Privacy Policy for Total Community Action
1. Introduction
Total Community Action (“we,” “our,” or “us”) is committed to protecting and respecting your privacy. Our mission is centered around trust, community engagement, and transparency, and we are firmly dedicated to securing the personal information of every visitor and user of our website, totalcommunityaction.com. We process your data in line with applicable privacy regulations, including the General Data Protection Regulation (GDPR) and the California Consumer Privacy Act (CCPA), ensuring your data is treated lawfully, fairly, and with utmost integrity.
2. Scope of This Policy and Data Controller Role
This Privacy Policy applies to all data collected through our website, totalcommunityaction.com, and governs our data collection, processing, and usage practices. As the data controller, we determine the purposes and means of processing your personal data. If you have any questions or concerns regarding this policy or our data handling practices, please contact us at [email protected].
3. Categories of Personal Data We Process
We may collect and process the following categories of personal information:
a. Usage Data
Includes information automatically collected when you visit our website, such as your IP address, browser type, browsing behavior, pages visited, session duration, and referring URLs.
b. Account Data
Includes information you provide when you create an account, register for services, or communicate with us. This data may include your full name, billing and shipping address, email address, and phone number.
c. Profile Data
Covers data such as your preferences, interests, purchase history, and behavior on totalcommunityaction.com to help us personalize your experience.
d. Communication Data
Encompasses information you provide when contacting us, including support inquiries, feedback, and communications with customer service.
e. Technical Data
Includes device identifiers, operating system type and version, browser settings, language settings, screen resolution, and other system configurations.
f. Transaction Data
Relates to purchases made through totalcommunityaction.com and may include billing details, product/service information, delivery addresses, and other relevant financial information (excluding full payment card details, which are processed through secure third-party providers).
g. Preference Data
Includes consents granted for marketing communications and records of your interaction with promotional content, along with your product and communication preferences.
4. Legal Bases for Processing Personal Data
We rely on one or more of the following legal bases under GDPR to process your personal data:
– Consent: When you have given clear consent for us to use your personal data.
– Contractual Necessity: To perform a contract with you or to take steps at your request before entering into a contract.
– Legal Obligation: Where processing is necessary for compliance with applicable laws.
– Legitimate Interests: To pursue our company objectives (e.g., optimizing services, fraud prevention, and communication), provided that such interests are not overridden by your fundamental rights and freedoms under data protection law.
Under the CCPA, we do not sell personal data. We only use it for purposes disclosed in this policy.
5. Your Rights
If you are a resident of the European Economic Area or California, you are entitled to:
– Access: Obtain confirmation whether we process your personal data and access a copy thereof.
– Rectification: Request corrections to inaccurate or incomplete personal data.
– Erasure: Request deletion of your personal data under certain conditions.
– Restriction: Ask us to restrict further processing of your personal data.
– Portability: Receive a copy of your personal data in a structured, commonly used, and machine-readable format and transmit it to another controller.
– Objection: Object to the processing of your personal data, including for direct marketing purposes.
– Do Not Sell My Information (CCPA): You have the right to opt out of any sale of personal information, although we do not currently engage in such sales.
To exercise your rights, please contact us at [email protected].
6. Security Measures
We implement robust technical and organizational measures to safeguard your personal data from unauthorized access, alteration, disclosure, or destruction. These include, but are not limited to:
– Data encryption and secure transfer protocols.
– Role-based and password-protected access control systems.
– Firewalls and intrusion detection technologies.
– Routine data backups.
– Staff training in data privacy and secure information handling procedures.
7. International Transfers
Where we transfer personal data outside the European Economic Area (EEA) or other jurisdictions with data transfer restrictions, we ensure the data is afforded a level of protection consistent with applicable laws. Transfers are governed by standard contractual clauses approved by relevant authorities or equivalent legal mechanisms.
8. Data Retention
We retain your personal data only for as long as necessary to fulfill the purposes outlined in this Privacy Policy or to comply with legal obligations. Below are general retention periods by data category:
– Usage Data: up to 12 months.
– Account Data: retained for the duration of your relationship with us and up to 2 years afterward.
– Profile Data: up to 2 years from your last active interaction.
– Communication Data: up to 3 years after resolution of a request or termination of contact.
– Technical Data: up to 6 months.
– Transaction Data: up to 7 years to comply with financial regulations.
– Preference Data: retained until you withdraw consent or request deletion.
9. Cookie Policy
We use cookies and similar technologies on totalcommunityaction.com to enhance user experience, analyze website traffic, and tailor services. Cookies fall into the following categories:
– Essential Cookies: Necessary for basic site functionality and security.
– Functional Cookies: Enable personalization and remember user preferences.
– Analytics Cookies: Help us understand how users interact with the site using aggregated data.
– Performance Cookies: Optimize website performance and usability.
10. Cookie Management & Compliance with GDPR/CCPA
You may manage your cookie preferences at any time through the cookie consent banner on our website. Most browsers also allow users to control cookies through their settings. We honor “Do Not Track” (DNT) signals and provide clear opt-in and opt-out options where required by law, particularly under GDPR and CCPA provisions.
11. Children’s Privacy
Total Community Action does not knowingly collect or solicit personal data from children under the age of 13. If we become aware that we have inadvertently collected data from a child under 13, we will delete it promptly. Parents or legal guardians who believe their child has provided us with information may contact us at [email protected].
12. Policy Updates & User Notifications
We may revise this Privacy Policy from time to time to reflect changes in legal, technical, or operational requirements. Continued use of totalcommunityaction.com after such changes constitutes your acceptance of the updated policy. Where legally required, we will notify you of material changes and obtain your consent as applicable.
13. Contact Us
If you have any questions, requests, or concerns about this Privacy Policy or how we handle your personal data, please contact us at:
Email: [email protected]
We aim to maintain the highest standards of data protection and comply fully with applicable privacy laws, including the GDPR and CCPA. For any concerns regarding your data or your privacy rights, please don’t hesitate to reach out to us directly at the contact information above.