Privacy Policy - Gospel of Reason

1. Introduction

At Gospel of Reason (“we,” “us,” or “our”), we are deeply committed to safeguarding the personal information of our website visitors, users, and customers. We understand the importance of privacy and data protection as fundamental rights. This Privacy Policy outlines how we collect, use, disclose, and secure personal data in accordance with applicable privacy laws, including the General Data Protection Regulation (GDPR) and the California Consumer Privacy Act (CCPA).

By accessing or using gospelofreason.com (the “Website”), you acknowledge and agree to the terms outlined in this Privacy Policy.

2. Scope of Policy and Data Controller

This Privacy Policy applies to all personal data collected through the Website and related services, including communication and interaction with us via forms, emails, or customer service. Gospel of Reason is the data controller responsible for determining the purposes and means of processing your personal information.

For privacy-related inquiries, please contact us at: [email protected].

3. Categories of Personal Data Processed

We process the following categories of personal data:

a) Usage Data:
Information about your interactions with our Website, including your IP address, browser type, device identifiers, time zone settings, geolocation, referral sources, pages visited, session duration, and navigation paths.

b) Account Data:
Personal details you submit when creating an account, such as your full name, email address, phone number, and mailing address.

c) Profile Data:
Information about your preferences, purchase history, viewed content, and any personal interests you have indicated.

d) Communication Data:
Records of communications between you and us, including inquiries, support requests, feedback, and internal contact notes.

e) Technical Data:
Information essential to operating our services, including device operating systems, hardware configurations, browser plugins, screen resolutions, and other system-level diagnostics.

f) Transaction Data:
Details of transactions executed through our Website, including payment method (securely processed via third-party providers), billing address, delivery information, and order confirmations.

g) Preference Data:
Marketing and communication preferences, such as your consent to receive newsletters, promotional content, updates, event invitations, and product preferences.

4. Legal Bases for Processing

We only process personal data when there is a valid legal basis under GDPR and CCPA, including:

– Consent: Where you have expressly agreed to the processing of your data, such as for marketing communications.
– Performance of Contract: To fulfill obligations in relation to a contract you are entering into or have entered into with us.
– Legal Obligation: To fulfill applicable legal requirements or respond to lawful requests.
– Legitimate Interests: Where the processing is reasonably necessary for our legitimate business interests, such as improving user experience, securing the Website, monitoring analytics, or preventing fraud—provided those interests are not overridden by your rights.

5. Your Data Protection Rights

In accordance with GDPR and CCPA, you have the following rights regarding your personal data:

– Right of Access: You may request access to the personal data we hold about you.
– Right to Rectification: You may request that we correct any inaccurate or incomplete data.
– Right to Erasure: You may request deletion of your personal data, subject to legal and contractual limitations.
– Right to Restrict Processing: You may request that we limit the processing of your personal data in specific circumstances.
– Right to Data Portability: You may obtain your data in a structured, commonly used, and machine-readable format and transmit it to another controller.
– Right to Object: You may object to certain types of processing, including direct marketing.

To exercise any of these rights, please contact us at: [email protected]. We will address your request in accordance with applicable legal requirements.

6. Security Measures

We have implemented robust physical, technical, and administrative safeguards to secure personal data:

– End-to-end encryption of data in transit and at rest
– Access controls and strict authentication protocols
– Regular data backups and contingency procedures
– Staff training on data protection and secure handling procedures
– Routine monitoring for suspicious or unauthorized activity

Despite our efforts, no system can ever be completely secure. We encourage users to use strong passwords and maintain good security practices when using our Website.

7. International Data Transfers

If you are located outside the United States, be aware that your personal data may be transferred to and processed in jurisdictions which may not provide the same level of data protection as your home country.

To safeguard international transfers, we rely on standard contractual clauses approved by the European Commission, as well as other legally approved safeguards under GDPR and CCPA.

8. Data Retention

We retain personal data only for the duration necessary to fulfill the purposes for which it was collected or to satisfy legal, regulatory, or contractual obligations. Retention periods include, but are not limited to:

– Account and profile data: until account closure or user request
– Transaction data: up to 7 years for financial and tax compliance
– Communication data: up to 3 years following the most recent contact
– Technical and usage data: up to 18 months, unless required for security monitoring

We regularly review and purge data securely when retention criteria have been met.

9. Cookie Policy

The Website uses cookies and similar technologies to enhance your browsing experience and analyze traffic. Cookies fall into the following categories:

– Essential Cookies: Required for core functionality such as login and navigation.
– Functional Cookies: Facilitate preferences and personalized content.
– Analytics Cookies: Help us understand user behavior via aggregated browsing data.
– Performance Cookies: Monitor Website performance and optimize responsiveness.

These cookies do not typically collect information that directly identifies you.

10. Cookie Management and Legal Compliance

You have full control over your cookie preferences. Upon first visit, you will be presented with a consent banner compliant with GDPR and CCPA standards. You may withdraw your consent at any time by adjusting your browser settings or accessing the cookie preferences panel on our Website.

For users based in California, you may opt-out of the “sale” of personal information by contacting us or activating relevant settings. We honor Do Not Track (DNT) signals where browser technology supports it.

11. Children’s Privacy

Our Website is not directed to children under the age of 13, and we do not knowingly collect personal data from minors without verifiable parental consent. If we become aware that we have inadvertently collected data from a child under 13, we will take all reasonable steps to delete such information promptly.

Parents or legal guardians who believe their child has submitted personal information may reach us at: [email protected].

12. Policy Updates

We may update this Privacy Policy from time to time to reflect changes in technology, legal requirements, or our data processing activities. All modifications will be posted prominently on this page. Where material changes are made, we will endeavor to notify users through appropriate channels.

You are encouraged to review this Privacy Policy periodically to stay informed about how we protect your data.

13. Contact Information

If you have any questions, concerns, or requests regarding this Privacy Policy or your personal information, please contact us at:

Email: [email protected]
Website: https://gospelofreason.com

We are fully committed to compliance with applicable data protection laws and to safeguarding your rights. Please do not hesitate to contact us with any privacy-related inquiries.