Privacy Policy
Privacy Policy for FragranceMaven.com
1. Data Controller
FragranceMaven.com (“the Website”) is operated by [Your Company/Individual Name], registered at [Your Address]. For data protection inquiries, contact: [fragrancemaven@fragrancemaven.com].
2. Information We Collect
2.1 User-Provided Information
- Comment Data: When submitting comments, you must provide:
- Email address (for spam verification)
- Name/nickname (optional)
- Comment content (with metadata including IP address, browser user agent)
2.2 Automatically Collected Information
- Technical Data: IP address, device type, browser version, cookies (see Section 6)
- Usage Data: Pages visited, session duration, clickstream patterns (via Google Analytics)
3. Legal Basis & Processing Purposes
| Data Type | Purpose | Legal Basis (GDPR) |
|---|---|---|
| Email addresses | Spam comment prevention | Article 6(1)(f) Legitimate Interests |
| Comment content | Content moderation & display | Article 6(1)(a) Consent |
| IP addresses | Security threat prevention | Article 6(1)(f) Legal Obligation |
4. Data Sharing & Transfers
4.1 Third-Party Processors
- Spam Protection: Akismet (Automattic Inc.) under EU-US Data Privacy Framework
- Analytics: Google Analytics (with IP anonymization enabled)
4.2 Legal Disclosures
Shared only with law enforcement when legally required.
5. Data Retention
- Comments: Retained until deletion request or service termination
- Server Logs: Automatically purged within 12 months
6. Cookies Usage
6.1 Essential Cookies
- Session Cookie: Maintains login status (24h validity)
- Security Cookie: CSRF protection (session-based)
6.2 Analytical Cookies
- _gid (24h), _ga (2 years) via Google Analytics
- Cookie consent banner enabled
7. Your Rights
Under GDPR/CCPA, you may:
- Access: Request data copy (within 30 days)
- Erasure: Delete comment data (identity verification required)
- Rectification: Correct personal data in comments
- Objection: Opt-out of analytics tracking
Exercise Rights: Email [Your Email] with “Data Subject Request” in subject.
8. Security Measures
- Encryption: TLS 1.3 across all pages
- Data Segregation: Comment data stored separately from user profiles
- Audits: Quarterly vulnerability scans
9. Policy Updates
Material changes will be notified via:
- Website banner for 30 consecutive days
- Email to registered users (if processing changes occur)
10. Children’s Privacy
We:
- Do not knowingly collect data from under-13s
- Will immediately delete discovered child-related data
Contact Us
For privacy concerns, email: [fragrancemaven@fragrancemaven.com]