Privacy Policy
1. Introduction
At afslr.org, we are firmly committed to safeguarding and respecting your privacy and personal data. We understand the importance of privacy as a fundamental right and are dedicated to protecting the information entrusted to us by our users, customers, and stakeholders. This Privacy Policy explains how we collect, process, store, and protect personal data in accordance with applicable privacy laws, including the General Data Protection Regulation (GDPR) and the California Consumer Privacy Act (CCPA).
2. Scope of Policy and Data Controller Role
This Privacy Policy applies to all personal data collected through afslr.org and its associated services, including but not limited to web interactions, customer support, and user account functionality. For the purposes of data protection law, afslr.org acts as the “Data Controller,” which means we determine the purposes and methods of processing your personal data. If you are located within the European Economic Area (EEA) or California, this means your rights under relevant regulations are respected and enforced.
3. Categories of Data Processed
We may collect and process the following categories of personal data, depending on your interaction with our website or services:
a. Usage Data: includes information about your browser type, language preferences, referring URLs, IP address, time zone settings, and the pages you visit on afslr.org. We also collect data regarding session duration and interaction with website elements.
b. Account Data: includes full name, billing and/or shipping address, email address, and telephone number. This data is primarily collected during account creation, submissions, or checkout processes.
c. Profile Data: includes information related to your site preferences, purchase history, page interactions, saved content, and other behavioral patterns exhibited during usage.
d. Communication Data: includes any correspondence sent to or from afslr.org, including contact forms, email support inquiries, chat communications, and customer service history.
e. Technical Data: includes device identifiers, operating system version, browser plugins, screen resolution, and other configuration-based details used to diagnose performance and compatibility issues.
f. Transaction Data: includes records of purchases, donations, invoices, delivery information, and payment methods (although payment card data is handled securely by third-party processors and never stored by afslr.org).
g. Preference Data: includes consents, disallowances, frequency of marketing material delivery, product or content interests, and personalization settings.
4. Legal Bases for Processing
We process your personal data on the following lawful grounds, in accordance with Article 6 of the GDPR and the applicable provisions of the CCPA:
– Consent: where you have explicitly given us permission to process your data, such as email subscription or cookie acceptance.
– Contractual Necessity: when processing is necessary to fulfill a contract with you, such as managing an account or fulfilling a purchase.
– Legal Obligation: when required to comply with applicable laws or legal proceedings.
– Legitimate Interests: where processing is necessary for the protection of our business operations, service improvement, fraud prevention, and customer support, unless such interests are overridden by your fundamental rights and freedoms.
5. Your Rights
Under privacy law, you have certain rights regarding the processing of your personal data. These include:
– Right of Access – to request a copy of personal data we hold about you.
– Right to Rectification – to correct errors or inaccuracies in your data.
– Right to Erasure – to request deletion of your personal data where applicable.
– Right to Restrict Processing – to block or suppress further use of your data.
– Right to Data Portability – to obtain and reuse your data across services.
To exercise any of your rights, please contact us at [email protected]. We will respond in accordance with applicable legal timelines.
6. Security Measures
afslr.org employs comprehensive security protocols to ensure the confidentiality, integrity, and availability of your personal data. Our safeguards include:
– End-to-end encryption during data transmission via HTTPS and TLS.
– Role-based access controls restricting data access to authorized personnel only.
– Regularly updated firewalls and anti-malware protection.
– Routine system backups and disaster recovery policies.
– Mandatory privacy and security training for all staff.
Despite our best efforts, no transmission method or electronic storage is 100% secure. Users transmit data at their own risk, but we are committed to swift incident response and mitigation should any breach occur.
7. International Transfers
If your data is transferred outside your jurisdiction (such as from the EEA to the United States), we ensure these transfers comply with applicable legal standards. Such safeguards include Standard Contractual Clauses approved by the European Commission and other lawful transfer mechanisms to guarantee the continued protection of your data.
8. Data Retention
We retain personal data only for as long as necessary for the purposes it was collected. Retention periods vary based on the data category:
– Usage and Technical Data: retained up to 12 months for analytics and security auditing.
– Account and Profile Data: retained for the life of the user’s account, plus 24 months post-deletion to satisfy legal and business obligations.
– Transaction Data: retained for seven (7) years for taxation and accounting compliance.
– Communication Data: retained for 36 months to enhance support quality.
– Preference Data: retained indefinitely unless consent is withdrawn.
9. Cookie Policy
afslr.org utilizes cookies and similar tracking technologies to enhance user experience and collect analytics data. Cookies fall into the following categories:
– Essential Cookies: required for core site functionality such as navigation, authentication, and user sessions.
– Functional Cookies: help remember settings and improve usability.
– Analytics Cookies: provide anonymized insights into site usage, user flows, and performance issues.
– Performance Cookies: monitor and optimize page load and interactive behavior.
10. Cookie Management and Compliance
Users may accept or reject non-essential cookies using the cookie consent banner displayed upon first visit to afslr.org. You can also manage your cookie preferences at any time via browser settings or by accessing our Cookie Settings Page. Our cookie framework complies with GDPR and CCPA requirements for informed consent and user control.
11. Protection of Children
Our website is not intended for use by children under the age of 13. We do not knowingly collect personal data from minors without parental or legal guardian consent. If we become aware that such data has been collected inadvertently, we will take steps to remove it promptly. Parents or guardians who believe their child has submitted information should reach out to us at [email protected].
12. Policy Updates
We reserve the right to amend this Privacy Policy as necessary to reflect changes in data processing practices, legal requirements, or user feedback. Material changes will be communicated directly via prominent notices on afslr.org or via email if you have provided contact information. Continued use of our website following such updates constitutes acceptance of the updated policy.
13. Contact
If you have any questions, concerns, or requests regarding your personal data or this Privacy Policy, you may contact us:
Email: [email protected]
Website: https://afslr.org
We are committed to full compliance with the applicable data protection laws, including GDPR and CCPA, and welcome your inquiries regarding our privacy practices.