Privacy Policy for run-2-3.com

1. Introduction

At run-2-3.com (“we”, “our”, or “us”), your privacy and the security of your personal data are of paramount importance. We are committed to maintaining the confidentiality, integrity, and availability of your personal data and to processing it in accordance with applicable data protection laws, including the European Union’s General Data Protection Regulation (GDPR) and the California Consumer Privacy Act (CCPA). This Privacy Policy outlines the manner in which we collect, use, disclose, and safeguard your personal information when you use our website and services.

2. Scope of Policy and Data Controller Role

This Privacy Policy applies to all personal data collected through run-2-3.com, including any communications, interactions, and services offered through our website. For the purposes of the GDPR, we act as the “data controller” of your personal data—meaning we are responsible for deciding the manner and purpose of processing such data. For residents of California, we may also act as a “business” under the CCPA, which places additional obligations on how we handle personal information.

3. Categories of Data Processed

We may collect and process the following categories of personal data:

a. Usage Data
Includes information such as your browser type, operating system, IP address, session information, site navigation paths, and site interactions. This data is collected automatically when you visit run-2-3.com.

b. Account Data
If you create an account on our website, we may collect your name, mailing address, email address, phone number, and any credentials required to authenticate your access.

c. Profile Data
Includes details about your preferences, purchase history, product interests, behavioral insights, and user-generated content such as reviews or comments.

d. Communication Data
Covers your interactions with customer support, submitted inquiries, complaint data, live chat history, and email communication.

e. Technical Data
Covers data such as IP addresses, system type, operating system, time zone settings, browser plug-in types, and hardware-specific identifiers.

f. Transaction Data
Includes information related to purchase orders, payment details (processed via secure third-party processors), shipping addresses, and order fulfillment data.

g. Preference Data
Encompasses your preferences regarding marketing communications, product interests, and cookie consent data.

4. Legal Bases for Processing Personal Data

We process personal data only when legally permitted to do so, based on one or more of the following legal grounds:

– Contractual Necessity: When we need to process your data to fulfill a contract you are party to (e.g., orders or account management).
– Legitimate Interests: For purposes such as fraud prevention, network security, business analysis, and improving our services—without overriding your fundamental rights.
– Consent: Where legally required, we will seek your explicit consent for activities such as direct marketing or use of non-essential cookies.
– Legal Obligation: When processing is necessary to comply with legal or regulatory responsibilities.

5. Your Rights

Under GDPR and CCPA, you are entitled to exercise the following rights regarding your personal data:

– Right of Access: Obtain confirmation and a copy of your personal data that we hold.
– Right to Rectification: Request correction of inaccurate or incomplete data.
– Right to Erasure: Ask us to delete your personal data, subject to applicable exceptions.
– Right to Restrict Processing: Temporarily limit our processing of your data.
– Right to Data Portability: Receive your data in a structured, commonly used format and transmit it to another controller.
– Right to Object: Object to data processing based on legitimate interest or direct marketing.
– Right to Withdraw Consent: Revoke consent at any time, where processing is based on consent.
– Right Not to Be Subject to Automated Decision-Making: Not be subject to decisions based solely on automated processing.

To exercise any of these rights, please contact us at [email protected].

6. Security Measures

We take the protection of your personal data seriously and implement appropriate technical and organizational measures, including but not limited to:

– Encryption of sensitive data both in transit and at rest
– Strict access controls enforced via authentication protocols
– Regular data backups and redundancy measures
– Continuous security assessments and training for staff handling personal information
– Secure hosting environments and third-party vendor scrutiny

7. International Transfers

Your personal data may be transferred and stored outside of your jurisdiction, including countries that do not have the same data protection laws. When such transfers occur, we use legally approved mechanisms such as Standard Contractual Clauses and implement safeguards to ensure adequate protection of your personal information in accordance with GDPR and relevant compliance frameworks, including CCPA requirements.

8. Data Retention

We retain personal data only as long as necessary to fulfill the purposes outlined in this Policy or as required to meet legal, contractual, or regulatory obligations. Retention periods vary by data type:

– Account data: Retained while the account is active and for up to seven years thereafter
– Transaction data: Retained for up to seven years for financial and tax compliance
– Communication data: Retained for a minimum of two years
– Marketing preference data: Retained until consent is withdrawn or up to three years from last interaction
– Usage and technical data: Retained for up to 24 months for analytics and performance improvement

9. Cookie Policy

Our website uses cookies and similar tracking technologies to enhance your browsing experience. Cookies fall under the following categories:

– Essential Cookies: Necessary for core website functionality, such as account access or secure login.
– Functional Cookies: Enhance usability by remembering user preferences or selections.
– Performance and Analytics Cookies: Collect aggregated, anonymized data for statistical and performance analysis. We may use services like Google Analytics, which set their own cookies in accordance with their privacy settings.
– Advertising Cookies: Not currently used on run-2-3.com, but may be introduced in future with required notice and consent.

10. Cookie Management & Compliance

Upon your first visit to run-2-3.com, a cookie banner will be displayed prompting you to accept or customize your cookie preferences. You may amend your cookie settings at any time through our website footer or browser settings. We honor user preferences as mandated by GDPR and CCPA, including Do Not Track signals and opt-out requests.

11. Special Protections for Children

Our services are not directed to individuals under the age of 13. We do not knowingly collect personal data from children. If you believe a child has submitted information to us, please contact us at [email protected] and we will act promptly to delete such data.

12. Policy Updates & User Notifications

We reserve the right to update or modify this Privacy Policy at any time in response to legal, regulatory, or operational changes. Any updates will be reflected on this page, and where material changes occur, we will notify users through appropriate channels, such as on-site notices or via email where applicable.

13. Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy or your personal data, please contact us at:

Email: [email protected]

We are committed to full compliance with all data protection legislation applicable to our operations and to upholding the rights of our users. If you believe your data has been handled improperly, please reach out directly so we can investigate and resolve your concern swiftly.