Privacy Policy for run-2-3.com

1. Introduction

At run-2-3.com (“we,” “our,” or “us”), your privacy is of paramount importance. We are committed to handling your personal data with integrity, transparency, and respect for your rights. This Privacy Policy outlines how we collect, use, disclose, and protect your personal information in accordance with applicable data protection laws, including the European Union’s General Data Protection Regulation (“GDPR”) and the California Consumer Privacy Act (“CCPA”).

We adopt a privacy-first approach, which means that your data is processed only when necessary, stored with security as a priority, and managed in a way that supports your rights and ensures compliance with relevant laws.

2. Scope of Policy and Data Controller Role

This Privacy Policy applies to all visitors, users, and others interacting with run-2-3.com, whether through browsing the website, registering an account, making a purchase, or contacting support. For the purposes of the GDPR and other applicable privacy regulations, run-2-3.com is the “data controller” of your personal data.

If you have any questions about this policy or how we handle your data, you may contact us at [email protected].

3. Categories of Data Processed

We collect and process different types of personal data, depending on how you interact with our website and services:

a. Usage Data
Information automatically collected when you access run-2-3.com, including browser type and version, IP address, traffic source, time zone setting, session timestamps, site navigation patterns, and interactions with specific content.

b. Account Data
Personal details provided at registration or checkout, such as first and last name, mailing address, email address, phone number, login credentials, and account preferences.

c. Profile Data
Details obtained through your profile and interactions with our services, including purchase history, preferences, saved items, reviews, and behavioral engagement with site features.

d. Communication Data
Records of communication you initiate, including support inquiries, form submissions, complaint handling, and messaging logs.

e. Technical Data
Information about the device and technology you use to access our services, such as device type, operating system, hardware settings, browser settings, app version, and mobile carrier data where applicable.

f. Transaction Data
Details related to purchases or service delivery, including payment information (processed through third-party payment processors), billing and shipping addresses, order history, and fulfillment status.

g. Preference Data
Information related to your communication preferences, such as newsletter opt-ins, marketing consent, previously selected interests, and participation in surveys or promotional campaigns.

4. Legal Bases for Processing

We process your personal data only when we have a valid legal basis, which may include:

– Contractual necessity: Processing required to perform contractual obligations to you (e.g., to deliver goods you’ve purchased).
– Consent: Where you have explicitly consented to data processing (e.g., for marketing emails).
– Legitimate interest: Where processing enables us to improve our services, detect fraud, or communicate insights in a way that balances our interests with your rights.
– Legal obligation: Where we are required to process personal data to comply with applicable laws.

5. Your Rights

Under applicable data protection laws, you may have the following rights regarding your personal data:

– Right of Access: Obtain confirmation regarding the existence of your data and access to your personal data.
– Right to Rectification: Correct inaccurate or incomplete data we hold about you.
– Right to Erasure: Request deletion of your personal data under certain conditions.
– Right to Restriction of Processing: Request that the processing of your data be restricted under certain circumstances.
– Right to Data Portability: Receive your data in a structured, commonly used, and machine-readable format and transmit it to another controller if feasible.
– Right to Object: Object to data processing for direct marketing or other legitimate interests.
– Right Not to Be Subject to Automated Decision-Making: Including profiling that may produce legal effects.

To exercise any of these rights, please contact us at [email protected].

6. Security Measures

We implement robust technical and organizational safeguards designed to maintain the integrity, confidentiality, and availability of your personal data. These measures include:

– Encrypted transmission of data using SSL/TLS protocols.
– Access controls and authentication for internal systems.
– Routine data backup and disaster recovery protocols.
– Employee training on data security and privacy best practices.

While we strive to protect your information, no system is entirely immune to risk. Users should practice secure behavior and notify us immediately of any suspected data breach.

7. International Transfers

Some of the data we collect may be transferred to and processed in countries outside the European Economic Area (EEA). When such transfers occur, we rely on:

– European Commission-approved Standard Contractual Clauses.
– Adequacy decisions by the European Commission.
– Additional technical and organizational measures to ensure protection.

We comply with all applicable legal requirements in relation to cross-border transfers of personal data.

8. Data Retention

We retain your data only for as long as necessary to fulfill the purposes outlined in this Privacy Policy and comply with legal obligations. Specific retention periods are as follows:

– Usage Data: Retained for 12 months from the date of collection.
– Account Data: Held as long as your account is active plus 6 years for legal and compliance requirements.
– Transaction Data: Retained for 7 years to comply with tax and auditing laws.
– Communication Data: Retained for 3 years for operational continuity and customer service.
– Preference Data: Maintained for 2 years from the last user interaction or until consent is revoked.

Upon expiration of these periods, data is securely deleted or anonymized.

9. Cookie Policy

Our website uses cookies and similar technologies to enhance user experience and analyze traffic. The cookies we use fall into the following categories:

– Essential Cookies: Required for website functionality (e.g., shopping cart, secure login).
– Functional Cookies: Support personalized features and settings (e.g., saved preferences).
– Analytics Cookies: Help us understand site usage patterns and measure performance.
– Performance Cookies: Monitor site health, speed, and responsiveness.

10. Cookie Management and Compliance with GDPR & CCPA

Users are presented with a clear choice to manage cookie preferences upon visiting run-2-3.com. You may opt-in or opt-out of non-essential cookies at any time by accessing our Cookie Settings page.

Under CCPA, California residents also have the right to opt-out of the sale of their personal information. While we do not sell personal data as traditionally defined, we honor opt-out requests related to third-party tracking technologies as required.

11. Special Protections for Children Under 13

run-2-3.com is not intended for children under the age of 13. We do not knowingly collect personal data from individuals under 13 years of age. If we become aware that we have inadvertently collected data from a child, we will promptly delete such data.

Parents or guardians who believe their child has submitted personal data should contact us immediately at [email protected].

12. Policy Updates & User Notifications

We may amend this Privacy Policy to reflect changes in legal requirements, technology, business practices, or user feedback. When updates are made, we will post the revised policy on run-2-3.com and, where appropriate, provide notice by email or on-site notification.

We encourage users to review this page periodically to stay informed about our privacy practices.

13. Contact Us

If you have questions, concerns, or requests regarding your personal data or this Privacy Policy, you may contact our designated privacy team via:

Email: [email protected]

We are committed to maintaining full compliance with applicable privacy regulations and to offering transparency in how your personal data is collected, used, and maintained. Please do not hesitate to reach out with any privacy-related inquiries.