first visit, you will receive a cookie consent prompt in compliance with GDPR and CCPA. You may manage or withdraw your consent at any time via the Cookie Settings available on the Website. You may also configure your browser to refuse some or all cookies; however, doing so may impact usability or access to some features.

For CCPA compliance, you have the right to opt-out of the sale or sharing of your personal information, where applicable. Currently, ice-cream-forum.com does not sell personal data within the meaning of the CCPA.

11. Children’s Data Protection

Our services are not directed to children under 13 years of age. We do not knowingly collect or solicit personal data from children under 13. If we become aware that we have collected data from such a child without verified parental consent, we will delete that information promptly. Parents and legal guardians who believe their child has provided personal information are encouraged to contact us at [email protected].

12. Policy Updates & User Notifications

We may revise this Privacy Policy periodically to reflect changes in legal obligations, business practices, or Website functionality. When such updates occur, we will notify users via an update banner or direct email (where applicable). Continued use of the Website after such updates constitutes agreement to the revised terms.

13. Contact Information

If you have any questions, requests, or concerns regarding this Privacy Policy or your personal data, please contact our Data Protection team at:

Email: [email protected]

We take every inquiry seriously and will respond in accordance with applicable data protection laws.

This Privacy Policy is designed to ensure full transparency and adherence to global privacy regulations. Ice-cream-forum.com remains dedicated to protecting your privacy, and we encourage all users to reach out to us for any concerns or clarifications regarding the handling of personal data.