Privacy Policy

TerracePlay (“we,” “us,” or “our”) is committed to protecting your privacy and ensuring the security and integrity of your personal data. This Privacy Policy outlines how we collect, use, disclose, and safeguard personal information when you use our website, terraceplay.com. Your trust is important to us, and we are dedicated to handling your data with the highest standards of transparency and responsibility, in full compliance with applicable data protection laws, including the General Data Protection Regulation (GDPR) and the California Consumer Privacy Act (CCPA).

1. Scope of Policy and Data Controller Role

This Privacy Policy applies to all personal data collected through terraceplay.com. For the purposes of the GDPR and CCPA, TerracePlay is the data controller responsible for the collection and use of your personal information. This policy applies to visitors, users, and account holders who access or use our services via terraceplay.com, regardless of location.

2. Categories of Data Processed

We collect and process the following categories of personal data:

a. Usage Data
Includes information about your interactions with our website, such as IP address, browser type, access times, pages viewed, referring URLs, session duration, and other diagnostic data.

b. Account Data
Includes identifying details you voluntarily provide during registration or checkout, such as your full name, billing and shipping addresses, email address, and telephone number.

c. Profile Data
Comprises data associated with your user profile, including preferences, interests, browsing behavior, order history, wish lists, and feedback submissions.

d. Communication Data
Includes records of your communications with us, such as emails, support tickets, contact form submissions, chat transcripts, and correspondence history.

e. Technical Data
Includes device-specific data such as your operating system, system configurations, mobile device identifiers, browser language settings, and device event information.

f. Transaction Data
Includes payment details (such as masked credit card information), billing information, delivery addresses, and transaction history related to purchases made via terraceplay.com.

g. Preference Data
Includes your communication preferences, product interests, marketing opt-ins, and cookie consent choices.

3. Legal Bases for Processing

We rely on the following legal bases under GDPR for processing personal data:

– Consent: Where explicit consent is provided (e.g., for marketing communications or use of non-essential cookies).
– Contractual Necessity: Where processing is necessary for the performance of a contract with you (e.g., fulfilling orders).
– Legitimate Interests: Where processing is necessary for our legitimate business interests, and those interests are not overridden by your rights (e.g., to improve site functionality, prevent fraud).
– Compliance with Legal Obligations: Where processing is required to comply with laws and regulations (e.g., tax or financial reporting obligations).

Under CCPA, this processing may also be categorized as “collection,” “use,” “sharing,” or “disclosure” of personal information as defined by California law. We do not sell personal information as defined in the CCPA.

4. Your Rights

As a data subject, you are entitled to exercise the following rights under data protection laws, subject to certain conditions and limitations:

– Right of Access: You have the right to request access to the personal data we hold about you.
– Right to Rectification: You may request that we correct or update inaccurate or incomplete information.
– Right to Erasure: You can request the deletion of your personal data where legally permissible.
– Right to Restriction: You may request we restrict processing of your personal data under specific circumstances.
– Right to Data Portability: You have the right to receive your personal information in a structured, commonly used format and to transfer it to another controller.

Under the CCPA, California residents also have the right to:

– Know what personal information is collected, used, and disclosed
– Request deletion of personal information (subject to legal exemptions)
– Opt out of the sale (where applicable) of personal information
– Not be discriminated against for exercising any of the above rights

To exercise any of your rights, please contact us at [email protected].

5. Security Measures

We implement robust administrative, physical, and technical security measures to protect your personal data, including:

– SSL encryption of data in transit
– Role-based access controls
– Regular system audits and vulnerability assessments
– Secure data backups and disaster recovery procedures
– Staff training on data protection and information security

While we take all reasonable precautions, no system can guarantee complete security. We encourage users to maintain good security hygiene, including the use of strong passwords and vigilance against phishing attempts.

6. International Transfers

If your personal data is transferred outside the European Economic Area or other jurisdictions with data protection laws, we ensure that such transfers are safeguarded through standard contractual clauses, adequacy decisions, or other lawful mechanisms compliant with applicable regulations.

7. Data Retention

We retain personal data only for as long as is necessary to fulfill the purpose for which it was collected and to comply with our legal obligations. In general:

– Usage, Technical, and Preference Data: Retained for up to 36 months for analysis and website optimization
– Account and Profile Data: Retained as long as your account remains active or for a maximum of 7 years thereafter
– Transaction and Communication Data: Retained for legal, auditing, and tax purposes for up to 7 years
– Consent records and marketing preferences: Retained until opt-out or withdrawal of consent

Once the relevant retention period expires, your data will be securely deleted or anonymized.

8. Cookie Policy

terraceplay.com uses cookies and similar technologies to enhance your browsing experience. Cookies fall under the following categories:

– Essential Cookies: Required for website functionality, such as authentication and secure login
– Functional Cookies: Enable enhanced usability and personalization features
– Analytics Cookies: Allow us to analyze user behavior and improve performance
– Performance Cookies: Help us measure the effectiveness of our content and understand usage patterns

These cookies may be placed by us or third-party providers whose services we have integrated.

9. Cookie Management and Compliance

In compliance with GDPR and CCPA, we provide users the ability to manage cookie preferences upon their first visit to terraceplay.com through a cookie consent banner. You may also update your preferences or withdraw consent at any time via the “Cookie Settings” feature available on our website.

You may further manage cookie behavior through your browser settings. Disabling certain cookies may affect website functionality.

10. Children’s Privacy

Our services are not directed to children under the age of 13. We do not knowingly collect or process personal data from individuals under 13. If we become aware that such data has been collected without verifiable parental consent, we will take appropriate steps to delete it.

If you believe we may have collected data from a child under 13, please contact us promptly at [email protected].

11. Policy Updates & User Notifications

We reserve the right to update this Privacy Policy to reflect changes in our practices, technology, or legal requirements. When changes occur, we will update the policy on terraceplay.com, and where legally required, notify you via suitable means such as email or website banners.

We encourage you to review this Privacy Policy regularly to stay informed about how we protect your personal data.

12. Contact

If you have any questions, concerns, or requests related to this Privacy Policy or your personal data, please contact our Data Protection Officer at:

Email: [email protected]
Website: https://terraceplay.com

We are committed to complying with all applicable data protection laws and regulations. If you believe your rights under GDPR or CCPA have been violated, you have the right to lodge a complaint with your local data protection authority or the appropriate supervisory body.

We value your privacy. Please contact us at [email protected] with any privacy-related concerns.