Privacy Policy for Tayflow.com

1. Introduction

Tayflow (“we,” “us,” or “our”) is committed to safeguarding your personal data and respecting your privacy. We recognize the importance of protecting your personal information and are dedicated to maintaining transparency about how we collect, use, store, and share your data. This Privacy Policy outlines our practices in accordance with applicable data protection regulations, including the General Data Protection Regulation (GDPR) and the California Consumer Privacy Act (CCPA), and affirms our ongoing commitment to privacy-first principles.

2. Scope of Policy and Controller Responsibility

This Privacy Policy applies to all visitors, users, and others who access or use the website tayflow.com (the “Site”). For the purposes of data protection laws, Tayflow is the “data controller” for all personal data collected through the Site, meaning we determine the purposes and means of processing your personal information.

By using tayflow.com, you acknowledge that you have read and understood this Privacy Policy.

3. Categories of Data We Process

We may process the following categories of personal data:

a. Usage Data
Information about how you use our Site, including your IP address, browser type, pages visited, time spent on pages, referring URLs, operating system, traffic data, logs, and other communication data.

b. Account Data
Personal details provided when you create an account or profile on tayflow.com, including your full name, email address, phone number, mailing or billing address.

c. Profile Data
Information that you choose to submit as part of your user profile or during your interactions with us, including purchase history, preferences, behavioral data, and survey responses.

d. Communication Data
Any communications you send to us, including inquiries submitted via email, support tickets, chat logs, contact forms, and other direct correspondence.

e. Technical Data
Information related to the devices and technology you use to access tayflow.com, such as device type, operating system, browser version and settings, language preferences, and screen resolution.

f. Transaction Data
Details of purchases and transactions made through the Site, including order history, payment methods (excluding full credit card data, which is managed through third-party payment processors), billing and delivery addresses, and confirmation numbers.

g. Preference Data
Information you provide about your marketing and communication preferences, subscription settings, and product or content interests.

4. Legal Bases for Data Processing

We process your personal data only when we have a lawful basis to do so, including:

– Consent: Where you have given clear, affirmative permission for us to process your data for specific purposes, such as email marketing or account personalization.
– Contractual necessity: When data processing is required to perform a contract with you, such as fulfilling orders or providing services.
– Legal obligation: When required to comply with applicable laws or regulatory obligations.
– Legitimate interests: Where processing is necessary for the purposes of our legitimate business interests, provided your interests and fundamental rights do not override those interests. Examples include fraud prevention, security monitoring, service improvement, and direct marketing of similar goods or services.

5. Your Data Protection Rights

Under GDPR, CCPA, and other applicable data protection laws, you have the following rights with respect to your personal data:

– Right of Access: You can request confirmation and a copy of the personal data we hold about you.
– Right to Rectification: You may request the correction of inaccurate or incomplete data.
– Right to Erasure: You can request the deletion of your personal data, subject to legal obligations.
– Right to Restriction: You may request that we restrict the processing of your personal data in certain circumstances.
– Right to Data Portability: You can request a copy of your data in a structured, commonly used, and machine-readable format and have the right to transmit it to another controller.
– Right to Object: You may object to the processing of your personal data for reasons related to your particular situation, including marketing-related processing.

To exercise your rights, please contact us at: [email protected]. We will respond to legitimate requests in accordance with applicable legal requirements.

6. Data Security and Safeguards

We implement appropriate technical and organizational measures to protect your personal data from unauthorized access, accidental loss, destruction, or disclosure. These measures include:

– End-to-end encryption (HTTPS/TLS)
– Access control and authentication procedures
– Secure data storage and server-side protections
– Regular data backups and disaster recovery processes
– Staff confidentiality agreements and privacy training

While no system is entirely secure, we continually evaluate and upgrade our security practices to reduce the risk of unauthorized access or disclosure.

7. International Data Transfers

Your information may be stored and processed in jurisdictions outside your country of residence, including in countries that may not provide the same level of data protection. When we transfer personal data internationally, we use appropriate safeguards such as:

– Contractual clauses approved by the European Commission (Standard Contractual Clauses)
– Regional and industry-specific frameworks (e.g., UK GDPR adequacy decisions, U.S. Privacy Shield successor frameworks where applicable)

These mechanisms ensure that your data receives a level of protection equivalent to that under the applicable data protection laws.

8. Data Retention

We retain personal data only for as long as necessary to fulfill the purposes for which it was collected and to comply with legal, accounting, or reporting obligations. Retention periods may vary based on data type:

– Account Data: Retained for the duration of your account and up to 6 years thereafter.
– Transaction Data: Retained for at least 7 years for tax and audit compliance.
– Communication Data: Retained for up to 3 years from the date of last contact.
– Technical and Usage Data: Retained up to 2 years for analytics and performance evaluation.
– Preference Data: Retained until consent is withdrawn or after inactivity of 24 months.

9. Cookie Policy

tayflow.com uses cookies and similar technologies to enhance your experience and analyze Site usage. Cookies fall into the following categories:

– Essential Cookies: Necessary for website functionality, including navigation and security.
– Functional Cookies: Enable enhanced personalization, such as remembering user preferences.
– Analytics Cookies: Collect aggregated statistical data to help us understand website usage (e.g., Google Analytics).
– Performance Cookies: Improve site speed, responsiveness, and load-balancing.

Our use of cookies is governed by this Privacy Policy and cookie banners at relevant touchpoints.

10. Cookie Management and Compliance

In compliance with GDPR and CCPA, users are offered clear notice and choice regarding cookie use. You may manage cookie preferences via your browser settings or our on-site cookie consent tool, allowing you to opt in or out of non-essential cookies at any time.

California residents may opt out of the sale of personal data through links and disclosures as required under CCPA. We honor browser-based Do Not Track (DNT) and Global Privacy Control (GPC) signals where applicable.

11. Children’s Privacy

Our services are not intended for individuals under the age of 13, and we do not knowingly collect or process personal data from children without verifiable parental consent. If you believe a child under 13 has provided us personal data without proper authorization, please contact us immediately at [email protected].

12. Policy Updates and Notifications

We reserve the right to update this Privacy Policy to reflect legal or operational changes. We encourage users to review this page periodically for any changes. Material changes will be communicated clearly either via email or by prominent notification on tayflow.com.

Your continued use of the Site constitutes your acknowledgment of the most recent version of this Privacy Policy.

13. Contact Us

For questions regarding this Privacy Policy, how your data is handled, or to exercise your rights, please contact us at:

Email: [email protected]
Website: https://www.tayflow.com

We are committed to ensuring your privacy is respected and protected in line with global standards. If you have any concerns, we encourage you to reach out directly.