Privacy Policy

1. Introduction

At matthewtivy.com (“we,” “our,” or “us”), we are firmly committed to safeguarding your personal data and upholding your privacy. Transparency and accountability are central to the way we handle your information. This Privacy Policy outlines how we collect, use, protect, and share your personal data when you interact with our website and associated services. We adhere to applicable data protection regulations, including the General Data Protection Regulation (“GDPR”) and the California Consumer Privacy Act (“CCPA”), ensuring responsible data stewardship and your rightful control over personal information.

2. Scope of Policy and Data Controller Role

This Privacy Policy applies to all users of matthewtivy.com and related services, regardless of geographic location. For purposes of data protection laws, matthewtivy.com is the data controller for personal data collected via this website. If you have questions regarding your personal data, please contact us at [email protected].

3. Categories of Data Processed

We may collect and process the following categories of personal data:

a) Usage Data
Includes information about your interactions with our website, such as IP address, browser type, session duration, referral pathways, and activity logs.

b) Account Data
Provided directly by you and includes full name, address, email address, and phone number, typically submitted during inquiries or service registration.

c) Profile Data
Comprises demographic information, preferences, previous service interactions, and behavioral insights derived from your engagement with the website.

d) Communication Data
Encompasses correspondences sent to or from us, including support requests, enquiry submissions, and communication history.

e) Technical Data
Covers information collected from your device, including device type, operating system, browser version, screen resolution, and language settings.

f) Transaction Data
Includes data related to payment methods, billing addresses, and service delivery records necessary for fulfilling contractual obligations.

g) Preference Data
Captures marketing preferences, subscription settings, expressed interests, and opt-in/out status for promotional communications.

4. Legal Bases for Processing

Our processing of personal data is grounded in the following lawful bases under GDPR:

– Contractual Necessity: When processing is required for the performance of a contract to which you are a party.
– Legitimate Interests: For administrative, security, marketing, or analytical purposes in ways that do not override your fundamental rights and freedoms.
– Consent: Where you have provided affirmative consent, for instance, by subscribing to a newsletter or accepting optional cookies.
– Legal Obligation: When processing is necessary to comply with statutory or regulatory requirements.

Under the CCPA, your personal data may be processed for “business purposes” such as maintaining security, processing transactions, and customer service.

5. Your Rights

Subject to applicable legislation, you have the following rights:

– Right to Access: You may request a copy of the personal data we hold about you.
– Right to Rectification: You have the right to correct inaccurate or incomplete data.
– Right to Erasure: You may request deletion of your data, subject to certain legal exceptions.
– Right to Restriction: You may limit our processing under specific circumstances.
– Right to Data Portability: You may receive your data in a structured, commonly used digital format.
– Right to Object: You can object to processing based on our legitimate interests or for direct marketing purposes.

Residents of California may additionally exercise rights to opt out of the sale of personal information and to non-discrimination for rights invocation.

To exercise your rights or submit a request, please contact us via [email protected].

6. Security Measures

We implement a layered security strategy to protect your data, which includes:

– Encryption (SSL/TLS) to secure data in transit
– Role-based access controls and authentication protocols
– Secure servers and system hardening practices
– Routine data back-ups and disaster recovery plans
– Staff training on privacy compliance and incident response

These measures are reviewed regularly to ensure ongoing resiliency and protection against unauthorized access, misuse, or breach.

7. International Transfers

As an online platform, your data may be stored or processed outside your home jurisdiction, including in regions without equivalent data protection laws. Where such international transfers occur, we ensure adequate safeguards are in place, such as Standard Contractual Clauses approved by the European Commission or compliance with recognized certification mechanisms.

By using matthewtivy.com, you consent to such international data transfers, subject to your data protection rights.

8. Data Retention

We retain personal data only for as long as is necessary for the purpose for which it was collected, or as required by applicable law. Retention periods typically are:

– Usage and Technical Data: up to 26 months
– Account, Profile, and Communication Data: as long as user account remains active plus a brief archival period
– Transaction Data: up to 7 years for financial compliance
– Preference Data: maintained until user modifies preference or withdraws consent

Upon expiration of applicable retention periods, data is securely deleted or anonymized.

9. Cookie Policy

We use cookies for various purposes to enhance user experience and website performance. Types of cookies include:

– Essential Cookies: Required to operate matthewtivy.com and ensure website integrity.
– Functional Cookies: Enable personalization of services and user preferences.
– Analytics Cookies: Collect anonymized data on website usage and traffic patterns.
– Performance Cookies: Assess system performance and provide diagnostic data.

10. Cookie Management and Compliance

Upon visiting matthewtivy.com, you are provided with a consent tool enabling acceptance or rejection of non-essential cookies, in compliance with GDPR and CCPA. You may further manage cookie settings through your browser or opt-out mechanisms provided by third-party analytics providers. Revoking consent does not impact access to core website features.

11. Special Protections for Children

Our website and services are not directed at, nor do we knowingly collect personal data from, individuals under the age of 13. If we become aware that we have inadvertently collected such information, we will promptly delete it. If you believe that we may have collected personal data from a child without appropriate consent, please contact us at [email protected].

12. Policy Updates

We reserve the right to revise this Privacy Policy to reflect changes in law, technology, or our business practices. Material changes will be communicated prominently on matthewtivy.com. Continued use of our platform implies agreement to the prevailing version.

13. Contact

For questions, concerns, or to exercise your privacy rights, please contact us using the details below:

Email: [email protected]
Website: https://matthewtivy.com

We are fully committed to lawful and transparent data handling in accordance with GDPR, CCPA, and other applicable regulations. Should you have any privacy-related inquiries, please do not hesitate to reach out.