DOUGLAS WOOD websites (collectively “DOUGLAS WOOD,” “DOUGLAS WOOD.com”, “we,” or “us” in this document) refer to sites hosted by or on DOUGLAS WOOD. This privacy policy describes how DOUGLAS WOOD uses and protects any information that you give us. We are committed to ensuring that your privacy is protected. If you provide us with personal information through DOUGLAS WOOD, you can be assured that it will only be used in accordance with this privacy statement.

Website Visitors

Like most website operators, DOUGLAS WOOD collects non-personally-identifying information of the sort that web browsers and servers typically make available, such as the browser type, language preference, referring site, and the date and time of each visitor request. DOUGLAS WOOD’s purpose in collecting non-personally identifying information is to better understand how DOUGLAS WOOD’s visitors use its website. From time to time, DOUGLAS WOOD may release non-personally-identifying information in the aggregate, e.g., by publishing a report on trends in the usage of its website.

DOUGLAS WOOD also collects potentially personally-identifying information like Internet Protocol (IP) addresses through Google Analytics and other third party plugins. DOUGLAS WOOD does not use IP addresses to identify its visitors, however, and does not disclose such information, other than under the same circumstances that it uses and discloses personally-identifying information, as described below.

Gathering of Personally-Identifying Information

Certain visitors to DOUGLAS WOOD choose to interact with DOUGLAS WOOD in ways that require us to gather personally-identifying information. The amount and type of information that DOUGLAS WOOD gathers depends on the nature of the interaction.

Examples of when an individual may provide us information:

  • Search for products or services;
  • Place an order through WooCommerce or another eCommerce site;
  • Download, view, or use content on a device, or through a service or application on a device;
  • Provide information in Your Account (and you might have more than one if you have used more than one e-mail address or mobile number) or Your Profile;
  • Configure your settings on/or provide data access permissions for;
  • Provide information in contact forms via Ninja forms;
  • Communicate with us by phone, e-mail, or otherwise;
  • Complete a questionnaire or a contest entry form;
  • Upload images, videos or other files to our website or other websites using third-party plugins;

In each case, DOUGLAS WOOD collects such information only insofar as is necessary or appropriate to fulfill the purpose of the visitor’s interaction with DOUGLAS WOOD. DOUGLAS WOOD does not disclose personally-identifying information other than as described below. And visitors can always refuse to supply personally-identifying information, with the caveat that it may prevent them from engaging in certain website-related activities, like purchasing or receiving website services.

All of the information that is collected on DOUGLAS WOOD will be handled in accordance with GDPR legislation.

Additional details on information that may be collected and/or analyzed through use of this or other DOUGLAS WOOD operated sites (may depend on use of eCommerce site):

  • Internet protocol (IP) address used to connect your computer to the Internet;
  • Login information: e-mail address, password;
  • Location of your device or computer;
  • Content interaction information, such as content downloads, streams, and playback details including duration and number of simultaneous streams and downloads, and network details for streaming and download quality, including information about your internet service provider;
  • Device metrics such as when a device is in use, application usage, connectivity data, and any errors or event failures;
  • Interactions with service features and content, your settings preferences and backup information, location of your device running an application, information about uploaded images and files (e.g., file name, dates, times and location of your images));
  • the full Uniform Resource Locators (URL) clickstream to, through and from our website (including date and time); products and/ or content you viewed or searched for; page response times, download errors, length of visits to certain pages, page interaction information (such as scrolling, clicks, and mouse-overs),
  • Phone numbers used to call our customer service number.

We may also use device identifiers, cookies, and other technologies on devices, applications and our web pages to collect browsing, usage or other technical information for fraud prevention purposes.

Other information from sources we receive include:

  • Updated delivery and address information from our carriers or other third parties, which we use to correct our records and deliver your next purchase or communication more easily;
  • Account information, purchase or redemption information and page-view information from some merchants with which we operate co-branded businesses or for which we provide technical, fulfillment, advertising or other services;
  • Information about your interactions with products and services offered by our subsidiaries;
  • Search results and links, including paid listings (such as Sponsored Links);
  • information about internet-connected devices and services that you’ve linked with Alexa; and
  • Credit history information from credit bureaus, which we use to help prevent and detect fraud and to offer certain credit or financial services to some customers.

Protection of Certain Personally-Identifying Information

DOUGLAS WOOD discloses potentially personally-identifying and personally-identifying information only to those of project administrators, employees, contractors, and affiliated organizations that (i) need to know that information in order to process it on DOUGLAS WOOD’s behalf or to provide services available through DOUGLAS WOOD, and (ii) that have agreed not to disclose it to others. Some of those employees, contractors and affiliated organizations may be located outside of your home country; by using DOUGLAS WOOD, you consent to the transfer of such information to them.

DOUGLAS WOOD will not rent or sell potentially personally-identifying and personally-identifying information to anyone. Other than to project administrators, employees, contractors, and affiliated organizations, as described above, DOUGLAS WOOD discloses potentially personally-identifying and personally-identifying information only when required to do so by law, if you give permission to have your information shared, or when DOUGLAS WOOD believes in good faith that disclosure is reasonably necessary to protect the property or rights of DOUGLAS WOOD, third parties, or the public at large.

If you are a registered user of a DOUGLAS WOOD website and have supplied your email address, DOUGLAS WOOD may occasionally send you an email to tell you about new features, solicit your feedback, or just keep you up to date with what’s going on with DOUGLAS WOOD and our products. We primarily use our blog to communicate this type of information, so we expect to keep this type of email to a minimum.

If you send us a request (for example via a support email or via one of our feedback mechanisms), we reserve the right to publish it in order to help us clarify or respond to your request or to help us support other users. DOUGLAS WOOD takes all measures reasonably necessary to protect against the unauthorized access, use, alteration, or destruction of potentially personally-identifying and personally-identifying information.

Use of Personal Information

We use the information you provide to register for an account on e-commerce sites, attend our events, receive newsletters, or use certain other services. We will not sell or lease your personal information to third parties unless we receive your permission or are required to do so by law.

We would like to send you email marketing communication which may be of interest to you from time to time. If you have consented to marketing, you may always opt out later.

You have a right at any time to stop us from contacting you for marketing purposes. If you no longer wish to be contacted for marketing purposes, please click on the unsubscribe link at the bottom of any email or email DOUGLAS WOOD directly. Please note that although we may not sell your private, personal information, we may share information about you in limited circumstances.

Sharing Information

As stated above, we do not sell your personal information, but we may share your information in limited circumstances. Here are the list of times we may share your information and what may be shared:

  • Subsidiaries, Employees, and Independent Contractors:

We may disclose information about you to our subsidiaries, our employees, and individuals who are our independent contractors that need to know the information in order to help us provide our Services or to process the information on our behalf. We require our subsidiaries, employees, and independent contractors to follow this Privacy Policy for personal information that we share with them.

  • Third Party Vendors:

We may share information about you with third party vendors who need to know information about you in order to provide their services to us, or to provide their services to you or your site. This group of vendors includes that help us provide services to you (payment providers that process your credit and debit card information, fraud prevention services that allow us to analyze fraudulent payment transactions, postal and email delivery services that help us stay in touch with you, customer chat and email support services that help us communicate with you, those that assist us with our marketing efforts (e.g. by providing tools for identifying a specific marketing target group or improving our marketing campaigns), those that help us understand and enhance our Services (like analytics providers), and companies that make products available on our websites (such as the extensions on WooCommerce.com), who may need information about you in order to, for example, provide technical or other support services to you. We require vendors to agree to privacy commitments in order to share information with them.

  • Legal Requests:

We may disclose your information in response to a subpoena, court order, or other governmental request.

  • To Protect Rights, Property, and Others:

We may disclose information about you when we believe in good faith that disclosure is reasonably necessary to protect the property or rights of DOUGLAS WOOD, third parties, or the public.

  • Business Transfers:

In connection with any merger, sale of company assets, or acquisition of all or a portion of the business by another company, or in the unlikely event DOUGLAS WOOD goes out of business or enters bankruptcy, user information would likely be one of the assets that is transferred or acquired by a third party. The Privacy Policy would continue to apply to your information if any of these event were to happen.

  • Aggregated Information or De-Identified Information (see Aggregated Statistics)
  • Other Site Owners:

If you have a WordPress.com account and leave a comment on the site, your IP address and email address associated with your account may be shared with administrator(s) of the site where you left the comment.

  • Published Support Requests:

If you send us a request for service (support email or feedback), we reserve the right to publish the request in order to help clarify or respond to your request or to help us support other users

  • With Your Consent: We may disclose and share your information with your consent or direction.

Legal grounds for processing personal information

We rely on one or more of the following processing conditions:

  • Our legitimate interests in the effective delivery of information and services to you;
  • Explicit consent that you have given;
  • Legal obligations.

Access to data

You have the right to request a copy of the information we hold about you. If you would like a copy of some or all your personal information, please follow the instructions at the end of this policy under Contact.

All customer-provided data can be viewed and changed by the individual. The individual would need to first call or email to view or receive information.

Examples of information you have access to (if applicable):

  • Contact, shipping, and billing information
  • Status of recent orders (including subscriptions);
  • Your complete order history;
  • Personally identifiable information (including name, e-mail, password, communications and personalized advertising preferences, address book and settings);
  • Payment settings (including payment card information and gift voucher, gift card and check balances);
  • E-mail notification settings (including Product Availability Alerts, Deliveries, Special Occasion Reminders, and newsletters);
  • Shopping lists
  • Your content, devices, services, and related settings;
  • Content that you recently viewed;
  • Your Profile (including your product purchases, comments, and personal profile).

Information you have access to may vary depending on the site and the type of information collected (ex. eCommerce sites).

Retention of personal information

We will retain your personal information only for as long as we need to, for the success of the DOUGLAS WOOD projects and the services that support DOUGLAS WOOD. We keep contact information (such as mailing list information) until a user unsubscribes or requests that we delete that information from our live systems. If you choose to unsubscribe from a mailing list, we may keep certain limited information about you so that we may honor your request.

DOUGLAS WOOD will not delete personal data from logs or records necessary to the operation, development, or records of DOUGLAS WOOD.

DOUGLAS WOOD shall maintain individual customer data for at least 3 years to better track and foster community growth, and then automatically delete non-essential data collected. Individual names and email addresses will be retained indefinitely, to preserve our ability to respond to code of conduct reports.

On DOUGLAS WOOD sites, banking/financial data collected as part of a reimbursement request is deleted from DOUGLAS WOOD 30 days after the request is marked paid. The reason for the 30-day retention period is to prevent organizers having to re-enter their banking details if a wire fails or if a payment was marked “Paid” in error. Invoices and receipts related to DOUGLAS WOOD expenses are retained for at least 7 years after the close of the calendar year’s audit, by instruction of our financial consultants (auditors & bookkeepers).

When deletion is requested or otherwise required, we will anonymize the data of data subjects and/or remove their information from publicly accessible sites if the deletion of data would break essential systems or damage the logs or records necessary to the operation, development, or archival records of the DOUGLAS WOOD projects.

Rights in relation to your information

You may have certain rights under data protection law in relation to the personal information we hold about you. In particular, you may have a right to:

  • Request a copy of personal information we hold about you;
  • Ask that we update the personal information we hold about you, or independently correct such personal information that you think is incorrect or incomplete;
  • Ask that we delete personal information that we hold about you from live systems, or restrict the way in which we use such personal information (for information on deletion from archives, see the “Retention of personal information” section);
  • Object to our processing of your personal information; and/or
  • Withdraw your consent to our processing of your personal information (to the extent such processing is based on consent and consent is the only permissible basis for processing).

If you would like to exercise these rights or understand if these rights apply to you, please follow the instructions at the end of this Privacy statement under Contact.

Data Security

We take reasonable and appropriate measures to protect your personal information to prevent loss, unauthorized access, misuse, disclosure, alteration and destruction. Implementing appropriate physical and electronic procedures to help safeguard and secure personal information.

In the event of a security breach, we have in place managerial procedure to mitigate any damages to individuals affected.

Here is our simplified security process when handling security breaches (steps may not be in order):

  • Notify appropriate supervisory authority in no more than 72 hours after becoming aware of breach of users’ personal data (includes number of users whose data was exposed, nature of breach, and actions being taken to mitigate effects)
  • Identify hack and remove their code and means of access
  • Change all passwords and recover fresh backup
  • Contact all impacted users of data breach
  • Take preventative measures to prevent hack again
  • If needed, considering the need of law enforcement investigation before publically announcing the breach

We take these steps to prevent data from further being exposed and being transparent with users about security situations involving data. This process (along with privacy policy) is in accordance with EU privacy policy standards.

Children’s Privacy

Protecting the privacy of children is important to us. For that reason, we never collect or maintain information at our website from those we actually know are under 13, and no part of our website is structured to attract anyone under 13. To access and create an account, the user must be at least 18 years old.

Payments

If you choose to accept payments through a gateway like PayPal or Stripe, some of your — your customers’ — data will be passed to the respective third party, including information required to process or support the payment, such as the purchase total and your customer’s billing information.

eCommerce Sites

If you choose to conduct payments through eCommerce stores such as WooCommerce, some of your – and your customers’ – data will be passed to the respective third party, including information required to process or support the payment such as the purchase total and your customer’s billing information.

WooCommerce stores may choose to connect to email services, analytics and reporting tools, accounting software and other services to serve their customers. In doing so, they may be sharing certain data with those services.

Third Party Links

Our website may contain links to other websites provided by third parties not under our control. When following a link and providing information to a 3rd-party website, please be aware that we are not responsible for the data provided to that third party. Additionally, the inclusion of any link does not imply endorsement by DOUGLAS WOOD on this site. This privacy policy only applies to the websites listed at the beginning of this document, so when you visit other websites, even when you click on a link posted on DOUGLAS WOOD, you should read their own privacy policies and proceed at your own risk.

Third Party Companies

On this and other websites managed by DOUGLAS WOOD, some third-parties may collect personal information when a user provides information. Sites that may collect personal information are, but not limited to:

  • Google Analytics – analytics and marketing tool
  • WordPress – website creator/editor
  • Ninja Forms – email form/Wordpress plugin
  • MailChimp – email client
  • WooCommerce – eCommerce platform/Wordpress plugin
  • Infusionsoft – email automation platform/analytics

Examples of information being potentially collected:

  • Google Analytics – IP address, geographic location, online behavior/purchasing decisions
  • WordPress – IP address
  • Ninja Forms – Name, email, phone number
  • MailChimp – Name, email, phone number
  • WooCommerce – Name, gender, age, email, phone number, shipping address, tracking number/VAT
  • Infusionsoft – Name, email, phone number, email interaction behavior

Aggregated Statistics

DOUGLAS WOOD may collect statistics about the behavior of visitors to its websites via Google Analytics or other third-party analytic systems. For instance, DOUGLAS WOOD may reveal how many times a particular page was viewed, item was downloaded, or report on which plugins are the most popular, based on data gathered by Google Analytics, WooCommerce, or another third-party system. However, DOUGLAS WOOD does not disclose personally-identifying information other than as described in this policy.

Cookies

Additionally, information about how you use our website is collected automatically using “cookies”. Cookies are text files placed on your computer to collect standard internet log information and visitor behavior information. This information is used to track visitor use of the website and to compile statistical reports on website activity.

All cookies are implemented and collected by WordPress.org.

To learn more about their cookie policy, please visit their website.

Privacy Policy Changes

Although most changes are likely to be minor, DOUGLAS WOOD may change its Privacy Policy from time to time, and at DOUGLAS WOOD’s sole discretion. DOUGLAS WOOD encourages visitors to frequently check this page for any changes to its Privacy Policy. Your continued use of this site after any change in this Privacy Policy will constitute your acceptance of such change.

Contact

Please contact us if you have any questions about our privacy policy or information we hold about you by emailing doug@douglaswood.com.