Effective Date: March 1, 2024
NatureWaves ("we," "us," or "our") respects your privacy and is committed to protecting your personal data. This Privacy Policy explains how we collect, use, and safeguard your information in compliance with applicable privacy laws including GDPR, CCPA, and Google's advertising policies.
1. Information We Collect
Personal Information You Provide:
- Contact information (name, email address, phone number)
- Account registration details
- Messages and communications you send us
- Survey responses and feedback
- Newsletter subscription preferences
Automatically Collected Information:
- IP address and device identifiers
- Browser type and version
- Pages visited and time spent on our site
- Referring website information
- Geographic location (city/country level)
Cookies and Tracking Technologies:
We use cookies, web beacons, and similar technologies to enhance your experience. You can control cookie preferences through your browser settings.
2. How We Use Your Information
- Provide and improve our relaxation and wellness services
- Send newsletters and educational content (with consent)
- Respond to inquiries and provide customer support
- Analyze website usage and optimize user experience
- Comply with legal obligations and protect our rights
- Prevent fraud and ensure security
- Conduct research and development for new features
3. Legal Basis for Processing (GDPR)
- Consent: Newsletter subscriptions and marketing communications
- Contract Performance: Service delivery and account management
- Legitimate Interest: Website analytics and security
- Legal Obligation: Compliance with applicable laws
4. Information Sharing and Disclosure
We do not sell your personal information. We may share information with:
- Service Providers: Trusted third parties who assist in operations (hosting, analytics, email services)
- Legal Requirements: When required by law or to protect rights and safety
- Business Transfers: In connection with mergers or acquisitions (with notice)
- Consent-Based: Other parties with your explicit permission
5. Google Services and Advertising
We may use Google services including:
- Google Analytics: To understand website usage patterns
- Google Ads: To display relevant advertisements
- Google reCAPTCHA: To prevent spam and abuse
Google may collect and process data according to their Privacy Policy. You can opt out of Google Analytics using the Google Analytics Opt-out Browser Add-on.
6. Data Retention
We retain personal information only as long as necessary for the purposes outlined in this policy or as required by law. Account data is typically retained for 7 years after account closure, while marketing data is kept for 3 years unless you opt out earlier.
7. Your Rights and Choices
Depending on your location, you may have the following rights:
- Access: Request copies of your personal information
- Correction: Update or correct inaccurate data
- Deletion: Request deletion of your personal information
- Portability: Receive your data in a structured format
- Restriction: Limit processing of your information
- Objection: Object to processing based on legitimate interest
- Withdraw Consent: Withdraw consent for marketing communications
8. Data Security
We implement industry-standard security measures including:
- SSL encryption for data transmission
- Secure server infrastructure with access controls
- Regular security audits and updates
- Employee training on data protection
- Incident response procedures
9. International Data Transfers
If you are located outside the United States, your information may be transferred to and processed in the U.S. We ensure appropriate safeguards are in place for international transfers in compliance with applicable privacy laws.
10. Children's Privacy
Our services are not directed to children under 13. We do not knowingly collect personal information from children under 13. If we discover such information has been collected, we will delete it promptly.
11. California Privacy Rights (CCPA)
California residents have additional rights including the right to know what personal information is collected, sold, or disclosed, and the right to delete personal information. We do not sell personal information to third parties.
12. Updates to This Policy
We may update this Privacy Policy periodically. We will notify you of material changes via email or website notice at least 30 days before the changes take effect.
13. Contact Information
For privacy-related questions, requests, or complaints:
- Email: privacy@naturewaves.blog
- Phone: (912) 262-6531
- Mail: NatureWaves Privacy Officer, 299 Village At Glynn Pl, Brunswick, Georgia 31525
EU Representative: For GDPR-related matters, you may contact our EU representative at gdpr@naturewaves.blog
14. Supervisory Authority
If you are an EU resident, you have the right to lodge a complaint with your local data protection supervisory authority if you believe we have not complied with applicable data protection laws.