Privacy Policy for OrangeCountyFoodandWineFestival.com
1. Introduction
At Orange County Food and Wine Festival (“we,” “us,” or “our”), accessible via https://orangecountyfoodandwinefestival.com, we are deeply committed to safeguarding your privacy and protecting the personal data you entrust to us. This Privacy Policy outlines how we collect, use, share, and protect your information when you interact with our website, register for events, or contact us. We adhere to best practices in data security and comply with governing data protection laws, including the General Data Protection Regulation (GDPR) and the California Consumer Privacy Act (CCPA).
2. Scope of Policy and Controller Responsibility
This Privacy Policy applies to all personal information processed by Orange County Food and Wine Festival through its website and related online services. We act as the “data controller” under GDPR and a “business” under the CCPA in relation to the data collected. As the data controller, we determine the purposes and means of processing your personal data.
3. Categories of Data We Process
We may collect and process the following categories of personal data:
a) Usage Data
Includes technical information such as your IP address, browser type, browser version, referral source, time zone setting, operating system, pages visited, timestamps, and other diagnostic data that help us understand how users interact with https://orangecountyfoodandwinefestival.com.
b) Account Data
Provided when you register or fill out a form on our website, this includes your full name, email address, mailing address, and telephone number.
c) Profile Data
Information relating to your preferences and interests, including event registrations, transaction history, participation in contests or surveys, and event feedback.
d) Communication Data
Records of communication with us, including email exchanges, inquiries, and responses to support or organizational outreach.
e) Technical Data
Device and connection information such as device ID, browser plug-in types, geographic location, internet service provider, and hardware configurations.
f) Transaction Data
Includes payment information (processed through secure third-party payment processors), billing information, shipping addresses, and event attendance records.
g) Preference Data
Collected based on your interaction with marketing emails, product or wine preferences indicated either through your account or surveys, and consent preferences for newsletters and promotional content.
4. Legal Bases for Processing Personal Data
Our lawful bases for processing your personal information under GDPR include:
– Consent: Where you have given clear and explicit permission (e.g., opting into newsletters).
– Contractual Necessity: To fulfill contractual obligations with you (e.g., event registration and ticketing).
– Legal Obligation: To comply with regulatory or statutory requirements.
– Legitimate Interests: Where processing is necessary for our legitimate business purposes, provided that such interests are not overridden by your rights.
Under CCPA, we do not “sell” your personal data as defined by the law.
5. Your Rights
In accordance with GDPR and CCPA, you may exercise the following rights regarding your personal data:
– Right of Access: Obtain a copy of the data we hold about you.
– Right to Rectification: Request correction of any inaccurate or incomplete data.
– Right to Erasure: Ask us to delete your personal data, subject to legal obligations.
– Right to Restrict Processing: Request limitation on the way we use your data.
– Right to Data Portability: Receive your data in a structured, commonly used format for transfer to another provider.
– Right to Object: Object to processing based on legitimate interests or direct marketing.
– Rights under the CCPA: Including the right to know, delete, opt out of sale (we do not sell your data), and non-discrimination.
To exercise any of these rights, please contact us at: [email protected]
6. Security Measures
We implement industry-standard technical and organizational measures to protect your personal data. These include encryption protocols, secure server configurations, access controls, routine system audits, regular patch updates, and employee data protection training. We actively monitor for vulnerabilities to protect your data from unauthorized access, misuse, loss, or disclosure.
7. International Data Transfers
If your personal data is transferred to and processed in countries outside your jurisdiction, we ensure that appropriate safeguards are in place, including Standard Contractual Clauses approved by the European Commission or compliance frameworks such as the EU-U.S. Data Privacy Framework (where applicable), to ensure your data remains protected.
8. Data Retention
We retain personal data only for as long as necessary for the purposes for which it was collected, or as required to comply with legal, regulatory, or contractual obligations. Data retention periods include but are not limited to:
– Account & Profile Data: Retained for the duration of the relationship plus 2 years.
– Transaction Data: Retained for 7 years in compliance with financial regulations.
– Communication Data: Retained for 2 years from last contact.
– Technical and Usage Data: Retained for up to 12 months for analytics and security purposes.
When no longer needed, data is securely deleted or anonymized.
9. Cookie Policy
Our website uses cookies and similar technologies to optimize user experience, personalize content, and analyze traffic. Cookies fall under the following categories:
– Essential Cookies: Necessary for core site functionality (e.g., navigation, form submissions).
– Functional Cookies: Enhance usability and site preferences.
– Analytics Cookies: Help us understand site usage and improve performance (e.g., Google Analytics).
– Performance Cookies: Monitor system performance and website behavior under load.
All cookies used on https://orangecountyfoodandwinefestival.com are managed in compliance with GDPR and CCPA.
10. Cookie Management & Compliance
You have the right to accept or reject non-essential cookies. Upon first visit, you will be prompted with a cookie consent banner where you may opt in or out. You may also modify your cookie preferences at any time via your browser settings or by selecting the “Manage Cookies” link in the website footer.
11. Children’s Privacy
We do not knowingly collect or solicit personal information from children under the age of 13. If we become aware that such data has been collected without verifiable parental consent, it will be promptly deleted. If you believe that a child under the age of 13 has provided us with personal information, please contact us immediately at [email protected].
12. Policy Updates and User Notifications
We reserve the right to modify or update this Privacy Policy at our discretion. Any substantive changes will be posted on this page and, where appropriate, you will be notified via website pop-up or email so you may review the modifications. Continued use of the site constitutes acceptance of the updated terms.
13. Contact
For questions or concerns regarding this Privacy Policy or your personal data, you may contact us at:
Email: [email protected]
Website: https://orangecountyfoodandwinefestival.com
We are committed to full compliance with GDPR, CCPA, and other applicable privacy regulations. If you have privacy-related questions, please reach out to us and we will respond promptly.